gistfile1.aw

<?php
/**
 * Inject a salt into a password to create the string to be hashed.
 * @author Audun Larsen <[email protected]>
 *
 * @param string $password
 *   Plain-text password.
 *
 * @param string $salt
 *   Well, the salt to inject into the password.
 *
 * @return string
 *   Returns the salted password, ready to be hashed.
 */
function pwInject($password, $salt) {
  $hex = hexdec(substr(hash('sha256', $password), 0, 1));
  $len = strlen($password);
  $pos = floor($hex*($len/16));

  return substr($password, 0, $pos).$salt.substr($password, $pos);
}