Posted By

feeela on 08/01/12

Tagged

Versions (?)

Last Edited at 08/01/12 07:08pm

Statistics

Viewed 336 times

Favorited by 0 user(s)

Related snippets

passwordHash() â€“ generate salted passwords

/ Published in: PHP

Simple password hashing function without recursion using a salt, that is stored together with the password.

Highlighted TextExpand

/**
 * Generate salted password, using new salt or exiting one from the password itself.
 * 
 * @param string $plainTextPassword
 * @param string $salt default = NULL (create new salt)
 * @param int $saltLength default = 9 (the salt is the first X chars of the password hash)
 * @return string password-hash
 */
function passwordHash( $plainTextPassword, $salt = null, $saltLength = 9 )
{
	if( is_null( $salt ) )
	{
		// create new salt
		$salt = substr( sha1( uniqid( mt_rand(), true) ), 0, $saltLength );
	}
	else
	{
		$salt = substr( $salt, 0, $saltLength );
	}
	return $salt . hash( 'sha256', $salt . $plainTextPassword );
}

/* create new password */
$newPassword = passwordHash( 'plaintext_password_from_user_input', null );

/* check given plaintext password against hashed one from database */
// query the password hash from the database; $row is a single result row
if( $row['password'] == passwordHash( 'plaintext_password_from_user_input', $row['password'] ) )
{
	/* the users password was correct, login successful */
}

Report this snippet Tweet

Comments

Subscribe to comments

Comment:

You need to login to post a comment.