Prestashop: trying to decode password

Question

i'm developing a backend in Asp.NET for Prestashop. I've a small problem: can't decode password ! Here the code

        cmd.CommandText = "SELECT * FROM ps_employee WHERE email=@email AND passwd=MD5(@pwd) AND active=1"

As you can see, i'm using MYSQL MD5 function, but ... it not work.. Password is correct, i'm sure...

Answer 1

The password hash is salted, prestashop seems to be using the value _COOKIE_KEY_ in settings.inc.php for this.

You will have to look up this value and compute the md5 hash of it and the password concatenated: md5(@COOKIE_KEY.@pwd)

Answer 2

This is a security feature built into PrestaShop. You will not be able to decode any encoded passwords.