MySQL 4.1之后的密码验证机制

rzp846

1. <?php
   
2. $pw = 'test123';
   
3. $pwInDb = sha1(sha1($pw));
   
4. $scramble = mt_rand();
   
5. 
   
6. //token
   
7. $stage1_hash = sha1($pw);
   
8. $token = sha1($scramble . sha1($stage1_hash)) ^ $stage1_hash;
   
9. 
   
10. $stage1_hash = $token ^ sha1($scramble . $pwInDb);
    
11. 
    
12. echo '<pre>';
    
13. echo sha1($stage1_hash);
    
14. echo "\n";
    
15. echo $pwInDb;
    
16. ?>

复制代码