Thanks Chris. Is it exactly that MD5 function? My SQL version is 5.1.41, SELECT MD5 ('123456') returns another string, not that one. Is there anything else I've to do? On Sat, Nov 20, 2010 at 6:01 PM, Chris Nighswonger < cnighswonger@foundations.edu> wrote:

2010/11/20 Altaf Mahmud <altaf.mahmud@gmail.com>

Hi,

...

I want to know how Koha saves its borrowers' password in database? Is it one-way conversion? For example, if a password is saved as '4QrcOUm6Wau+VuBX8g+IPg', can I decode it back to its original text which was '123456'?

They are stored as MD5 hashes and you cannot "decode" them as such. IIRCC, what you must do is make an MD5 hash of the password and then compare the two hashes. They should be the same.

Kind Regards, Chris

-- Altaf Mahmud System Programmer Ayesha Abed Library BRAC University Bangladesh.