Guid in delphi

[pastra]

Hi.

I have a guid (Created by a website), that I know is generated from a string containing my username,password and perpaps the current time.

Now my question is as follows:

Is there a way to "decode" the guid and return its string value, that it is based on to begin with?


Thanks.

[Mystic]

The "GUID" is probably the result of a hash function (like MD5 and SHA1). Hash functions are one-way and not reversable.

[pastra]

Zitat von Mystic:

The "GUID" is probably the result of a hash function (like MD5 and SHA1). Hash functions are one-way and not reversable.

If we asume It is not, the how to test if its true?

[Mystic]

If the "GUID" is always the same length, it most likely is a hash. Even it is not, you need to know exactly how it was created to be able to decode it.

[Bernhard Geyer]

Can you show us this GUID (Format)?

[pastra]

Zitat von Bernhard Geyer:

Can you show us this GUID (Format)?

Yes the format is:

XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
1. Blok =8 ---- 2. Blok =4 ---- 3. Blok =4 ---- 4. Blok =4 ---- 5. Blok =12


The {} are not used...

I belive the length of the GUID remains the same allways..

[Bernhard Geyer]

I think it's a "normal" GUID.

No Username/Passwort is encoded in it. I think the Webpage uses a database to save the Username/Passwort to a GUID.

[pastra]

Zitat von Bernhard Geyer:

I think it's a "normal" GUID.

No Username/Passwort is encoded in it. I think the Webpage uses a database to save the Username/Passwort to a GUID.

1. I log in on a website (asp) by entering: username and password.
2. It then logs in.
3. a session is stated and the guid is generated.
4. every time i log out and in again it genarates a new guid

I understand what you mean by the username beeing stores in a database with a uniqe field (the GUID) value..

But I really think the username and password is in that "GUID" looking thing.

But as I read the awnser the conclution is that it is imposible?

If not, are there any ways to convert a GUID to readable chars?


Cheers!

[Mystic]

This GUID seems to be a session ID and as such can be seen as a totally random value.

[3_of_8]

The length of the GUID has 32 characters (without the -'s), so I think it's a MD5 hash. There is absolutely no possibility to find out the data without hacking the database.