password-protection

Standardizing of password strength algorithm

Last couple of months I've been wondering about all these password strength meters on websites. If you use the same password in every of those registration forms, the result on meter is sometimes different. One say "Strong" other say "Normal" and there are probably some that would even say "Weak". So the question is, what if there would...

Checking 3 random letters from a hashed password

I have a system where I salt and hash passwords before saving them to the database, using FormsAuthentication in asp.net What I want to do is, rather than ask the customer for their password each time, I just want 3 random letters from their password. How can I compare this to the hash in the database? Will hashing still work in this ca...

Which password encoder for Spring Security's DaoAuthenticationProvider: MD5 or SHA-256?

Title says is it all. Is there any real difference between the two? ...

how to read password protected excel in python

I'm new to python programming, and I am trying to read a password protected file using python, the code is shown below: import sys import win32com.client xlApp = win32com.client.Dispatch("Excel.Application") print "Excel library version:", xlApp.Version filename,password = 'C:\myfiles\foo.xls', 'qwerty12' xlwb = xlApp.Workbooks.Open(fi...

How do I safely store a password in a file??

My program requires password to open some features. The password can be set by an administrator. My app stores the password in a file. But, if the file was deleted or damaged, the app loose the password. Another scenario is if the file was replaced with original file then the password will be empty. Any suggestions about storing a passwo...

C# - Server-side password protection

Hi there, I am writing two console applications, a client and a server. I'm a little stuck at two things, which seemed rather easy at first.. #1: I want to write a function for the following piece of code, that converts bits to a string, but I cant just figure it out. The server always crashes when I use it. My function is a little bit...

.htaccess multiple authorization for sub-child directories

I'm looking to edit my .htaccess file to control AuthTypeBasic for it's own directory and child directories differently. I currently have password protection (AuthType Basic) set up on the a folder and would like to set up some of the children directories to be exempt from this password protection and other child directories to have uni...

Forbid access to files in a simple PHP login system

Hi guys! I wrote this VERY simple PHP login system: <?php session_start(); $error = ''; if (isset($_POST['username']) && isset($_POST['password'])) { if ($_POST['username'] == 'user' && $_POST['password'] == 'pass') { $_SESSION['client'] = 'ok'; Header ("location: /kit/kit/index....

Is it insecure to pass initialization vector and salt along with ciphertext?

I'm new to implementing encryption and am still learning basics, it seems. I have need for symmetric encryption capabilities in my open source codebase. There are three components to this system: A server that stores some user data, and information about whether or not it is encrypted, and how A C# client that lets a user encrypt the...

How to encrypt your files online so no one can use it in future?

I know it may sound silly, but i worked for a client that seems not willing to pay me, but is making money with his website...i still have access to the ftp...so, i'm not going to tear down the website if he doesnt pay, but i would at least protect my code that i gave him...so in case i'm sure that he cant resell or use again... ...

PHP Password Encryption Handling

I have a password being passed from my iPhone app to the database via a php script, user.php. The variable $pass is populated by the following: $pass = str_replace("'", "", $_REQUEST['pass']); How can I encrypt this before it's inserted into my database? I've read a little about the different techniques, but looking for the best way ...

Convert text passwords in database to hashed passwords?

In my database I have over 600 users. The passwords were previously stored as plain text (slap on hand, I know). Anyways, I have changed my code to store STA1 hashed passwords, but I need to convert the existing passwords in my database so each user doesn't need to go in and modify their account. Any help? ...

What is a simple way to lock the content of a webpage?

For example, just requiring a user name foo and password bar, or user name foo, and the password is today's date, take day of month (such as the 16 in Oct 16), multiply by 2 and repeat twice, which is 3232? ...

Password recovery with sha1 password hashing

I'd like to implement a forgot password function for my website. I hash the passwords using sha1. How would I recover this for the user? What's the best method for implementing this? ...