gama.io/unps.us-Shortener
1
0
Fork 0
mirror of https://github.com/gamaio/unps.us-Shortener.git synced 2024-12-21 17:52:41 +00:00
Code Issues Projects Releases Wiki Activity

Remove HashPass

Browse Source 
This file has really just been sitting here gathering dust. Currently
there isn't a need to use this, no passwords are stored
This commit is contained in:
Arctic Code 2014-03-25 13:37:01 -05:00
parent e77fcd1478
commit d1e0f3f567
2 changed files with 0 additions and 42 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/api.backend.php
View File

@ -36,8 +36,6 @@ function checkRemoteFile($ip=null){
return false;
}
include('hashpass.php');
class api{
// Begin Short
function shorten($apidb, $apikey, $sdb, $link, $dpass=null){

40
api/hashpass.php
View File

@ -1,40 +0,0 @@
<?php
/* HashPass() function takes $plaintext, $salt and $i (number of iterations) as inputs and outputs $hashpass - $salt and $i are optional
* Copyright David Todd (C) 2012
* http://www.unps-gama.info
* This work is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License.
* To view a copy of this license, visit http://creativecommons.org/licenses/by-nc-sa/3.0/
* If no $salt provided, generate large int and output $hashpass and $salt
* If no $i (number of iterations) provided, go through once and return - not as secure as using iterations, but chances are low it will get cracked easily
* If no $plaintext provided, die with error message saved to error variable
*/
function hashpass($plaintext, $salt, $i){
if($plaintext == null) die("No password given"); // Die with error
$plaintext = hash("sha1", $plaintext); // First step - get plaintext sha1
if($salt == null || $salt == ''){
$salt = mt_rand(10000, 20000); // Generate random number between 1000 and 20000
$salt = hash("sha1", $salt); // Get sha1 hash of random number
$salt = $salt.mt_rand(5000, 80000); // Append new random number between 5000 and 80000 to md5 salt
$salt = hash("sha256", $salt); // Take a sha256 hash of new salt and done with salt generation
}
if($i == null || $i == ''){
$plaintext = hash("sha256", $plaintext.$salt); // Take first sha256 hash of $plaintext+$salt (64 bits)
$plaintext = hash("sha1", $salt.$plaintext.$salt); // Take sha1 of salt+plaintext+salt (32 bits)
$plaintext = hash("sha512", $salt.$plaintext.$salt.$salt.$plaintext.$salt); // Take sha512 of this (128bits)
$hashpass = hash("sha256", $plaintext); // final hash is sha256 of the sha512 above (back down to 64bits)
return $hashpass."/".$salt; // Give calling script the hashed password and salt, seperate strings with "/" to be exploded into array later
}else{
$il = '';
while($il < $i && $il <= 50){
$plaintext = hash("sha256", $plaintext.$salt); // Take first sha256 hash of $plaintext+$salt (64 bits)
$plaintext = hash("sha1", $salt.$plaintext.$salt); // Take sha1 of salt+plaintext+salt (32 bits)
$plaintext = hash("sha512", $salt.$plaintext.$salt.$salt.$plaintext.$salt); // Take sha512 of this (128bits)
$il++;
//echo "Iteration: $il Password: $plaintext\r\n";
}
$hashpass = hash("sha256", $plaintext); // final hash is sha256 of the sha512 above (back down to 64bits)
return $hashpass."/".$salt; // Give calling script the hashed password and salt, seperate strings with "/" to be exploded into array later
}
}
?>