Re: PEAR Auth, File_Passwd, and crypt() limitation?

From:	Tomas V.V.Cox	Date:	Thu, 14 Apr 2005 09:13:00 +0000
Subject:	Re: PEAR Auth, File_Passwd, and crypt() limitation?
References:	1 2 3 4 5 6	Groups:	php.pear.dev
Request:	Send a blank email to pear-dev+get-37232@lists.php.net to get a copy of this message

Michael Wallner wrote:

Hi Tomas V.V.Cox, you wrote:
Use the apr_md5 instead from File_Passwd (typing "foo" as pass):

Interesting is that using PHP4, passwords does not match. A bug in File_Passwd::crypt_apr_md5()?
They don't?

They don't for me

htpasswd    -> apache2.0.50
php         -> 4.3.10
php5        -> 5.0.3

File_Passwd -> 1.1.3 # htpasswd -nmb foo foo foo:$apr1$oLi3v/..$vbsyoYIY12peTjKHZyodP1 foo.php ------- <? require 'File/Passwd.php'; echo File_Passwd::crypt_apr_md5('foo',

        '$apr1$oLi3v/..$vbsyoYIY12peTjKHZyodP1') . "\n";

?> # php foo.php $apr1$oLi3v/..$6GcR35UrvNgGh6Nf9D.WO. # php5 foo.php $apr1$oLi3v/..$vbsyoYIY12peTjKHZyodP1 What the hell? :) Tomas V.V.Cox