added files
This commit is contained in:
254
application/helpers/phpass.php
Normal file
254
application/helpers/phpass.php
Normal file
@ -0,0 +1,254 @@
|
||||
<?php (defined('BASEPATH')) OR exit('No direct script access allowed');
|
||||
|
||||
#
|
||||
|
||||
# Portable PHP password hashing framework.
|
||||
|
||||
#
|
||||
|
||||
# Version 0.3 / genuine.
|
||||
|
||||
#
|
||||
|
||||
# Written by Solar Designer <solar at openwall.com> in 2004-2006 and placed in
|
||||
|
||||
# the public domain. Revised in subsequent years, still public domain.
|
||||
|
||||
#
|
||||
|
||||
# There's absolutely no warranty.
|
||||
|
||||
#
|
||||
|
||||
# The homepage URL for this framework is:
|
||||
|
||||
#
|
||||
|
||||
# http://www.openwall.com/phpass/
|
||||
|
||||
#
|
||||
|
||||
# Please be sure to update the Version line if you edit this file in any way.
|
||||
|
||||
# It is suggested that you leave the main version number intact, but indicate
|
||||
|
||||
# your project name (after the slash) and add your own revision information.
|
||||
|
||||
#
|
||||
|
||||
# Please do not change the "private" password hashing method implemented in
|
||||
|
||||
# here, thereby making your hashes incompatible. However, if you must, please
|
||||
|
||||
# change the hash type identifier (the "$P$") to something different.
|
||||
|
||||
#
|
||||
|
||||
# Obviously, since this code is in the public domain, the above are not
|
||||
|
||||
# requirements (there can be none), but merely suggestions.
|
||||
|
||||
#
|
||||
|
||||
class PasswordHash {
|
||||
|
||||
var $itoa64;
|
||||
|
||||
var $iteration_count_log2;
|
||||
|
||||
var $portable_hashes;
|
||||
|
||||
var $random_state;
|
||||
|
||||
|
||||
|
||||
function PasswordHash($iteration_count_log2, $portable_hashes)
|
||||
|
||||
{
|
||||
|
||||
$this->itoa64 = './0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';
|
||||
|
||||
|
||||
|
||||
if ($iteration_count_log2 < 4 || $iteration_count_log2 > 31)
|
||||
|
||||
$iteration_count_log2 = 8;
|
||||
|
||||
$this->iteration_count_log2 = $iteration_count_log2;
|
||||
|
||||
|
||||
|
||||
$this->portable_hashes = $portable_hashes;
|
||||
|
||||
|
||||
|
||||
$this->random_state = microtime();
|
||||
|
||||
if (function_exists('getmypid'))
|
||||
|
||||
$this->random_state .= getmypid();
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
function get_random_bytes($count)
|
||||
|
||||
{
|
||||
|
||||
$output = '';
|
||||
|
||||
if (is_readable('/dev/urandom') &&
|
||||
|
||||
($fh = @fopen('/dev/urandom', 'rb'))) {
|
||||
|
||||
$output = fread($fh, $count);
|
||||
|
||||
fclose($fh);
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
if (strlen($output) < $count) {
|
||||
|
||||
$output = '';
|
||||
|
||||
for ($i = 0; $i < $count; $i += 16) {
|
||||
|
||||
$this->random_state =
|
||||
|
||||
md5(microtime() . $this->random_state);
|
||||
|
||||
$output .=
|
||||
|
||||
pack('H*', md5($this->random_state));
|
||||
|
||||
}
|
||||
|
||||
$output = substr($output, 0, $count);
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
return $output;
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
function encode64($input, $count)
|
||||
|
||||
{
|
||||
|
||||
$output = '';
|
||||
|
||||
$i = 0;
|
||||
|
||||
do {
|
||||
|
||||
$value = ord($input[$i++]);
|
||||
|
||||
$output .= $this->itoa64[$value & 0x3f];
|
||||
|
||||
if ($i < $count)
|
||||
|
||||
$value |= ord($input[$i]) << 8;
|
||||
|
||||
$output .= $this->itoa64[($value >> 6) & 0x3f];
|
||||
|
||||
if ($i++ >= $count)
|
||||
|
||||
break;
|
||||
|
||||
if ($i < $count)
|
||||
|
||||
$value |= ord($input[$i]) << 16;
|
||||
|
||||
$output .= $this->itoa64[($value >> 12) & 0x3f];
|
||||
|
||||
if ($i++ >= $count)
|
||||
|
||||
break;
|
||||
|
||||
$output .= $this->itoa64[($value >> 18) & 0x3f];
|
||||
|
||||
} while ($i < $count);
|
||||
|
||||
|
||||
|
||||
return $output;
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
function gensalt_private($input)
|
||||
|
||||
{
|
||||
|
||||
$output = '$P$';
|
||||
|
||||
$output .= $this->itoa64[min($this->iteration_count_log2 +
|
||||
|
||||
((PHP_VERSION >= '5') ? 5 : 3), 30)];
|
||||
|
||||
$output .= $this->encode64($input, 6);
|
||||
|
||||
|
||||
|
||||
return $output;
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
function crypt_private($password, $setting)
|
||||
|
||||
{
|
||||
|
||||
$output = '*0';
|
||||
|
||||
if (substr($setting, 0, 2) == $output)
|
||||
|
||||
$output = '*1';
|
||||
|
||||
|
||||
|
||||
$id = substr($setting, 0, 3);
|
||||
|
||||
# We use "$P$", phpBB3 uses "$H$" for the same thing
|
||||
|
||||
if ($id != '$P$' && $id != '$H$')
|
||||
|
||||
return $output;
|
||||
|
||||
|
||||
|
||||
$count_log2 = strpos($this->itoa64, $setting[3]);
|
||||
|
||||
if ($count_log2 < 7 || $count_log2 > 30)
|
||||
|
||||
return $output;
|
||||
|
||||
|
||||
|
||||
$count = 1 << $count_log2;
|
||||
|
||||
|
||||
|
||||
$salt = substr($setting, 4, 8);
|
||||
|
||||
if (strlen($salt) != 8)
|
||||
|
||||
return $output;
|
||||
|
||||
|
||||
|
||||
# We're kind of forced to use MD5 here since it's the only
|
||||
|
||||
# cryptographic primitive available in all versions of PHP
|
||||
|
||||
# currently in use. To implement our own low-level crypto
|
||||
|
Reference in New Issue
Block a user