crypt() and salt question.

[mbaranski]

I'm trying to write a verification program for a web page, and it'll use crypt for a password. Do I have to save the salt that people use, or is there a way to get it from the password that they enter? Or, is it acceptable to use their password as the salt? I could use a little advice here...

Disclaimer:
Beware: Studies have shown that research causes cancer in lab rats.

 

[tsdragon]

The salt is actually saved as part of the encrypted password (the first two characters if you use a two character salt). To check a password against the encrypted password, just use the encrypted password as the salt for encrypting the plain-text password.
Meddle not in the affairs of dragons,
For you are crunchy, and good with mustard.