Questions tagged [phpass]

phpass is a portable public domain password hashing framework for use in PHP applications.

phpass is a portable public domain password hashing framework for use in PHP applications. It is meant to work with PHP 3 and above.

The preferred (most secure) hashing method supported by phpass is the OpenBSD-style Blowfish-based bcrypt, known in PHP as CRYPT_BLOWFISH, with a fallback to BSDI-style extended DES-based hashes, known in PHP as CRYPT_EXT_DES, and a last resort fallback to MD5-based salted and variable iteration count password hashes implemented in phpass itself (also referred to as portable hashes).

phpass is integrated into various open-source projects, most notably WordPress. A modified version of phpass is used in Drupal.

93 questions
0
votes
1 answer

PHPass returns error

In my functions file I have this code: function password($password, $dbpassword = false){ if($dbpassword){ $password = mysqli_real_escape_string($GLOBALS["mysqli"], $_POST["$dbpassword"]); if(empty($password)) …
user3140270
0
votes
1 answer

Using TCPDF and PHPass causing headaches with generating PDFs.

I've got a Codeigniter app that is an extension of an old phone directory my company used to send to employees. So for people who want a print out they had me create a method for "printing" that was a bit more robust than simple HTML to paper. The…
Vagari
  • 461
  • 4
  • 23
0
votes
1 answer

Identical Phpass code returning different results with CheckPassword

I am using Phpass to hash the passwords of my users. The creation and hashing of the password - fine. The checking of the password when logging in - fine. The checking of the old password when changing it to a new one though - always returns…
Adam
  • 209
  • 3
  • 14
0
votes
2 answers

Phpass login not working

I´m changing my register and login to a different encryption (Phpass) because everybody is saying that md5 is not safe anymore. I managed myself to put the register function working but cant figure out why login aint working. This code is running…
miguelfsf
  • 97
  • 1
  • 1
  • 7
0
votes
1 answer

Trouble including PHP file on ubuntu 12.10 using nginx and php5-fpm

Looking for help troubleshooting the following PHP inclusion error found in my /var/log/nginx/error.log file? 2013/04/16 22:27:18 [error] 10021#0: *6 FastCGI sent in stderr: "PHP message: PHP Warning: require(1): failed to open stream: No such file…
darkAsPitch
  • 1,855
  • 4
  • 23
  • 35
0
votes
1 answer

phpass Warning?

I just implemented phpass into my websites register code and it seemed to work, but it gave me the following warning Warning: is_readable(): open_basedir restriction in effect. File(/dev/urandom) is not `within the allowed path(s):…
Travis Nabbefeld
  • 393
  • 3
  • 7
  • 14
0
votes
1 answer

Phpass Hashed password checking

I have been developing my own social network for the past 3 weeks and I am using phpass to hash up the passwords into storage into my database using the following code snippet... // END FORM DATA ERROR HANDLING // Begin Insertion of data into the…
Phillip Dews
  • 51
  • 10
0
votes
0 answers

phpass lengths changed significantly

I'm using phpass at the moment but since I've swapped computers, the length of the passwords stored has changed. I'm doing work on the localhost and recreated the database rather than exporting/importing as I was only just starting anyway. So…
user1871245
0
votes
1 answer

unHash/decrypt phpass password

I'm using phpass in my current project and part of the project deals with password retrieval, so what i wanted to know: is it possible to unhash a password using phpass that's been hashed using phpass so it can be sent (via email) or changed?
zero
  • 2,999
  • 9
  • 42
  • 67
0
votes
1 answer

PHPass not working when checking password

I'm trying to use PHPass with a new site. I generated a hash like this and stored it in the database: $hasher = new \Hautelook\Phpass\PasswordHash(8, true); $password = $hasher->HashPassword('secretpassword'); // I store $password in the DB for the…
dragonmantank
  • 15,243
  • 20
  • 84
  • 92
0
votes
1 answer

Why PHPass function not working here?

I'm successfuly registering with phpass but login authentication is not working.Please help me.It has been 3 days ,I'm scracting my head on this error. Register function(successfuly working and adding slashed password in database like…
Cuty Pie
  • 65
  • 1
  • 7
0
votes
2 answers

phpass fails on Authentication on certain passwords from phpBB3?

Using either the phpass test program http://www.openwall.com/phpass/phpass-0.3.tar.gz , or python-phpass, and using C?*|Y[j"KQ'%gf for the plain text password, and $P$9kS6tD8tVxajypvJ5837.bt2emepD8/ as the hash, doing:
phpBoing
  • 31
  • 3
0
votes
0 answers

Transfer login params from iOS to web service

I currently have a web service whose backend database stores user passwords using phpass under PHP 5.3 —so it's using CRYPT_BLOWFISH. I have exposed an API from that server and I want to authenticate users through that API from and iPhone app. The…
Sendoa
  • 4,705
  • 5
  • 27
  • 21
0
votes
1 answer

PHP - phpass 0.2 troubles

I'm using phpass when my users type in password upon signup and login. It's working when I'm working local on my Mac. But when I hash a password when I'm online it's like it's hashing in a wrong way. I have imported the local db to online db. And…
skolind
  • 1,724
  • 6
  • 28
  • 51
-1
votes
4 answers

How to check login information against a db using PDO and Phpass

I'm trying to check users hashed passwords against the ones I've saved in the database. It is almost the same issue as the this guy, but I'm trying to do it with PDO and I'm unsure how to get the hashed password from the database to check it…