User's module controlling

[xfuture]

I wish to know which DB tables are controlling user's permission ?
is that acl_actions ?

[bands]

Hi

yes ,

acl_actions,acl_Roles,acl_roles_actions,acl_roles_ users

Thanks
BSK

[xfuture]

Thanks for the reply bands....

but the ID column are encrypted in some way...
do you mind telling me how's the encryption done ?

[cywolf]

The IDs aren't encrypted, they're just long and alphanumeric.

[xfuture]

How do we know how they change the actual alphabetic become those number ?
and account password is using hash ? or encryption ?

sorry.. a newbie here..

[cywolf]

You can look at the method create_guid() in include/utils.php to see how the IDs are generated.

The user password (user_hash column) is stored as an MD5 hash.

[balajimani]

You can look at the method create_guid() in include/utils.php to see how the IDs are generated.

The user password (user_hash column) is stored as an MD5 hash.

Hi,

May i know what kind of encryption used in Encrypting the ID for each table and what basis the ID is
generated....?

Thanks and Regards,
Balaji

[andopes]

Hi,

May i know what kind of encryption used in Encrypting the ID for each table and what basis the ID is
generated....?

Thanks and Regards,
Balaji

Hi balajiman

As Andrew Whitehead specified before it is a MD5 encrypting algorithm.
Take a look at the method create_guid() in the include/utils.php to know more about it or make a google search to understand its concepts.

Cheers

[balajimani]

Hi balajiman

As Andrew Whitehead specified before it is a MD5 encrypting algorithm.
Take a look at the method create_guid() in the include/utils.php to know more about it or make a google search to understand its concepts.

Cheers

Hi Andrew,

Thanks for you information. May I know what encryption used in encrypting the IDs and what kind of data encrypted for IDs(either like 1, 2, 3 or combination of someother). Please help in this regards.

Thanks and Regards,
Balaji.M

[crmsiva]

The below is the code used for id generation. As told in the previous posts, there is no encrpytion involved in this.

function create_guid()
{
	$microTime = microtime();
	list($a_dec, $a_sec) = explode(" ", $microTime);

	$dec_hex = sprintf("%x", $a_dec* 1000000);
	$sec_hex = sprintf("%x", $a_sec);

	ensure_length($dec_hex, 5);
	ensure_length($sec_hex, 6);

	$guid = "";
	$guid .= $dec_hex;
	$guid .= create_guid_section(3);
	$guid .= '-';
	$guid .= create_guid_section(4);
	$guid .= '-';
	$guid .= create_guid_section(4);
	$guid .= '-';
	$guid .= create_guid_section(4);
	$guid .= '-';
	$guid .= $sec_hex;
	$guid .= create_guid_section(6);

	return $guid;

}

function create_guid_section($characters)
{
	$return = "";
	for($i=0; $i<$characters; $i++)
	{
		$return .= sprintf("%x", mt_rand(0,15));
	}
	return $return;
}

function ensure_length(&$string, $length)
{
	$strlen = strlen($string);
	if($strlen < $length)
	{
		$string = str_pad($string,$length,"0");
	}
	else if($strlen > $length)
	{
		$string = substr($string, 0, $length);
	}
}