Security

[TorNix~|nR]

Hi everyone, I have a login panel script, but I doesn't have security of Forget password (email... etc)

can anyone help me?

[iPrestege]

You can use a security question to reset a password or using the serial u can use one of them . 

[Simple0x47]

Add that feature to it Make a list of questions, when it's choosed encrypt the choosed one and then when it's called on the server compare the md5 hash key's from the list with the choosed one by the user.

[Nickernator]

20 hours ago, Simple01 said:

Add that feature to it Make a list of questions, when it's choosed encrypt the choosed one and then when it's called on the server compare the md5 hash key's from the list with the choosed one by the user.

This indeed, but don't use MD5 since it isn't really safe anymore use Sha 512 for example

[Simple0x47]

I was just giving an example

[Nickernator]

7 minutes ago, Simple01 said:

I was just giving an example

Good good, was just making sure. Since I have seen before that people encrypted everything in MD5, and then database gets leaked and all the data was just gone with thanks to:

https://hashkiller.co.uk/md5-decrypter.aspx

Or any other md5 decrypter

[Simple0x47]

That decrypter can't decrypt any MD5 key. So

[RizoN]

5 hours ago, Nickernator said:

Good good, was just making sure. Since I have seen before that people encrypted everything in MD5, and then database gets leaked and all the data was just gone with thanks to:

https://hashkiller.co.uk/md5-decrypter.aspx

Or any other md5 decrypter

You cannot decrypt md5, you can just try to brute-force it by guessing it's original content and seeing if your guess' md5 and original md5 are the same

[Callum]

The most obvious method of doing a 'Forgotten my password' feature would be:

1. From the MTA server, use callRemote to trigger a PHP script
2. From the PHP script, send an email containing a link (to another PHP script) to the user's email address
3. When the link is clicked, using the other PHP script, reset the password