MD5 to SHA1 Encryption

I have a database of registered/subscribed users on a website (approx. 300) from an old site built in Adobe Dreamweaver Developers Toolbox. It used MD5 Encryption to encode the passwords.

I need to convert this database table to use with their new site (built with WebAssist).

Does anyone know a method of converting the old MD5 encrypted passwords into SHA1 encrypted passwords? Anyone else had to deal with this issue?

Converting the MD5 encrypted password to SHA1 is not possible.
to be able to convert the MD5 password to SHA1, you would first need to be able to decrypt it. both MD5 and SHA1 are 1 way encryption schemes, meaning that they cannot be decrypted.

one way to handle this would be to have a new password column in your user table to store the SHA1 values to, and an old password column that you will store the md5 password from the old database.

On the login page, create a lookup recordset to find the entered email address and the return the old password column.

If a record is returned, and the old password column is not blank, send them to an update password page where they can enter a new password and have it sha1 uncrypted.

you would want to have them enter the email address again, the old password and the new password, use a lookup recordset again for verification before preforming the update.

It will take some expirience with using encryption, hand coding PHP and creating recordsets to get this functional, if you need hands on assistance with this, I would suggest signing up for a premier ticket.

Jason,

Thanks for the reply. Sounds like people have dealt with this before.

My situation isn't that critical to move over the accounts. More important to just keep the email addresses, and I already have those.

I will not pursue this, but glad to know you guys have a method of doing so if I need to with another client's site.

THanks again.

-D.

You're welcome.