Reply to thread

Message

<blockquote data-quote="Ecko" data-source="post: 260317" data-attributes="member: 24874">note u should be using php 5.3 or above[php]class bcrypt {&nbsp; &nbsp; &nbsp; &nbsp; private static $algorithm = '$2y$';&nbsp; &nbsp; &nbsp; &nbsp; private static $cost = '10';&nbsp; &nbsp; &nbsp; &nbsp; // check if bcrypt() is usable&nbsp; &nbsp; &nbsp; &nbsp; public static function isAvailable() {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return defined('CRYPT_BLOWFISH') &amp;&amp; CRYPT_BLOWFISH;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; public static function salt() {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (function_exists('openssl_random_pseudo_bytes'))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return substr(strtr(base64_encode(openssl_random_pseudo_bytes(22)), '+', '.'), 0, 22);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return substr(strtr(base64_encode(mt_rand()), '+', '.'), 0, 22);&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; // let's hash&nbsp; &nbsp; &nbsp; &nbsp; public static function hash($password) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; // bcrypt algorithm depending on PHP version&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (version_compare(PHP_VERSION, '5.3.7', '&lt;'))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; self::$algorithm = '$2a$';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return crypt($password, self::$algorithm . self::$cost . '$' . self::salt());&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; // check password against hash&nbsp; &nbsp; &nbsp; &nbsp; public static function checkPassword($hash, $password) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $new_hash = crypt($password, $hash);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return ($hash == $new_hash);&nbsp; &nbsp; &nbsp; &nbsp; }}[/php]now check $password (based on $_POST input):[php]if (bcrypt::checkPassword($hashFromDatabase, $password))&nbsp; &nbsp; echo 'Password correct';else&nbsp; &nbsp; echo 'Password incorrect';[/php]</blockquote>

[QUOTE="Ecko, post: 260317, member: 24874"] note u should be using php 5.3 or above [php] class bcrypt { private static $algorithm = '$2y$'; private static $cost = '10'; // check if bcrypt() is usable public static function isAvailable() { return defined('CRYPT_BLOWFISH') && CRYPT_BLOWFISH; } public static function salt() { if (function_exists('openssl_random_pseudo_bytes')) return substr(strtr(base64_encode(openssl_random_pseudo_bytes(22)), '+', '.'), 0, 22); else return substr(strtr(base64_encode(mt_rand()), '+', '.'), 0, 22); } // let's hash public static function hash($password) { // bcrypt algorithm depending on PHP version if (version_compare(PHP_VERSION, '5.3.7', '<')) self::$algorithm = '$2a$'; return crypt($password, self::$algorithm . self::$cost . '$' . self::salt()); } // check password against hash public static function checkPassword($hash, $password) { $new_hash = crypt($password, $hash); return ($hash == $new_hash); } }[/php] now check $password (based on $_POST input): [php] if (bcrypt::checkPassword($hashFromDatabase, $password)) echo 'Password correct'; else echo 'Password incorrect';[/php] [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members