Re: another MySQL ?

[Jason Pincin <jpincin@ashtech.net>]

> to change the schema to set the password field to ASCII and move the
> enryption into CGI-space?

Not difficult at all... just require one little change on one little field in the
SQL tables ;)

> I'm also going to look at the Apache::Authen module.  If somone can tell
> me the SQL code to generate the password for comparison (I assume it's a
> one way hash like crypt() ) I might be able to hack the module.

I'm thinking yur asking for the sql command in MySQL to store a password?  It would
be something like:

update Users set password = password('testpassword');

and then to compare passwords you would do something like:

select * from Users where Handle = 'Entered Handle' and Password =
password('Entered Password');

Does that help, or is that what you were looking for?

Jason






> 
> - -- 
> Aaron Turner           | Either which way, one half dozen or another. 
> aturner@pobox.com      | Check out the Red Hat Linux User's FAQ Online!
> www.pobox.com/~aturner | http://www.pobox.com/~aturner/RedHat-FAQ/
> All emails from this account are PGP signed.  Lack of a signature is "bad".
> PGP Key fingerprint = FB E1 CE ED 57 E4 AB 80  59 6E 60 BF 45 1B 20 E8
> 
> 
> On Mon, 8 Mar 1999, Jason Pincin wrote:
> 
> > > I found reference, in the list archives that nobody/nobody will get read
> > > access to the DB.  Cool.  Anyways is there a MySQL log file?  Something
> > > that I can look at and see what the scripts are doing?
> > 
> > Sure is:
> > 
> > /home/db/vodka.linuxkb.org.log
> > 
> > Should provide ya with what you need.  ;)
> > 
> > Jason
> > 
> > 
> > 
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.2
> 
> iQCVAwUBNuRyRDM3jpXy1kJtAQFPigQAvPiIxRB/dYq/EUp9DN+XASzwAVOmk5Wb
> 1bYV2ub3eSQwocgCDyB+f4yQjJe1D+P9KRUe3i+4HanCH0LTjZBOIychiXBUWzYq
> nyBSlOS516/a38TrFu3yCZ8V9wwMw1NyY1u0S6NknMnX7X5PRCrX8YGCckeyZPOd
> HxHyWD39Nc0=
> =UpuR
> -----END PGP SIGNATURE-----
---end quoted text---