dongza1708 2011-04-21 17:54
浏览 538
已采纳

mysql sha256密码哈希编辑疯狂!

I hash my passwords like so;

 hash('sha256', $_POST['password'], date('y/m/d'))

Now say a password that is 'aaa' enters my mysql table like so;

˜4‡mϰ\±g¥ÂIS륌JÈ›ßWò/    ¯~èð

Now when I go in to edit anything on that row, it will disregard some characters and change it to something along the lines of;

˜4‡mϰ\±g¥ÂIS륌JÈ›

I have tried changing all the unicode settings for the mysql connection, the database, tables, and the individual row. I am using PDO, and InnoDB.

Am I doing something daft?!?

Thanks.

  • 写回答

3条回答 默认 最新

  • douxia2137 2011-04-21 17:57
    关注

    The prototype of the hash function is:

    string hash ( string $algo , string $data [, bool $raw_output = false ] )
    

    You're passing date('y/m/d') as the third argument, resulting in binary output, as the string is interpreted as true.

    You probably want hex output. You should drop that third argument. You probably wanted to integrate the date into the field somehow, which requires concatenation.

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论
查看更多回答(2条)

报告相同问题?