Password encryption

Posted: Sun Dec 21, 2008 5:42 am

What standard is used to generate passwords? I thought it was md5, but when I 'google' for md5 password generator, and use any one of the sites listed, the passwords do not work. But if I generate a password through RN admin auth by adding an admin of testing, that password does not match the others I generated using the aforementioned pw scipts.

For example:

Using this site Only registered users can see links on this board! Get registered or login!:a password of testing comes out as ae2b1fca515949e5d54fb22b8ed95575.

Adding an admin through the RN admin cp and changing the password to testing, then building the staccess file generates this: $1$RhwxlwfR$r0wRKE86txtjUyUbJgpBf.

When I try to log in as an admin using the first this in staccess testing:ae2b1fca515949e5d54fb22b8ed95575, it fails, but the second one (testing:$1$RhwxlwfR$r0wRKE86txtjUyUbJgpBf.) works.

I have not been able to find a stand alone script that will generate encrypted passwords that work in staccess or htpasswd.

Suggestions on where to look?

Posted: Sun Dec 21, 2008 6:20 am

Can I ask why you want to do this?

Posted: Sun Dec 21, 2008 7:06 am

I believe the staccess password also uses a salt, timestamp or both in building a variable before to whole thing is md5'd.
Need proof? Put your password into the user password field in nuke_users using phpMyAdmin and and then select md5 on the field - I bet it doeasn't match the string using in staccess for the same plain text password Wink

Posted: Sun Dec 21, 2008 2:39 pm

jakec, I wanted to create an htaccess and staccess file to protect a particular folder on a non-phpnuke website.

Posted: Sun Dec 21, 2008 2:42 pm

If you are using cPanel then you can do it through that.

Posted: Sun Dec 21, 2008 2:49 pm

That website is on a dedicated linux server which does not use cpanel or any other cp.

I do have cpanel on another server, so I guess I could set up a dummy site and use cpanel to create passwords for the one that doesn't have cpanel.

I was hoping there was an easier way to do it.

Posted: Sun Dec 21, 2008 3:23 pm

Have a look at this post: http://www.ravenphpscripts.com/posts2950-start-0.html

Posted: Sun Dec 21, 2008 10:00 pm

I guess I am too ignorant to get that script to work. I can just do it the long way. I know how to do that and it works for me. Thanks for your help, though.

registered · Posted: Mon Dec 22, 2008 12:52 am

It depends on how Apache is set up
http://httpd.apache.org/docs/2.2/misc/password_encryptions.html

Posted: Mon Dec 22, 2008 5:39 am

Quote:

I guess I am too ignorant to get that script to work. I can just do it the long way. I know how to do that and it works for me.

Doulos
If you are still interested mine works well I believe and I can send you the link to my testsite via PM.

Posted: Mon Dec 22, 2008 12:35 pm

Thanks, Susann. I would appreciate any help.

Posted: Mon Dec 22, 2008 1:17 pm

Merry christmas !

RavensScripts