SSL or Encripted Passwords

[ScottInTexas]

I have never had to mess with secure login or encripted passwords or anything like it (and this is for me not work so I don't get to do this sort of thing often). I need to provide a log in screen but have the user's password encripted in the DB. I have the User table and a initial login name and password, but the user needs to have his/her own. Is there some function that will encode the password?

Can someone point something out to me? I couldn't find anything at W3Schools, but I may have missed it.

Sure would appreciate the help.

[raf]

Check out
http://www.codeproject.com/asp/simple_encryption.asp

but if you thing about it, encrypting ins't that much, just replacing chacacters by others based on some algorithm, and you don't need to be a genius to think up an algorithm. (so it's a mystery to me, why there are so many commercial components
And it will never get realy tested since noone sees the result of the transformation (well, if your security is tight enough). The encoded value of the value you get from the database should never be shown to the user (it's no use to him anyway since he need the original value for all ligal actions)

Remeber that after registration, you need to encrypt the password and save the encrypted form. Then, whan the user logs in, you compare the encrypted password he entered in the loginform, with the value from the db (this last value isn't treated at that time)

Encryption is only a protection agains people who get unauthorised access to the db. It doesn't help you to prevent someone from hacking into your application (this is where SSL enters the picture)