note 33161 deleted from function.crypt by aidan
| From: | aidan@php.net | Date: | Mon, 05 Jul 2004 10:29:21 +0000 |
| Subject: | note 33161 deleted from function.crypt by aidan | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-72594@lists.php.net to get a copy of this message | ||
Note Submitter: webmaster@woodydrn.com
----
I don't know what people are talking about ... two first chars in the password ? nooo ...
What you do is first create a password with crypt:
$passwd = crypt("testing");
now $passwd will have something like:
$1$/33Tmd.m$TFPkxx6N5em0u.5lcgy1I1
This is devided up:
md5 hash salt real password cryptet with salt
$1$ /33Tmd.m $ TFPkxx6N5em0u.5lcgy1I1
So now when you check for password, just read the org. password, break it up and get the salt.
Encrypt password with salt, and compare it with org. encrypted password.