Please help - How can I get MD5 password

[tanbui]

Hi All

Please help me about read MD5 password file, I stored MD5 password in login.txt file. How can I read it? 

Func VerifyLogin($USERNAME,$PASSWORD)
local $x = 1
If $USERNAME ="" or $PASSWORD = "" Then
    MsgBox(0,"ERROR","Please Enter a Username and Password")
    return 0
Else
    Do
        $login = filereadline(@ScriptDir & "\login.txt",$x)
        $string = stringsplit($login,"|")
        IF $string[1] = $username and $string[2] = $password Then
            return 1
            exitloop
        Else
        $x = $x + 1
        Endif
        if $login = "" then
            return 0
            exitloop
        Endif
    until $x = $x + 1
EndIf
EndFunc

Thanks.

[Jfish]

@tanbui - hello and welcome.  You should try to use code tags <> when posting to make it easier to read the code.  Also, please try to explain the exact problem that you are having.  When I create a simple text file containing one line: username|password I can read it and see what is contained within the array with the following snippet:

#include<Array.au3>
$login = filereadline(@ScriptDir & "\login.txt")
$string = stringsplit($login,"|")
_ArrayDisplay($string)

Note: I did not use the optional line parameter on filereadline which you had as $x.  No need if there is only one line ... give it a try.  My text file looks like this:

username | password

I called it login.txt and was sure to save it to the same directory as my script.

[BrewManNH]

MD5 returns a hash, you can't "de-hash" it, you have to create a hash of the entered password and compare the two hashes to see if  they match.

[tanbui]

Thank everyone...My problem is

I have a program, if you want to use it, you must login with username and password....Otherwise the username and pass will be stored on the root folder of website (ex: http://yoursite.com/login.txt). The structure of login.txt as the same Jfish said above but I will change to MD5 base on actual password ( ex: user1|MD5 password).

How can I read MD5 password in login.txt when login?

Please help me. Thank so much.

 

[Jfish]

It will look funny in its hash form.  @BrewManNH was correct when he explained you can't de-hash it back to a regular string.  It will look all weird like this: þQôãVSŠä…mØ´Üÿ.

If you want to do that then as he explained you would need to compare it in the hash form to a hash version you are storing in the app.  Otherwise, if you want to store it encrypted and then decrypt it back to a regular string then you should use _Crypt_EncryptData()  and _Crypt_DecryptData().

 

[tanbui]

You mean: I must convert MD5 to hash after that I will compare it when login right?

[J2TeaM]

You mean: I must convert MD5 to hash after that I will compare it when login right?

Yes, it's the same with the authentication process on a web page.

When an user login, you need to hash the password and compare it with the hash stored in login.txt file.

[tanbui]

Hi J2TeaM

Can you help me edit my code above to add more this code?

Thank so much.

[tanbui]

Hi All

After login, I want to write log file but the log file will be stored on website as the path http://yoursite.com/logger.txt

So, How can I do it? Please advice me.

Thanks.

[guinness]

Use PHP at the server side, send a POST request from the AutoIt application with data to the server and process at the other end using file_get_contents('php //input') to get the POST'ed data. Super trivial to do if you ask.

Oh and using a text document to store usernames and password hashes (without salts) is just plain wrong. The smart solution would be to use a backend database that you can then query. Of course the even smarter solution would be to implement a small backend API, that you can then use with your AutoIt application to querying the database, add to the database etc..

Edited July 30, 2015 by guinness