Password encryption help
#1

How would I make my script work with this php encryption

Код:
		public function encrypt( $string, $encryption_key )
		{

			$password = hash( 'sha256', $string );
			$length   = strlen( $password ) / 2;

			if ( strlen( $password ) % 2 ) {
				$length++;
			}

			$passSplit = str_split( $password, $length );
			$saltSplit = str_split( $encryption_key, 3 );

			$string  = $saltSplit[0] . $passSplit[0] . $saltSplit[1] . $passSplit[1] . $saltSplit[2];
			$encrypt = hash( 'whirlpool', $string );

			return $encrypt;
		}

		public function encryption_key()
		{

			$numbers = array( 21, 24, 27, 30, 33, 36, 39, 42, 45, 48, 51, 54, 57, 60 );

			return substr( sha1( rand( $numbers[0], $numbers[count( $numbers ) - 1] ) ), 0, $numbers[rand( 0, count( $numbers ) - 1 )] );
		}
Reply
#2

Encrypt the password the moment it's registered, save it in the user's file, the moment they login Encrypt the inputtext or the string that has the password, compare it to the saved encryption on register, if they match = true else return false login attempt, i'm gonna assume that the string in that encrypt function is the pw so that's where u implement it in both cases, tho im not sure about that encryption key part.
EDIT: and imo, if you're just trying to secure the player's database read this: Salting Tutorial
EDIT 2: I'm not sure what that public function does but hashes will return the same hash for passwords if the function u posted provides random strings for each password then hashes it (salt-hash) then it's fine.
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)