diff options
Diffstat (limited to 'includes/password/MWSaltedPassword.php')
-rw-r--r-- | includes/password/MWSaltedPassword.php | 46 |
1 files changed, 46 insertions, 0 deletions
diff --git a/includes/password/MWSaltedPassword.php b/includes/password/MWSaltedPassword.php new file mode 100644 index 00000000..6c6895a2 --- /dev/null +++ b/includes/password/MWSaltedPassword.php @@ -0,0 +1,46 @@ +<?php +/** + * Implements the BcryptPassword class for the MediaWiki software. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. + * http://www.gnu.org/copyleft/gpl.html + * + * @file + */ + +/** + * The old style of MediaWiki password hashing, with a salt. It involves + * running MD5 on the password, and then running MD5 on the salt concatenated + * with the first hash. + * + * @since 1.24 + */ +class MWSaltedPassword extends ParameterizedPassword { + protected function getDefaultParams() { + return array(); + } + + protected function getDelimiter() { + return ':'; + } + + public function crypt( $plaintext ) { + if ( count( $this->args ) == 0 ) { + $this->args[] = MWCryptRand::generateHex( 8 ); + } + + $this->hash = md5( $this->args[0] . '-' . md5( $plaintext ) ); + } +} |