[FX.php List] FM accts vs. acct & password fields?
Glenn Singleton
glenn at possiblesolutions.com.au
Fri Jun 20 16:50:31 MDT 2008
Ggt,
Do you have a fm custom function to share that can crypt & decrypt PHP
crypted values ie worked together seemlessly ?
Otherwise how do you do it in Filemaker so that a crypted value in Filemaker
can be used by a web client or visa versa ?
Glenn Singleton
-----Original Message-----
From: fx.php_list-bounces at mail.iviking.org
[mailto:fx.php_list-bounces at mail.iviking.org] On Behalf Of Gjermund Gusland
Thorsen
Sent: Friday, 20 June 2008 5:43 PM
To: FX.php Discussion List
Subject: Re: [FX.php List] FM accts vs. acct & password fields?
I do that even from within Filemaker...
ggt
2008/6/20 Bob Patin <bob at patin.com>:
> I can't imagine letting a web app create FileMaker
> usernames/passwords... in a small-use situation it wouldn't be a
> problem, but with a situation where there would be hundreds of users,
> I prefer to write them to a table. Using the PHP crypt() function that
> Chris mentioned removes the security issue of having exposed
> passwords; I have a password-retrieval routine that I use with all my
> web apps, so if someone should forget their password I simply write a
> random password to their record, send it to them in an email, along with a
link that they can click to reset their password very easily.
>
> Bob Patin
> Longterm Solutions
> bob at longtermsolutions.com
> 615-333-6858
> http://www.longtermsolutions.com
> FileMaker 9 Certified Developer
> Member of FileMaker Business Alliance and FileMaker TechNet
>
> CONTACT US VIA INSTANT MESSAGING:
> AIM or iChat: longterm1954
> Yahoo: longterm_solutions
> MSN: tech at longtermsolutions.com
> ICQ: 159333060
>
> --------------------------
> Contact us for FileMaker hosting and programming for all versions of
> FileMaker PHP . CDML . Full email services . Free DNS hosting .
> Colocation . Consulting
>
> On Jun 19, 2008, at 5:18 PM, Troy Meyers wrote:
>
>> Chris,
>>
>> I second that. It's great. The only complication is that for password
>> recovery you need to make the user go through some hoops to create a
>> new one, since you have no way of telling them the old one.
>>
>> -Troy
>>
>>
>>> Not necessarily the case. If you use PHP's crypt function
>>> (http://us.php.net/manual/en/function.crypt.php ) on the password
>>> before storing it in FileMaker, you've stored a value which can be
>>> checked against, but cannot be viewed. Have a look at the function;
>>> very cool stuff.
>>
>> _______________________________________________
>> FX.php_List mailing list
>> FX.php_List at mail.iviking.org
>> http://www.iviking.org/mailman/listinfo/fx.php_list
>
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list
>
More information about the FX.php_List
mailing list