Alex Zhang alexzhan

The new Secure Password Hashing API in PHP 5.5

The [RFC for a new simple to use password hashing API][rfc] has just been accepted for PHP 5.5. As the RFC itself is rather technical and most of the sample codes are something you should not use, I want to give a very quick overview of the new API:

Why do we need a new API?

Everybody knows that you should be hashing their passwords using bcrypt, but still a surprising number of developers uses insecure md5 or sha1 hashes (just look at the recent password leaks). One of the reasons for this is that the crypt() API is ridiculously hard to use and very prone to programming mistakes.

	/*
	* https://myip.ms/view/ip_owners/179248/Aliyun_Computing_Co_Ltd.html

	res = ""; for (i=0; i<41; i++) { console.log(arr[i].text); res = res + "\n" + arr[i].text; }
	arr = $("table .JColResizer .row_name a")

	101.132.0.0 - 101.133.255.255
	101.200.0.0 - 101.201.255.255
	101.37.0.0 - 101.37.255.255
	106.14.0.0 - 106.15.255.255

	#!/bin/bash

	yum groupinstall 'Development tools' -y
	yum install ncurses ncurses-devel wget git -y
	cd /usr/local/src
	wget ftp://ftp.vim.org/pub/vim/unix/vim-7.4.tar.bz2
	tar -xjf vim-7.4.tar.bz2
	cd vim74
	./configure --prefix=/usr --with-features=huge --enable-rubyinterp --enable-pythoninterp
	make && make install

	# Torndb is a very thin wrapper around MySQLdb that makes it even easier to use MySQL.
	# Because it is very light, one can just go through the one-file python source
	# to learn how to use it.

	# Installation: pip install torndb
	# Official doc: http://torndb.readthedocs.org/en/latest/
	# Source: https://github.com/bdarnell/torndb/blob/master/torndb.py

	from torndb import Connection

	#!/usr/bin/env python
	#vim: encoding=utf-8

	__author__ = "Dreampuf<[email protected]>"

	import subprocess
	import itertools

	dc = "a,ai,an,ang,ao,ba,bai,ban,bang,bao,bei,ben,beng,bi,bian,biao,bie,bin,bing,bo,bu,ca,cai,can,cang,cao,ce,cei,cen,ceng,cha,chai,chan,chang,chao,che,chen,cheng,chi,chong,chou,chu,chua,chuai,chuan,chuang,chui,chun,chuo,ci,cong,cou,cu,cuan,cui,cun,cuo,da,dai,dan,dang,dao,de,dei,den,deng,di,dia,dian,diao,die,din,ding,diu,dong,dou,du,duan,dui,dun,duo,e,ei,en,eng,er,fa,fan,fang,fei,fen,feng,fiao,fo,fou,fu,ga,gai,gan,gang,gao,ge,gei,gen,geng,gong,gou,gu,gua,guai,guan,guang,gui,gun,guo,ha,hai,han,hang,hao,he,hei,hen,heng,hm,hng,hong,hou,hu,hua,huai,huan,huang,hui,hun,huo,ji,jia,jian,jiang,jiao,jie,jin,jing,jiong,jiu,ju,juan,jue,jun,ka,kai,kan,kang,kao,ke,kei,ken,keng,kong,kou,ku,kua,kuai,kuan,kuang,kui,kun,kuo,la,lai,lan,lang,lao,le,lei,leng,li,lia,lian,liang,liao,lie,lin,ling,liu,lo,long,lou,lu,luan,lun,luo,lüe,lǘ,lǚ,lǜ,ma,mai,man,mang,mao,me,mei,men,meng,mi,mian,miao,mie,min,ming,miu,mo,mo

	import os
	import uuid
	import marshal
	import binascii

	import tornado.web


	def Session(func):
	def warpper(self, args, *kwargs):

	# -- Encoding: utf-8 --
	import base64
	import binascii
	import cgi
	import hashlib
	import hmac
	import logging
	import time
	import urllib
	import urlparse

	/*
	12306 Auto Query => A javascript snippet to help you book tickets online.
	Copyright (C) 2011-2012 Jingqin Lynn

	Includes jQuery
	Copyright 2011, John Resig
	Dual licensed under the MIT or GPL Version 2 licenses.
	http://jquery.org/license

	Includes Sizzle.js

	<html>
	<head>
	<title>IE Placeholder Text</title>

	</head>

	<body>

	<input type="text" name="myInputField" value="" placeholder="HTML5 Placeholder Text" id="myInputField">