Am Donnerstag, 4. Juli 2002 09:03 schrieben Sie:
> Your message cannot be posted because it appears to be either
> spam or simply off topic to our filter. To bypass the filter
> you must include one of the following words in your message:
>
> sql,query
>
> If you just reply to this message, and include the entire text
> of it in the reply, your reply will go through. However, you
> should first review the text of the message to make sure it
> has something to do with MySQL. Just typing the word MySQL
> once will be sufficient, for example.
>
> You have written the following:
>
> Am Mittwoch, 3. Juli 2002 20:06 schrieb Tobias Bengtsson:
> > how strong is
> > the PASSWORD()-funtion? is it just some crypt(3)-variant or
> > good shit?
>
> password() seems to be using some kind of one-way hashing=20
> function, probably md5 or a related function. It does take=20
> passwords of arbitrary length, and produces a password-entry
> of=20 a fixed length. Also, identical passwords used by
> different=20 users have identical encrpytions, so the user
> name or some other=20 secret or salt is not part of the hashed
> password (this is a=20 potential weakness!).
>
> Kristian


---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to