Testing if string is sha1 in PHP

问题:

I'm planning on storing the passwords as a sha1, so I need a way to validate that it is a sha1 at another point in my website. I was planning on using preg_match, but I do not know how to make regex patterns. Could someone help me out with one?

Thanks

Edit: I am not trying to see if two hashes match.

回答1:

Actually, you can use preg_match() to make sure it's a 40 characters hexadecimal string as such:

function is_sha1($str) {     return (bool) preg_match('/^[0-9a-f]{40}$/i', $str); } 

To explain the pattern:

---

If you are trying to make sure that the sha1() hash matches the password the user provider, you simply rehash like this:

if($db_hash == sha1($user_provided_pass))    echo "Password is correct!"; 

回答2:

ctype_xdigit is much faster. I typically use hashes for lookups and find it very useful.

回答3:

When comparing two SHA1 hashes, and you know that the first one is one (because it comes out of the database), then just assume that the second is a SHA1 value as well. You are only interested if two hashes match or not. If one of the compared values is not a possible SHA1 value, then it's particulary not the same as the one in the database. And that's all you need to know.

文章来源: Testing if string is sha1 in PHP