phpass

Apache mod-auth-mysql with phpass encrypted password (Wordpress)

由 橙三吉。 提交于 2019-12-10 09:37:31
问题 I need to have password protection on some web pages outside of the main Wordpress site. The users would prefer to use the usernames and passwords they already have in the Wordpress. The obvious solution would seem to be to use the Apace module for Mysql based authentication: mod-auth-mysql. This however does not seem to be possible, because Wordpress uses Phpass password encryption, which is not supported by mod-auth-mysql. http://modauthmysql.sourceforge.net/CONFIGURE http://www.openwall

Proper salting and using PHPass

由 天涯浪子 提交于 2019-12-08 21:12:53
问题 I've been using PHPass to hash my passwords for a long time. I admit that there's still things I don't fully understand (or ignore) to hash a password properly so today I was reviewing all the info I could find about it. Reviewing PHPass documents, I've steped into this: Besides the actual hashing, phpass transparently generates random salts when a new password or passphrase is hashed, and it encodes the hash type, the salt, and the password stretching iteration count into the "hash encoding

Phpass - how to check login username and password against username and password hash in database

由 人走茶凉 提交于 2019-12-07 21:50:47
问题 I have successfully used Phpass to hash registered users passwords and store them in a database, now i am stuck on the login how to check the sumbitted username and password, checking the username exists in the database then checking the hashed password against the one given. Any help much appreciated!!! Thankyou! This is my code: <?php // Inialize session session_start(); // Include database connection settings include('config.inc'); require("PasswordHash.php"); $hasher = new PasswordHash(8,

Check WordPress hashed password with plain password

由 别等时光非礼了梦想. 提交于 2019-12-07 11:28:47
问题 I am building a external application for which user login credentials will be taken from WordPress site database table 'users' WordPress uses PHPass hashing , I am unable to validate username and password for my external application as the password in database table 'users' is hashed I am trying to check plain password with hashed password using wp_check_password function but I am failing, nothing is written back with this code <?php $password = '965521425'; $hash = '$P$9jWFhEPMfI

Apache mod-auth-mysql with phpass encrypted password (Wordpress)

由 安稳与你 提交于 2019-12-05 19:39:41
I need to have password protection on some web pages outside of the main Wordpress site. The users would prefer to use the usernames and passwords they already have in the Wordpress. The obvious solution would seem to be to use the Apace module for Mysql based authentication: mod-auth-mysql. This however does not seem to be possible, because Wordpress uses Phpass password encryption, which is not supported by mod-auth-mysql. http://modauthmysql.sourceforge.net/CONFIGURE http://www.openwall.com/phpass/ https://wordpress.stackexchange.com/questions/32004/how-to-validate-wordpress-generated

Check WordPress hashed password with plain password

由 人走茶凉 提交于 2019-12-05 17:17:53
I am building a external application for which user login credentials will be taken from WordPress site database table 'users' WordPress uses PHPass hashing , I am unable to validate username and password for my external application as the password in database table 'users' is hashed I am trying to check plain password with hashed password using wp_check_password function but I am failing, nothing is written back with this code <?php $password = '965521425'; $hash = '$P$9jWFhEPMfI.KPByiNO9IyUzSTG7EZK0'; require_once('/home/nhtsoft/public_html/project/wp-includes/class-phpass.php'); function wp

phpass returns different results

由 半腔热情 提交于 2019-12-04 06:01:01
问题 I just put my project from localhost to my host and using the same (phpass) function I receive different results and the length of the returned string is also different. (and everything works on localhost btw) So the same function returns false when online. I was wondering what the problem might be. Here's the result: Input: 12345 localhost :$2a$08$t5joFUIbEThylj/IyUVy7.WzMZm8fmKjsy0kZc/YxgqzkbYQWnlre host : $P$9QiKVfJzpRzoToBCJg8FeaDIfcAJJ61 EDIT: I switched on the TRUE flag to make password

Phpass - danger of not being able to access all passwords?

由 大憨熊 提交于 2019-12-02 19:09:58
问题 Sorry, this may be dumb, but there is something I don't understand about Phpass. If I can create a secure hashed password like this: $pwdHasher = new PasswordHash(8, FALSE); $hash = $pwdHasher->HashPassword( $password ); and later check it like this: $checked = $pwdHasher->CheckPassword($password, $hash); then that means that logically the passwords must be stored in such a way as they can only be read on a specific machine (otherwise someone could just use the "CheckPassword" function on

phpass returns different results

由 血红的双手。 提交于 2019-12-02 10:00:58
I just put my project from localhost to my host and using the same (phpass) function I receive different results and the length of the returned string is also different. (and everything works on localhost btw) So the same function returns false when online. I was wondering what the problem might be. Here's the result: Input: 12345 localhost :$2a$08$t5joFUIbEThylj/IyUVy7.WzMZm8fmKjsy0kZc/YxgqzkbYQWnlre host : $P$9QiKVfJzpRzoToBCJg8FeaDIfcAJJ61 EDIT: I switched on the TRUE flag to make password portable but still it doesn't seem to work. EDIT 2: Doesn't work with php 4 or 5 and I DID switch on

Correct implementation of PHPass

由 纵饮孤独 提交于 2019-12-01 06:00:58
问题 I'm using PHPass to store users passwords in my application because it's more secure than md5 or sha1. I have a question about how I would use a salt with the passwords. From what I gathered, I use it like this when you insert a user: $pwdHasher = new PasswordHash(8, false); $hash = $pwdHasher->HashPassword($input_password); and then when you check the users details on login, you do: $pwdHasher = new PasswordHash(8, FALSE); if ($pwdHasher->CheckPassword($input_password, $hash_from_db)) { echo
订阅 phpass