Nifflas
  Member
Topics: 80
Replies: 1599
Registered: 05.Mar.04 |
 |
|
Bytheway, if you use one way encryption, how will you know what to display in the image without giving away the code in the html? |
Easy. Link to the picture like blah.png?code=12345 (or any other number)
The picture is a php script that does not display 12345. It displays an one-way encrypted representation of 12345. The encryption function should add something like "blahblah" to the end before actually MD5'ing, to make it impossible to figure out how it was actually encrypted.
The image will display the encrypted code, which you input in the text field, and press submit. When it is submitted, another script will of course check if your code was valid. All it needs to do, is to encrypt the code you was supposed to enter using the same function as the image script did, and compare.
Yeah, the orginal number can be seen in the html code. Yet, the problem will be figuring out how it was actually encrypted, and that is impossible. If you want to feel ridicously safe, use SHA instead of MD5, but it should make no difference.
 |
|
Latest Topics
![[167.202.196.71]](pics/ip.gif){kind=small}
