国产av日韩一区二区三区精品,成人性爱视频在线观看,国产,欧美,日韩,一区,www.成色av久久成人,2222eeee成人天堂

Home php教程 php手冊(cè) PHP中使用crypt()實(shí)現(xiàn)用戶身份驗(yàn)證的代碼

PHP中使用crypt()實(shí)現(xiàn)用戶身份驗(yàn)證的代碼

Jun 13, 2016 am 11:58 AM
crypt php window learn code use accomplish user of identity No verify

了解crypt()

  只要有一點(diǎn)使用非Windows平臺(tái)經(jīng)驗(yàn)的讀者都可能對(duì)crypt()相當(dāng)熟悉,這一函數(shù)完成被稱作單向加密的功能,它可以加密一些明碼,但不能反過(guò)來(lái)將密碼重新轉(zhuǎn)換為原來(lái)的明碼。crypt()函數(shù)定義如下。

  string crypt (string input_string [, string salt])

  其中,input_string參數(shù)是需要加密的明文字符串,第二個(gè)可選的salt是一個(gè)位字串,能夠影響加密的暗碼,進(jìn)一步排除被破解的可能性。缺省情況下,PHP使用一個(gè)2個(gè)字符的DES干擾串,如果系統(tǒng)使用的是MD5(參考下一節(jié)內(nèi)容),PHP則會(huì)使用一個(gè)12個(gè)字符的干擾串。可以通過(guò)執(zhí)行下面的命令發(fā)現(xiàn)系統(tǒng)將要使用的干擾串的長(zhǎng)度。

  print "My system salt size is: ". CRYPT_SALT_LENGTH;

  crypt()支持4種加密算法,表19.1顯示了其支持的算法和相應(yīng)的salt參數(shù)的長(zhǎng)度。

  表crypt()支持四種加密算法

算法 Salt長(zhǎng)度
CRYPT_STD_DES 2-character (Default)
CRYPT_EXT_DES 9-character
CRYPT_MD5 12-character beginning with $1$
CRYPT_BLOWFISH 16-character beginning with $2$

從表面上看,crypt()的函數(shù)似乎沒(méi)有什么用處,但該函數(shù)的確被廣泛用來(lái)保證系統(tǒng)密碼的完整性。因?yàn)?,單向加密的口令即使落入第三方的手里,由于不能被還原為明文,也沒(méi)有什么大用處。
  用crypt()實(shí)現(xiàn)用戶身份驗(yàn)證
  上一部分簡(jiǎn)單介紹了crypt()函數(shù)的功能,下面利用其來(lái)實(shí)現(xiàn)用戶的身份驗(yàn)證,其所要實(shí)現(xiàn)的目標(biāo)同19.2.3節(jié)所介紹的一致。

復(fù)制代碼 代碼如下:



$user_name=$_POST["user_name"];
require_once("sys_conf.inc"); //系統(tǒng)配置文件,包含數(shù)據(jù)庫(kù)配置信息
//連接數(shù)據(jù)庫(kù)
$link_id=mysql_connect($DBHOST,$DBUSER,$DBPWD);
mysql_select_db($DBNAME); //選擇數(shù)據(jù)庫(kù)my_chat
//查詢是否存在登錄用戶信息
$str="select name,password from user where name ='$user_name'";
$result=mysql_query($str,$link_id); //執(zhí)行查詢
@$rows=mysql_num_rows($result); //取得查詢結(jié)果的記錄筆數(shù)
$user_name=$_SESSION["user_name"];
$password=$_POST["password"];
$salt = substr($password, 0, 2);
$password_en=crypt($password,$salt); //使用crypt()對(duì)用戶密碼進(jìn)行加密
//對(duì)于老用戶
if($rows!=0)
{
list($name,$pwd)=mysql_fetch_row($result);
//如果密碼輸入正確
if($pwd==$password_en)
{
$str="update user set is_online =1 where name ='$user_name' and password='$password_en'";
$result=mysql_query($str, $link_id);//執(zhí)行查詢
require("main.php"); //轉(zhuǎn)到聊天頁(yè)面
}
//密碼輸入錯(cuò)誤
else
{
require("relogin.php");
}
}
//對(duì)于新用戶,將其信息寫入數(shù)據(jù)庫(kù)
else
{
$str="insert into user (name,password,is_online) values('$user_ name','$password_en',1)";
$result=mysql_query($str, $link_id); //執(zhí)行查詢
require("main.php"); //轉(zhuǎn)到聊天頁(yè)面
}
//關(guān)閉數(shù)據(jù)庫(kù)
mysql_close($link_id);
?>



示例與上一節(jié)所介紹的使用XOR加密算法來(lái)保護(hù)用戶信息非常類似,其核心部分在于第16、17行使用crypt()函數(shù)獲取加密后的密碼,而通過(guò)在第25行比較數(shù)據(jù)庫(kù)中的密碼和加密后的密碼是否相等來(lái)檢查用戶是否合法。

