MySQL problems since upgrade - Password Hahing

drs2004 · 18th October 2007, 04:43 PM

Hi,

I'm having problems using the MySQL PASSWORD function since the upgrades. I have read a few articles and I'm still not getting anywhere. I have a website with over 200 users, all of which have hashed passwords.

I reset my own password and notice that the hash is longer than the older passwords, since the upgrade. If I change my password to plain text, and remove the PASSWORD function from the query, I can log in successfully.

I have pasted in the code where the DB is queried.

PHP Code:

  // Login query

$query = "SELECT user_id, first_name FROM users WHERE username='$u' AND password=PASSWORD('$p')";

PHP Code:

  // Set password query

$query = "UPDATE users SET password=PASSWORD('$p') WHERE user_id=$uid";

Can you please advise on how I need to query the database since the upgrade to version 4.1.20?

Many thanks,
Daryl

Euge · 18th October 2007, 04:56 PM

See this:
MySQL AB :: MySQL 5.0 Reference Manual :: 5.7.9 Password Hashing as of MySQL 4.1

I scanned it briefly and saw you might be able to utilize the function OLD_PASSWORD

drs2004 · 18th October 2007, 05:04 PM

Hi Euege,

Yeah I tried that one last night, no joy!!

Daryl

drs2004 · 18th October 2007, 06:48 PM

hey, I retested with the OLD_PASSWORD function......it works!!!