MySQL database security solution (5) _ MySQL

MySQL database security solution (5) The following is the PASSWORD function

Select password ('pa55word ');
+ ---------------------- +
| PASSWORD ('pa55word') |
+ ---------------------- +
| 1d35c6556b8cab45 |
+ ---------------------- +
1 row in set (0.00 sec)

The following is the ENCRYPT function.

Select encrypt ('pa55word ');
+ --------------------- +
| ENCRYPT ('pa55word') |
+ --------------------- +
| Up2Ecb0Hdj25A |
+ --------------------- +
1 row in set (0.17 sec)

Each of the above functions returns an encrypted string. To distinguish the case sensitivity of an encrypted string, it is best to define this field as a char binary type when using ENCRYPT to generate an encrypted string.

Three encryption methods are listed above, but I think using MD5 encryption is the best. This is because the plaintext password can be displayed in the processing list or query logs for easy tracking. The following INSERT statement inserts a record, and the password uses MD5 for encryption:

Insert into table1 (user, pw) VALUE ('user1', MD5 ('password1 '))

You can use the following statement to verify the password:

SELECT * FROM table1 WHERE user = 'user1' AND pw = MD5 ('password1 ')

The hash encryption method can be used to encrypt the password. with this method, the password cannot be restored to plain text.