  下面,通過(guò)一個(gè)實(shí)例來(lái)看一下加密后的密碼會(huì)變成什么樣子。

  例如,用戶名為rock,密碼為123456,則加密后的密碼為:

  12tir.zIbWQ3c

  上面就實(shí)現(xiàn)了一個(gè)簡(jiǎn)單的用戶身份驗(yàn)證系統(tǒng)。在使用crypt()保護(hù)重要的機(jī)密信息時(shí),需要注意的是,在缺省狀態(tài)下使用crypt()并不是最安全的,只能用在對(duì)安全性要求較低的系統(tǒng)中。
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undress AI Tool

Undress AI Tool

Undress images for free

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

How to get the current session ID in PHP? How to get the current session ID in PHP? Jul 13, 2025 am 03:02 AM

The method to get the current session ID in PHP is to use the session_id() function, but you must call session_start() to successfully obtain it. 1. Call session_start() to start the session; 2. Use session_id() to read the session ID and output a string similar to abc123def456ghi789; 3. If the return is empty, check whether session_start() is missing, whether the user accesses for the first time, or whether the session is destroyed; 4. The session ID can be used for logging, security verification and cross-request communication, but security needs to be paid attention to. Make sure that the session is correctly enabled and the ID can be obtained successfully.

PHP get substring from a string PHP get substring from a string Jul 13, 2025 am 02:59 AM

To extract substrings from PHP strings, you can use the substr() function, which is syntax substr(string$string,int$start,?int$length=null), and if the length is not specified, it will be intercepted to the end; when processing multi-byte characters such as Chinese, you should use the mb_substr() function to avoid garbled code; if you need to intercept the string according to a specific separator, you can use exploit() or combine strpos() and substr() to implement it, such as extracting file name extensions or domain names.

How do you perform unit testing for php code? How do you perform unit testing for php code? Jul 13, 2025 am 02:54 AM

UnittestinginPHPinvolvesverifyingindividualcodeunitslikefunctionsormethodstocatchbugsearlyandensurereliablerefactoring.1)SetupPHPUnitviaComposer,createatestdirectory,andconfigureautoloadandphpunit.xml.2)Writetestcasesfollowingthearrange-act-assertpat

How to split a string into an array in PHP How to split a string into an array in PHP Jul 13, 2025 am 02:59 AM

In PHP, the most common method is to split the string into an array using the exploit() function. This function divides the string into multiple parts through the specified delimiter and returns an array. The syntax is exploit(separator, string, limit), where separator is the separator, string is the original string, and limit is an optional parameter to control the maximum number of segments. For example $str="apple,banana,orange";$arr=explode(",",$str); The result is ["apple","bana

JavaScript Data Types: Primitive vs Reference JavaScript Data Types: Primitive vs Reference Jul 13, 2025 am 02:43 AM

JavaScript data types are divided into primitive types and reference types. Primitive types include string, number, boolean, null, undefined, and symbol. The values are immutable and copies are copied when assigning values, so they do not affect each other; reference types such as objects, arrays and functions store memory addresses, and variables pointing to the same object will affect each other. Typeof and instanceof can be used to determine types, but pay attention to the historical issues of typeofnull. Understanding these two types of differences can help write more stable and reliable code.

Using std::chrono in C Using std::chrono in C Jul 15, 2025 am 01:30 AM

std::chrono is used in C to process time, including obtaining the current time, measuring execution time, operation time point and duration, and formatting analysis time. 1. Use std::chrono::system_clock::now() to obtain the current time, which can be converted into a readable string, but the system clock may not be monotonous; 2. Use std::chrono::steady_clock to measure the execution time to ensure monotony, and convert it into milliseconds, seconds and other units through duration_cast; 3. Time point (time_point) and duration (duration) can be interoperable, but attention should be paid to unit compatibility and clock epoch (epoch)

How to pass a session variable to another page in PHP? How to pass a session variable to another page in PHP? Jul 13, 2025 am 02:39 AM

In PHP, to pass a session variable to another page, the key is to start the session correctly and use the same $_SESSION key name. 1. Before using session variables for each page, it must be called session_start() and placed in the front of the script; 2. Set session variables such as $_SESSION['username']='JohnDoe' on the first page; 3. After calling session_start() on another page, access the variables through the same key name; 4. Make sure that session_start() is called on each page, avoid outputting content in advance, and check that the session storage path on the server is writable; 5. Use ses

How does PHP handle Environment Variables? How does PHP handle Environment Variables? Jul 14, 2025 am 03:01 AM

ToaccessenvironmentvariablesinPHP,usegetenv()orthe$_ENVsuperglobal.1.getenv('VAR_NAME')retrievesaspecificvariable.2.$_ENV['VAR_NAME']accessesvariablesifvariables_orderinphp.iniincludes"E".SetvariablesviaCLIwithVAR=valuephpscript.php,inApach

See all articles