in reply to Storing passwords in a DB

Since you want to avoid SSL, try this. Store the passwords in the db MD5 encrypted. Use a piece of JavaScript (shudder) like this one to MD5 the user's password BEFORE it is sent back to the server. I've not tested this JavaScript code, but it doesn't appear to contain any browser dependant things.

/\/\averick
perl -l -e "eval pack('h*','072796e6470272f2c5f2c5166756279636b672');"

Replies are listed 'Best First'.
Re: Re: Storing passwords in a DB
by dstar (Scribe) on Aug 13, 2001 at 23:52 UTC
    Unfortunately, the website needs to be available to lynx and other browser users, so no javascript for me. :( I guess I'll look at SSL.