/auth/password.php

Description
Description | Constants | Functions

A Compatibility library with PHP 5.5's simplified password hashing API.

Constants
Description | Constants | Functions
PASSWORD_BCRYPT = 1 (line 56)
PASSWORD_DEFAULT = PASSWORD_BCRYPT (line 57)
Functions
Description | Constants | Functions
can_use_password_API (line 18)

function to check if the password API can be used In some PHP version ( <5.3.7), crypt() with blowfish is vulnerable.

But this issue has been fixed on some older PHP version (php 5.3.3 for most of them) in some distro, like Debian squeeze.

void can_use_password_API ()
password_get_info (line 197)

Get information about the password hash. Returns an array of the information that was used to generate the password hash.

array( 'algo' => 1, 'algoName' => 'bcrypt', 'options' => array( 'cost' => 10, ), )

  • return: The array of information about the hash.
array password_get_info (string $hash)
  • string $hash: The password hash to extract info from
password_hash (line 68)

Hash the password using the specified algorithm

  • return: The hashed password, or false on error.
string|false password_hash (string $password, int $algo, [ $options = array()])
  • string $password: The password to hash
  • int $algo: The algorithm to use (Defined by PASSWORD_* constants)
  • array $options: The options for the algorithm to use
password_needs_rehash (line 223)

Determine if the password hash needs to be rehashed according to the options provided

If the answer is true, after validating the password using password_verify, rehash it.

  • return: True if the password needs to be rehashed.
boolean password_needs_rehash (string $hash, int $algo, [ $options = array()])
  • string $hash: The hash to test
  • int $algo: The algorithm used for new password hashes
  • array $options: The options array passed to password_hash
password_verify (line 247)

Verify a password against a hash using a timing attack resistant approach

  • return: If the password matches the hash
boolean password_verify (string $password, string $hash)
  • string $password: The password to verify
  • string $hash: The hash to verify against

Documentation generated on Wed, 24 Sep 2014 22:03:58 +0200 by phpDocumentor 1.4.3