php - Cakephp 3.0 alpha2 How to compare new password to old passwords? -


okay, testing out cakephp 3.0 alpha2 transferring application(2.5) 3.x. current application has set when reset password cannot change of previous 6 passwords(stored in passwords table connects user_id) security purposes. @ changes in cake 3.0, noticed if create new entity password hashes differently if same password. way compare new password old ones? go using password hasher built in function called check?

cakephp 3 uses bcrypt. in brief: bcrypt uses different salt each password, , stores salt part of password hash. why, you've found, bcrypt generate different hash each time same plain-text password encrypted.

however, if it's of use authentication system, have able check if plain-text password 'fits' given hashed version of password - though there's not 1 single 'correct' hashed version, right? right.

you password_verify method - http://au2.php.net/password_verify

so, rather hashing plain-text version , seeing if hashed version of new password matches hashed versions of each of past 6 versions, have call password_verify on plain-text password 6 times - once each of previous hashed passwords, see if there matches.

there's explanation of bcrypt in php here: how use bcrypt hashing passwords in php? i'd recommend reading - once understand how bcrypt treats passwords, problem shouldn't hard solve.


Comments

Post a Comment

Popular posts from this blog

javascript - Jquery show_hide, what to add in order to make the page scroll to the bottom of the hidden field once button is clicked -

i have button on website when clicked, reveals map. button can seen when page first loads up, when clicked, section holding map slides open , goes out of screen since page loads @ top (normal). want page scroll down bottom of div select when button pushed, if map out of screen. if page scrolled down, , clicks show map button, don't want page jump bottom of map. i tried figure out myself, no luck. seasoned jquery coders able give me guidance? many thanks! map = mapdiv.gmap3("get"); infobox = new infobox({ pixeloffset: new google.maps.size(-220, -310), closeboxurl: '', enableeventpropagation: true }); mapdiv.delegate('.infobox .close','click',function () { infobox.close(); }); jquery(".slidingdiv").hide(); jquery(".show_hide").show(); jquery('.show_hide').click(function(){ lastcenter=map.getcenter(); jquery(".slidingdiv&quo
Read more

javascript - Highcharts multi-color line -

Image
i looking create highchart multi-colored line. if goes down under value, become red, , when comes on value, become green . here picture example: or maybe highcharts have other charts models differentiate high or low level color? you can achieve coloring using lineargradient coloring: color: { lineargradient: { x1: 0, x2: 0, y1: 0, y2: 1 }, stops: [ [0, 'red'], [0.25, 'yellow'], [0.50, 'green'], [0.75, 'yellow'], [1, 'red'] ] } here 0 in stops relates minimum value of series , 1 maximum value, , in between percentages between values. if find percentages according values prior creating chart use correct stops values make relate specific values in data (at least approximately). see this jsfiddle example .
Read more

javascript - Enter key does not work in search box -

tried search guys sorry. input in search box doesnt work (or search) when hit enter when user clicks search button. doing wrong? here code. thanks. <script type="text/javascript"> $(document).ready(function() { $("#submit").click(function() { var url = "http://asla.org/awardssearch.html"; url += "?s=" + $('#googlecse').val(); window.location = url; }); $('#googlecse').keydown(function(event) { if (event.keycode == '13') { $("#submit").click(); } else { //do nothing :) } }); }); </script> <form class="navbar-form navbar-right" role="search"> <div class="search"> <input id="googlecse" type="text" onblur="if(this.value=='')this.value=this.defaultvalue;" onfocus="if(this.value==this.defaultvalue)t
Read more