ratatoeskr-cms/ratatoeskr/sys/pwhash.php, branch master Ratatöskr is a flexible Content Management System / Blogging Software for PHP 5.3. http://git.laria.me/ratatoeskr-cms/atom?h=master 2020-09-25T21:09:31Z Use password_hash() and friends to hash and verify passwords 2020-09-25T21:09:31Z Laria Carolin Chabowski laria@laria.me 2020-09-25T21:09:31Z urn:sha1:5e347e4efaa81c2108256dc927208cd55dc10baa Previously I rolled my own password hashing function. While it at least used some sort of salt, it's still a terrible idea. The newly created class PasswordHash wraps the password_hash() family of functions but can also check the old password hash format (to distinguish them, the new password hashes are prefixed with a '!'). In PasswordHash::needsRehash we then always report an hash of the old format as being in need of a rehash. That way, these old hashes will be replaced the next time the user successfully logs in. Code cleanup 2020-09-21T19:30:57Z Laria Carolin Chabowski laria@laria.me 2020-09-21T19:21:30Z urn:sha1:7f4159ac258c501f9666efc465a78cb2aec9d177 - Remove unused variables - Remove unused utility functions - Asserting presence and typehinting global variables - Remove unused variables - Add missing global - Add parameter type constraint - Fix some references to nonexisting variables Automatic code formatting 2020-04-26T19:13:51Z Laria Carolin Chabowski laria@laria.me 2020-04-26T19:03:08Z urn:sha1:ade9edeb849803082856f7633194913ad4df93a0 Some simple code formatting 2020-04-26T14:48:01Z Laria Carolin Chabowski laria@laria.me 2020-04-26T14:48:01Z urn:sha1:c3cc300a952a793b9655226db1aad050daaa3803 - Expand tabs into spaces - Remove trailing whitespace - Get rid of closing `?>` tags Expand tabs and remove trailing whitespace 2020-04-26T14:33:36Z Laria Carolin Chabowski laria@laria.me 2020-04-26T14:33:36Z urn:sha1:82d40e32363c4e96996eca7ee44ade879589aa0e Increased security of PasswordHash 2011-09-21T22:15:40Z Kevin Chabowski kevin@kch42.de 2011-09-21T22:15:40Z urn:sha1:4bdd685ba9d04313622147f4412a7f99b058d8b5 Added a fairly secure password hashing method. 2011-08-24T22:03:31Z Kevin Chabowski kevin@kch42.de 2011-08-24T22:03:31Z urn:sha1:04241a5ccbf839dee953d7e47c894d5c8141f7ee