Hello, I am transferring a asp.net vp to php, I am having problem with the encryption of the old passwords. Here is an example ug1931rL0PLXIfzTYcsqkbPIyRo= Does anyone knew what encryption used here? thanks in advance
It doesn't return any legitimate string if used with base64_decode, so I doubt that's the only thing they did. However - if you have the asp-code, why not look there to see what kind of encryption they used? (If they used an encryption, that's bad practice, however - encryptions can be reversed - you don't want to have a reversible password-encryption stored - you want a one-way hash). Or, just null all the passwords, and provide users with a link, via email, to reset their passwords if they input their email for logging in.
^^ Depends on the nature of the site, but this is the way I would go. And definitely implement one way hashing.