Encrypt passwords

Hello, it's any way to encrypt (md5) password of the users in the database ?

Security Assist allows for formatting of values with sha1 encryption. If you have this tool installed you would select the sha1 encryption option from the formatting menu when selecting your binding.

If you store the user password encrypted though you will need to modify how the login works, you must make sure to encrypt the value that the user enters as their password before comparing it the value stored in your db.

Hi - I'm having trouble locating the tutorial for changing both the registration and login pages for sh1 encryption. Can you provide the link here?

You can get to this info on the Security Assist support page that can be found here:

securityassist/

In the Solution Recipes section you will want to check out the Introduction to SecurityAssist. It covers these steps.

Hi Eric - I am also going through these steps in my store to encrypt my passwords. Is there a downloadable .pdf file of the Introduction to Security Assist videos found on this page? securityassist/

I'm finding these videos extremely helpful, however It's a little difficult when I'm trying to follow the step-by-step to go back to the video and replay the steps. A printout would be better.

Also - the steps you're discussing are the ones in the 04_registration.swf
Tutorial - correct?

Thanks so much for your help!

Carlene

The Solution Recipe interactive tutorials are the only versions of these that we have available. You should not be looking at just one of these but all of them in the Introduction to SecurityAssist section. They will show you the in's and out's of using Security Assist to add password encryption functionality to your site.

Hi Eric,

I've done these tutorials many times. And I'm getting the registration page to register an encrypted password - but unfortunately, I'm having problems with my Login page. I tried double clicking on the Authenticate User server behaviour (both of them). And then I did change it to encryption. But still not working.

Could you please take a look and let me know what's going on here? Or did I miss a step? I've gone through the tutorial videos multiple times here.

Thanks!

the code on this page ;looks correct for encrypted passwords.

Double check in the users table that the full encrypted password is being stored.

an encrypted password is 40 characters long, if the users table does not allow at least 40 characters, this can cause a problem.


if you still having troubles, send a copy of the registration page.

I'm attaching a copy of my registration page.

When I Register - it accepts my registration, encrypts the password (or seems to - it's just all 100 characters in the database) the verification link is sent - I clicked it and it worked (meaning the email verified and showed as verified in the database.)

However - when I then try to Log In - the login page just leaves me on the login page and doesn't enter the site at all. I'm not sure what is happening as the Registration seems to be taking because it is being recorded into the database.

I am testing locally. The store works but I need to have the passwords encrypted. I have Security Assist and Data Assist.


Much help is appreciated here!

the code in both pages looks correct, to troubleshot this a bit, use PHPMyAdmin or another MySQL GUI Tool to access your local database and use the following query:

SELECT UserEmail, UserPassword FROM ps3_users WHERE UserEmail = 'your@email.com'

where 'your@email.com' is the email you are testing login with.


please post back the results that are returned from this and the password you are testing with, this info will help to see what is going wrong.