[support] How does Drupal generate the stored password

[Gordon Heydon]

Hi,

Generally manipulating Drupal from outside Drupal is not a good thing. If you do want to do this, I would recommend that you use the services module to use that to talk to Drupal. At least doing it this way it is going to do everything and all the associated things correctly.

Gordon.

On 16/03/2011, at 11:18 AM, prothero wrote:

> More:
> What I want to do is create the md5 hashed password outside of Drupal, using the values in the 'users' table. This would, presumably, include the username, email, and password. 
> 
> If this is a dangerous thing to do re corruption of my Drupal site, I'd be interested in hearing about it, too.
> 
> What I'm trying to do is integrate a shockwave movie into my Drupal site. I know there are other strategies, but I have a login system in my shockwave movie and will have to generate an md5 has to compare with the Drupal stored hash. Alternatively, I could put my shockwave content on a Drupal node that is only available to authenticated users, and skip the login. As I think about it, that seems a better approach. Then Drupal does a bunch of management that I don't need to do in Shockwave.
> 
> Thanks,
> Bill
> 
> William A. Prothero
> http://earthednet.org/
> 
> 
> 
> On Mar 15, 2011, at 4:39 PM, prothero wrote:
> 
>> I am going to manipulate the Drupal users table externally. I know that the password in Drupal 6 is generated as an md5 hash, but I'm wondering what the input to the md5 function is. Obviously, it includes the password, but what else?
>> Tnx,
>> Bill
>> 
>> 
>> William A. Prothero
>> http://earthednet.org/
>> 
>> 
>> 
>> -- 
>> [ Drupal support list | http://lists.drupal.org/ ]
> 
> -- 
> [ Drupal support list | http://lists.drupal.org/ ]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/support/attachments/20110316/ee02c992/attachment-0001.html