Pro PHP and jQuery by Jason Lengstorf.pdf - Computer Science ...

210
CHAPTER 6 ■ PASSWORD PROTECTION SENSITIVE ACTIONS AND AREAS
}
?>
}
* Add the salt to the hash and return it
*/
return $salt . sha1($salt . $string);
Creating a Test Method for Salted Hashes
To see how salted hashes work, create a quick test method for _getSaltedHash() called
testSaltedHash(). This will be a public function that calls and outputs the values, enabling you to see
how the script functions.
In the Admin class, define the testSaltedHash() method:
private $_saltLength = 7;
public function __construct($db=NULL, $saltLength=NULL) {...}
public function processLoginForm() {...}
private function _getSaltedHash($string, $salt=NULL) {...}
public function testSaltedHash($string, $salt=NULL)
{
return $this->_getSaltedHash($string, $salt);
}
Next, add a new file called test.php to use this function and place it in the public folder
(/public/test.php). Inside this function, call the initialization file, create a new Admin class, and output
three hashes of this word: test. Create the first hash with no salt, and then sleep for one second to get a
new timestamp. Create the second hash with no salt, and then sleep for another second. Finally, create
the third hash using the salt from the second hash. Insert the following code to accomplish this test: