php encryption

[josefiligan]

Sir,

will you help me on how to secure my data using two way encrytion . . .

encryption
and
decryption process . . .

[phpman]

you should use a one way only. md5() is one way and it is pretty secure. if there is a decode than that just leaves the dat to be crasked.

[CornedBee]

What for?

[techgnome]

Originally posted by phpman
you should use a one way only.

Unable to decrypt encrypted data seems kinda useless.......
I think what was being asked for was a way to encrypt data so it can be stored..... then when the data is requested, decrypt it and display to the user.

[phpman]

so then expalin to me how you decrypt md5()

you can't that is why it is so popular for passwords and such.

but like cornedbeef said "for what?"

[josefiligan]

Sir!

I usually need the two way encryption for security reason on my database, because I want to encrypt the data inside my database mostly the user's table. . .

any recommendations? Sir!

Because one thing Im concerned for is the when I use md5() function I the user can't decrypt the his/her record when she or he log-in in the system because his record most epecially his password is encrypted already.

[The Hobo]

Originally posted by josefiligan
Sir!

I usually need the two way encryption for security reason on my database, because I want to encrypt the data inside my database mostly the user's table. . .

any recommendations? Sir!

Because one thing Im concerned for is the when I use md5() function I the user can't decrypt the his/her record when she or he log-in in the system because his record most epecially his password is encrypted already.

Is the only record that is being encrypted a password field? If so, why would they need to see this information?

[CornedBee]

Could you please explain in much detail what you are trying to do?

[MidgetsBro]

One-way encryption, like MD5 works because the way they compare passwords is to MD5 your input and then compare it to the aleady MD5ed password that is in the database. That is why websites like this don't just give you your password when you lose yours, it has to reset it to something and send you that so you can log in and change it. You will need to find some other way to encrypt data if you want to decrypt it later.