PHP how sha1 get this?

Question

I have my own little website and encrypting with sha1, now i try connect it to a SMF forum, but the sha1 codes is not the same?

My code

$password = "thisisatestpass";
$encrypted_password=sha1($password);
echo $encrypted_password; //03d858ce5f3b29b153b0392f196cff6f6e8684d0

SMF: 78481983d348ce4fbfabaccbb59af8ea95471f0c

score 1 · Answer 1 · answered Aug 19 '12 at 15:49

1

According to this thread, SMF salts the password with the lowercased username before passing it through sha1.

Try sha1(strtolower($your_username) . $password);

answered Aug 19 '12 at 15:49

Jordan Arsenault

7,100
8
53
96

Since version 2.0 SMF uses a salt which is stored in the database. – nkr Aug 19 '12 at 15:51
I was looking at it, but it gives me this: a81648ec3256deb019964d19be20bc2bd2d58c71 – Lasse Andersen Aug 19 '12 at 15:58

score 1 · Answer 2 · answered Aug 19 '12 at 16:16

1

You'll need to find the salt used and then try to hash with

sha1($the_salt.$password);

You should try looking for the hash with phpMyAdmin in the tables used by SMF. And according to what I see on smf support forums, using an alternate integration with hooks must be more robust (keeping in mind the changes done to hashing in the previous versions)

answered Aug 19 '12 at 16:16

Yash Gupta

578
6
15

Yea, but how do i make the salt, when they make a user? – Lasse Andersen Aug 19 '12 at 16:56
You'll have to find what salt they use (for eg, if it is "Asdfasvasdkjbsadf", $the_salt will be equal to "Asdfasvasdkjbsadf". – Yash Gupta Aug 19 '12 at 19:10

score 0 · Answer 3 · answered Aug 19 '12 at 15:48

0

As i know, SMF use salt for hashes. So, try to look for salt in database.

answered Aug 19 '12 at 15:48

mr.The

445
5
17

Try SHA1(username + password + salt) – mr.The Aug 19 '12 at 16:50
Also, i found this: sha1(sha1(strtolower($username) . $password) . $salt). – mr.The Aug 19 '12 at 16:57

score 0 · Answer 4 · answered Jul 25 '14 at 08:45

Looking into the source code of SMF 2.0.8 (Profile-Modify.php) you can see that the password is generated as follows:

// Go then.
$passwd = sha1(strtolower($cur_profile['member_name']) . un_htmlspecialchars($_POST['passwrd1']));

Please be aware that you need SMF un_htmlspecialchars() function in order to get 100% correct results.

score -1 · Accepted Answer · edited Sep 09 '12 at 00:30

-1

I got it, you don't need the SALT to do this, all you need is the username and the password.

The PHP code looks like this:

$username = "name";
$password = "pass";

$login = sha1($username.$password);

I asked for this and i just needed some time to try many ways, then this one worked. Thx any way guys :)

edited Sep 09 '12 at 00:30

nmc

8,724
5
36
68

answered Sep 08 '12 at 15:49

Lasse Andersen

3
5

PHP how sha1 get this?

5 Answers5