[SOLVED]

[prismatix]

I'm creating a small cms and I want to use the prestashop logins to access the cms I am creating. I have this piece of code.

if ($_POST)
{
   connectBD();
   $email = mysql_real_escape_string($_POST["email"]);
   $passwd = mysql_real_escape_string($_POST["passwd"]);

   if ($email == "" || $passwd == ""){
       $erro = "Introduza o seu nome de administrador e password!";
   }
   else {

       $SQL = 'SELECT * FROM ps_employee WHERE email="' . $email . '"'; 

       $result = mysql_query($SQL);
       $row = mysql_fetch_array($result);

       if(mysql_num_rows($result)!=0){
           if (md5($passwd)==$row['passwd']){
               session_start();
               $_SESSION["admin"] = $email;
               header("Location: inicio.php");
               exit;
           }
           else {
               $erro = "Email / Password errados!";
           }
       }
       else {
           $erro = "Email / Password errados!";
       }
   }
}

The problem is the password encryption. How can a solve this?

[rocky]

The problem is this line:

if (md5($passwd)==$row['passwd']){

It should be:

if (md5(_COOKIE_KEY_.$passwd)==$row['passwd']){

PrestaShop salts passwords with the cookie key. Once you've done that, the passwords should work.

[prismatix]

thanks! it's working!