When you have a user’s table in your database it is bad practice to store user passwords within this table in plain text, the problem with this if anyone managed to hack your database or a mischievous employ looks at the table then they will be able to see everyone’s password.

However if we store the passwords using the MD5 Hash Function then it’s impossible to see the password, however all we can do is encrypt the users password and see if it matched the stored MD5 Function, so how do we do this:

Well we enter these commands when adding new users, and checking to see if a user’s password is correct:

Insert new User

INSERT INTO `user` (`Username`, `Pass`) VALUES ('bob.jhonny', MD5('mypassword'));

SELECT * FROM `user` WHERE username='bob.jhonny' AND pass=MD5('mypassword');

If returns null then the user password is incorrect

Reset Password

UPDATE `dlp_contatcs`.`user` SET `Pass`=MD5('NewPassword') WHERE `Username`='bob.jhonny';