Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Use password_hash() and friends to hash and verify passwords | Laria Carolin Chabowski | 2020-09-25 |
| | | | | | | | | | | | | Previously I rolled my own password hashing function. While it at least used some sort of salt, it's still a terrible idea. The newly created class PasswordHash wraps the password_hash() family of functions but can also check the old password hash format (to distinguish them, the new password hashes are prefixed with a '!'). In PasswordHash::needsRehash we then always report an hash of the old format as being in need of a rehash. That way, these old hashes will be replaced the next time the user successfully logs in. | ||
* | Code cleanup | Laria Carolin Chabowski | 2020-09-21 |
| | | | | | | | | | | - Remove unused variables - Remove unused utility functions - Asserting presence and typehinting global variables - Remove unused variables - Add missing global - Add parameter type constraint - Fix some references to nonexisting variables | ||
* | Automatic code formatting | Laria Carolin Chabowski | 2020-04-26 |
| | |||
* | Some simple code formatting | Laria Carolin Chabowski | 2020-04-26 |
| | | | | | | - Expand tabs into spaces - Remove trailing whitespace - Get rid of closing `?>` tags | ||
* | Expand tabs and remove trailing whitespace | Laria Carolin Chabowski | 2020-04-26 |
| | |||
* | Increased security of PasswordHash | Kevin Chabowski | 2011-09-22 |
| | |||
* | Added a fairly secure password hashing method. | Kevin Chabowski | 2011-08-25 |