aboutsummaryrefslogtreecommitdiff
path: root/ratatoeskr/sys/pwhash.php
Commit message (Collapse)AuthorAge
* Use password_hash() and friends to hash and verify passwordsLaria Carolin Chabowski2020-09-25
| | | | | | | | | | | | Previously I rolled my own password hashing function. While it at least used some sort of salt, it's still a terrible idea. The newly created class PasswordHash wraps the password_hash() family of functions but can also check the old password hash format (to distinguish them, the new password hashes are prefixed with a '!'). In PasswordHash::needsRehash we then always report an hash of the old format as being in need of a rehash. That way, these old hashes will be replaced the next time the user successfully logs in.
* Code cleanupLaria Carolin Chabowski2020-09-21
| | | | | | | | | | - Remove unused variables - Remove unused utility functions - Asserting presence and typehinting global variables - Remove unused variables - Add missing global - Add parameter type constraint - Fix some references to nonexisting variables
* Automatic code formattingLaria Carolin Chabowski2020-04-26
|
* Some simple code formattingLaria Carolin Chabowski2020-04-26
| | | | | | - Expand tabs into spaces - Remove trailing whitespace - Get rid of closing `?>` tags
* Expand tabs and remove trailing whitespaceLaria Carolin Chabowski2020-04-26
|
* Increased security of PasswordHashKevin Chabowski2011-09-22
|
* Added a fairly secure password hashing method.Kevin Chabowski2011-08-25