Customer Passwords

[MunchSoft]

I was wondering what type of encryption is used on the customer passwords. I am trying to setup a seperate reseller web site which I am using ColdFusion to code. I usually use the mysql PASSWORD function to encrypt my passwords. Does anyone have any insight on this?

Thanks!

- James

[DrByte]

Zen Cart encryption uses MD5+SALT... you can see the logic in the includes/functions/password_funcs.php file in case you need to re-use that intelligence to keep passwords sync'd using same encryption methods

[MunchSoft]

I'm basically needing to read the password information from that file to authenticate a user on a different subdomain. I'm not proficient in PHP as I am in ColdFusion. So I am writing my new script in CF. I need to be able to authenticate the users using the zen database and passwords. Is this going to be possible?

[DrByte]

If you use the same logic that Zen Cart uses, translating the code into CF syntax, you'll be fine.

[MunchSoft]

Where would I find the key that is used to encrypt/decrypt the passwords?

[DrByte]

Where would I find the key that is used to encrypt/decrypt the passwords?

The answer is here:

Zen Cart encryption uses MD5+SALT... you can see the logic in the includes/functions/password_funcs.php file in case you need to re-use that intelligence to keep passwords sync'd using same encryption methods

- retrieve the password from the database
- pass the typed-in-password and the retrieved password to the zen_validate_password() function. It'll compare them and return a result.
- if it returns true, it's a match.