hi all, I can't use md5 because i want to retrieve it and send emails to my users if they forgot their password.. md5 is only a one way encryption, thus i have to resort to using encode('$password', '$salt') where $salt is a value that i have assigned.. because I know the value of $salt, I would be able to decode the password easily by looking at my database and running decode. with blob, i can't see the encoded password easily and thus there is 'maximum security'. haha.. but i'm still open to any form of suggestions! thanx! ----- Original Message ----- From: "Marcjon Louwersheimer" <marcjon@xxxxxxxxxxx> To: "Ng Hwee Hwee" <hhwee@xxxxxxxxxxx> Sent: Monday, March 15, 2004 4:38 PM Subject: Re: BLOB > Store the passwords using the md5() function. When inserting the password > into the database, use md5($password). It will convert the password to a > encrypted form using one way encryption. When you compare a entered > password to a password stored in the database, make the password entered > by the user md5($enteredpassword) and compare it to the raw password from > the database. Hope that helps! > -- > Marcjon > -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php