galleryadd.pl and hashed passwords

vauneen

Joined: 2005-10-14
Posts: 8
Posted: Wed, 2005-12-28 11:07

Hi all,
I'm a bit stuck with passing variables to galleryadd.pl.
I'm automating the process of adding pics to specific users' albums. (they are ftp-ed to the server)
I have the user's id number and can pull the username and password from the database to pass to galleryadd.pl.
But the password is hashed. (theres no way to unhash is there?)
I dont want to have to change it, is there anyway i can get around this?

I could add the pics to their album but with the administrator as the owner, but thats not ideal either.

am i missing a basic solution? does anyone have any ideas? any help appreciated, Vauneen
 
valiant

Joined: 2003-01-04
Posts: 32509
Posted: Wed, 2005-12-28 20:56

hash methods are defined as non-reversable functions.
so there's no way to get the unhashed password from the hash. of course there are brute force attacks, so you might get a value that evals to the same hash maybe in an hour with a good brute force attack script.

in g2, you can change the ownership after you have added the items.
edit permissions -> change owner.
 
vauneen

Joined: 2005-10-14
Posts: 8
Posted: Wed, 2005-12-28 21:27

Thanks Valiant.
I'll look into creating the items as the admin person, then changing ownership.
Vauneen