LiveDocs Comments - coldfusion - 7 - htmldocs - 00000503.htm

coldfusion/7/htmldocs/00000503.htm

2008-05-29T13:34:25

Just a note for people comparing hashes with other languages, the hash() function returns an uppercase hex string whereas a lot of other languages will return a lowercase hex string

so if you try
toBase64(Hash('apple','SHA'))

and try to match it with php code
base64_encode(sha1('apple'));

you'll need to change your code too
toBase64( LCase( Hash('apple','SHA') ) )

coldfusion/7/htmldocs/00000503.htm

halL — 2008-04-02T14:30:15

The documentation is unclear. MD5 and CFMX_COMPAT both use the MD5 algorithm, so they are both, effectively, the default.

coldfusion/7/htmldocs/00000503.htm

2008-03-24T06:59:09

In the documentation, it says both the CFMX_COMPAT and MD5 algorithms are default.

coldfusion/7/htmldocs/00000503.htm

ASandstrom — 2007-02-05T13:40:15

Thanks for the info - I've updated the doc for the next release of ColdFusion.

coldfusion/7/htmldocs/00000503.htm

Zoramite — 2007-02-05T12:41:33

On a editorial note, you have the text: 'This table has the following three entries:' when there are only two entries in the table listed.

coldfusion/7/htmldocs/00000503.htm

Hallow — 2006-01-07T15:26:56

The numbers in the docs appear to be correct for base64 encoded data. For example, a raw binary SHA hash is 20 chars. HEX is 40 chars. Base64 is 28chars. You can convert from HEX to Base64 (which is required by LDAP for example), like so:

base64SHA = toBase64(binaryDecode(hash(form.myPassword,'SHA-1'),'hex'));

coldfusion/7/htmldocs/00000503.htm

sthompson — 2005-11-03T22:41:26

The docs are wrong about how big the returned strings are. I ran the following code below and these are the results I got.

Hash("This is a string to hash", "MD5") - 32 characters
Hash("This is a string to hash", "SHA") - 40 characters
Hash("This is a string to hash", "SHA-256") - 64 characters
Hash("This is a string to hash", "SHA-384") - 96 characters
Hash("This is a string to hash", "SHA-512") - 128 characters

coldfusion/7/htmldocs/00000503.htm

BOBCAMPBELL — 2005-04-06T14:54:50

The point was twofold. One the sample did not work and two, the documentation was not accurate. I received a very quick response from MM, it will be noted for the next version of the documentation.

coldfusion/7/htmldocs/00000503.htm

override11 — 2005-04-06T13:24:13

I think everyone is missing the point... this is not supposed to be a cookie-cutter code sample, its supposed to show you how to use the hash() function. I think it does that just fine =)

coldfusion/7/htmldocs/00000503.htm

jrunrandy — 2005-03-16T07:12:32

In addition to the CF_SQLCHARVAR problem,
the specified userID/pw combinations don't seem to work. I opened the securedata database table
and found two more users, both of which worked for me: blaw, with password blaw and dknob with password
dknob.

Hope this helps.

coldfusion/7/htmldocs/00000503.htm

BOBCAMPBELL — 2005-03-16T01:12:04

Thanks! I thought that was really going to fix it! But no such luck. The results are the same, "User ID 12 or password is not valid. Try again. " I wonder if it has something to do with jsessions?

coldfusion/7/htmldocs/00000503.htm

Mechro — 2005-03-15T11:33:48

Um...the problem you fellas are having with the example is because the cfqueryparam cfsqltype attribute is "CF_SQL_CHARVAR" in the code example.

Try CF_SQL_VARCHAR and see how it works.

coldfusion/7/htmldocs/00000503.htm

BOBCAMPBELL — 2005-03-12T03:32:56

Note: When I said it worked fine I was mistaken. I'm using Dreamweaver and it worked without cfqueryparam when tested inside the Recordset wizard box by clicking the Test button and entering 12. It returned the right recordset.
Either way it does not work when tested in the browser. Bob

coldfusion/7/htmldocs/00000503.htm

bob2cam — 2005-03-11T07:43:08

I've copied the Hash example code to cfm page. When I attempt to run the page, I get a "sql missing operator error". If I remove the cfqueryparam from the WHERE statement and just use WHERE UserID = '#FORM.UserID# ' it works fine. Can someone explain how I would use the cfqueryparam in this type of situation?