Hey guys. I am playing around with md5() for a login script. I have it setup now where when you register it submits $password=md5($row['pass']); to the database and then when you login it checks if strtoupper($password)==strtoupper(md5($_POST[pass]))

The problem is I always get different results :P.

So to make things simple I had it submit md5("hello"); into the database when I registered and then when Im on the login page it just retrieves the password from the database and compares it to md5("hello"); on the login page.

But its still different. What stupid mistake am I doing today?

I can't figure it out from what you've provided, but if you give a code snippet, that might help. Also, you don't need to use strtoupper, just comparing the md5() result should suffice.

Yer.. Drop the strtouppers. Run this...

PHP Code:

<?php
if (md5('hello') == md5('hello'))
{
print 'success';
}
else
{
print 'failure';
}
?>

If success comes out it's getting messed up somewhere in your database otherwise wow.. Somethings seriously wrong with your server..

Are you sure that $row['pass'] is absolutely the same as $_POST['pass']?

Why use strtoupper?