pioder/uf2
1
0
Fork 0
Code Releases Activity

improved password generating method (salt + SHA-256)

Browse Source
This commit is contained in:
Piotr Dergun
2015-02-15 16:23:01 +01:00
parent a542813c8f
commit bf23339cfe
3 changed files with 21 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
inc/models/UsersModel.class.php
View File

@@ -22,6 +22,7 @@ class UsersModel extends Model
public function createNewUser($nick, $passwd, $email)
{
$passwd = $this->generatePasswordHash($nick, $passwd);
$this->db->query('call add_user(\''.$nick.'\', \''.$passwd.'\', \''.$email.'\');');
}
@@ -59,8 +60,9 @@ class UsersModel extends Model
return $this->user_info;
}
public function changeUserPassword($user_id, $passwd)
public function changeUserPassword($user_id, $nick, $passwd)
{
$passwd = $this->generatePasswordHash($nick, $passwd);
$query =
'UPDATE .'.USERS_TABLE.'
SET `password`=\''.$passwd.'\'
@@ -128,5 +130,16 @@ class UsersModel extends Model
WHERE `user_id` = \''.$user_id.'\'';
$this->db->query($query);
}
public function generatePasswordHash($nick, $password)
{
$modulo = strlen($nick) % 8;
$salt_begin = substr(RANDOM_STRING, $modulo*SALT_LENGTH, SALT_LENGTH-$modulo);
$salt_end = substr(RANDOM_STRING, $modulo*SALT_LENGTH + SALT_LENGTH-$modulo, $modulo);
return hash('haval256,5', $salt_begin.$password.$salt_end);
}
}
?>