Re: Wordpress password encryption decrypt with ColdFusion

2011-08-25 Thread Billy Cravens 

Yeah, I only quickly glanced at the docs 
(http://help.adobe.com/en_US/ColdFusion/9.0/CFMLRef/WSc3ff6d0ea77859461172e0811cbec22c24-7c52.html)
 - it lists CFMX_COMPAT as the default, but that's the same as MD5.

Billy Cravens
bdcrav...@gmail.com



On Aug 25, 2011, at 4:07 PM, Cameron Childress wrote:

> 
> On Thu, Aug 25, 2011 at 3:00 PM, Billy Cravens  wrote:
> 
>> Didn't think about that - you'd have to specify the algorithm:
>> 
>> hashedPw = hash(form.password, 'MD5')
>> 
> 
> Nope.  MD5 is the default. hash(form.password) will work just fine.
> 
> -Cameron
> 
> -- 
> Cameron Childress
> --
> p:   678.637.5072
> im: cameroncf
> facebook  |
> twitter |
> google+ 
> 
> 
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:347020
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Wordpress password encryption decrypt with ColdFusion

2011-08-25 Thread Russ Michaels 

Look in your wordpress config file and u will find the key.
On 25 Aug 2011 17:57, "Joel Black"  wrote:
>
> I have a website I am building that will be a 2 piece solution. It will
have a blog built with Wordpress, but the main website and store will be
built with ColdFusion. We want the user to be able to log into the blog, and
log into their shopping cart with the same username and password.
>
> So my question is how do I decrypt the password from the Wordpress style
encryption. Also, I will have to encrypt the password to the Wordpress style
if a user registers for an account in the checkout process.
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:347019
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Wordpress password encryption decrypt with ColdFusion

2011-08-25 Thread Cameron Childress 

On Thu, Aug 25, 2011 at 3:00 PM, Billy Cravens  wrote:

> Didn't think about that - you'd have to specify the algorithm:
>
> hashedPw = hash(form.password, 'MD5')
>

Nope.  MD5 is the default. hash(form.password) will work just fine.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook  |
twitter |
google+ 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:347018
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Wordpress password encryption decrypt with ColdFusion

2011-08-25 Thread Billy Cravens 

Didn't think about that - you'd have to specify the algorithm:

hashedPw = hash(form.password, 'MD5')

When I get a chance, I'll test it against my Wordpress install.

Billy Cravens
bdcrav...@gmail.com



On Aug 25, 2011, at 12:35 PM, Cameron Childress wrote:

> 
> On Thu, Aug 25, 2011 at 1:07 PM, Billy Cravens  wrote:
> 
>> Not really possible - it's not encrypted, it's an MD5 hash.
> 
> 
> I odn't know if WordPress uses a hash, but if it does - you can absolutely
> authenticate against that using ColdFusion's Hash() function.
> 
> hashedwordpresspassword = readWordPressPasswordFromDisc();
> 
> if(hash(form.password) eq hashedwordpresspassword) {
>  return good login;
> } else {
>  return bad login;
> }
> 
> oAuth would work too, but will be much much more work.
> 
> Much.
> 
> -Cameron
> 
> -- 
> Cameron Childress
> --
> p:   678.637.5072
> im: cameroncf
> facebook  |
> twitter |
> google+ 
> 
> 
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:347015
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Wordpress password encryption decrypt with ColdFusion

2011-08-25 Thread Cameron Childress 

On Thu, Aug 25, 2011 at 1:07 PM, Billy Cravens  wrote:

> Not really possible - it's not encrypted, it's an MD5 hash.


I odn't know if WordPress uses a hash, but if it does - you can absolutely
authenticate against that using ColdFusion's Hash() function.

hashedwordpresspassword = readWordPressPasswordFromDisc();

if(hash(form.password) eq hashedwordpresspassword) {
  return good login;
} else {
  return bad login;
}

oAuth would work too, but will be much much more work.

Much.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook  |
twitter |
google+ 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:347010
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Wordpress password encryption decrypt with ColdFusion

2011-08-25 Thread Joel Black 

Billy, thank you for that.  Instead of trying to make 1 use the others system, 
try and make them both use a 3rd system.  Im going to look into that. 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:347009
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Wordpress password encryption decrypt with ColdFusion

2011-08-25 Thread Billy Cravens 

Not really possible - it's not encrypted, it's an MD5 hash. You'll find plenty 
of links on how to *reset* the password (as the generous Google URL 
copy-and-paster provided), but that's not what you're asking for. There are 
ways to "crack" a password, if you have a large enough MD5 hash database, but 
that's not a good approach.

Your better approach is to convert the Wordpress to use a single sign on 
solution, such as oAuth. There are a number of WordPress plugins for this.

Billy Cravens
bdcrav...@gmail.com



On Aug 25, 2011, at 11:56 AM, Joel Black wrote:

> 
> I have a website I am building that will be a 2 piece solution.  It will have 
> a blog built with Wordpress, but the main website and store will be built 
> with ColdFusion.  We want the user to be able to log into the blog, and log 
> into their shopping cart with the same username and password. 
> 
> So my question is how do I decrypt the password from the Wordpress style 
> encryption.  Also, I will have to encrypt the password to the Wordpress style 
> if a user registers for an account in the checkout process. 
> 
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:347008
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Wordpress password encryption decrypt with ColdFusion

2011-08-25 Thread Gerald Guido 

http://www.google.com/search?num=50&hl=en&rlz=1B3GGLL_enUS394US394&q=decrypt+Wordpress+password+&oq=decrypt+Wordpress+password+&aq=f&aqi=g1g-b2g-bm1&aql=&gs_sm=e&gs_upl=1206l6426l0l7484l3l3l0l0l0l0l134l298l1.2l3l0

That should get you started.

HTH
G!

On Thu, Aug 25, 2011 at 12:56 PM, Joel Black wrote:

> decrypt the password from the Wordpress




-- 
Gerald Guido
http://www.myinternetisbroken.com

-- We all shine on.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:347007
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Wordpress password encryption decrypt with ColdFusion

2011-08-25 Thread Joel Black 

I have a website I am building that will be a 2 piece solution.  It will have a 
blog built with Wordpress, but the main website and store will be built with 
ColdFusion.  We want the user to be able to log into the blog, and log into 
their shopping cart with the same username and password. 

So my question is how do I decrypt the password from the Wordpress style 
encryption.  Also, I will have to encrypt the password to the Wordpress style 
if a user registers for an account in the checkout process. 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:347006
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm