CODEWITHSUNDEEP
mysqlpasswordsmd5login-script
John Thompson
John Thompson

Reputation: 1

Passwords are not md5 or changing despite different entries

For some reason MySQL is putting all passwords as the same even after md5 and using the password('$md5_password').

Let's say the password is abc123 the password stored in mysql is 11ab5e691dcc370b. But when I try to save a password of frogs the password stored is 11ab5e691dcc370b, which is the same. I have the same script on other databases and is working flawlessly.

The above would explain why no one is logging in unless I hard set the 11ab5e691dcc370b password. Then others can login.

The mysql user has full rights.

Upvotes: 0

Views: 266

Answers (2)

ta.speot.is
ta.speot.is

Reputation: 27214

I used Google to reverse 11ab5e691dcc370b. It seems to be the hash of d41d8cd98f00b204e9800998ecf8427e, which is an MD5 of a blank string.

You might want to check the code that actually calls md5.

Upvotes: 2

Ben Swinburne
Ben Swinburne

Reputation: 26477

Assuming PHP based on the $md5_password in your question

Use double quotes or remove them completely.

md5($password);

If you use single quotes it will literally hash the string $password

md5('$password');

See this page on string literals http://www.php.net/manual/en/language.types.string.php#language.types.string.syntax.single

Upvotes: 0

Related Questions