http:\/\/www.openwall.com\/phpass\/<\/a>
\n* @since 2.5.0
\n*\/
\nclass PasswordHash {
\nvar $itoa64;
\nvar $iteration_count_log2;
\nvar $portable_hashes;
\nvar $random_state;<\/p>\n\/**
\n* PHP5 constructor.
\n*\/
\nfunction __construct( $iteration_count_log2, $portable_hashes )
\n{
\n$this->itoa64 = ‘.\/0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz’;<\/p>\n
if ($iteration_count_log2 < 4 || $iteration_count_log2 > 31)
\n$iteration_count_log2 = 8;
\n$this->iteration_count_log2 = $iteration_count_log2;<\/p>\n
$this->portable_hashes = $portable_hashes;<\/p>\n
$this->random_state = microtime() . uniqid(rand(), TRUE); \/\/ removed getmypid() for compatibility reasons
\n}<\/p>\n
\/**
\n* PHP4 constructor.
\n*\/
\npublic function PasswordHash( $iteration_count_log2, $portable_hashes ) {
\nself::__construct( $iteration_count_log2, $portable_hashes );
\n}<\/p>\n
function get_random_bytes($count)
\n{
\n$output = ”;
\nif ( @is_readable(‘\/dev\/urandom’) &&
\n($fh = @fopen(‘\/dev\/urandom’, ‘rb’))) {
\n$output = fread($fh, $count);
\nfclose($fh);
\n}<\/p>\n
if (strlen($output) < $count) {
\n$output = ”;
\nfor ($i = 0; $i < $count; $i += 16) {
\n$this->random_state =
\nmd5(microtime() . $this->random_state);
\n$output .=
\npack(‘H*’, md5($this->random_state));
\n}
\n$output = substr($output, 0, $count);
\n}<\/p>\n
return $output;
\n}<\/p>\n
function encode64($input, $count)
\n{
\n$output = ”;
\n$i = 0;
\ndo {
\n$value = ord($input[$i++]);
\n$output .= $this->itoa64[$value & 0x3f];
\nif ($i < $count)
\n$value |= ord($input[$i]) << 8;
\n$output .= $this->itoa64[($value >> 6) & 0x3f];
\nif ($i++ >= $count)
\nbreak;
\nif ($i < $count)
\n$value |= ord($input[$i]) << 16;
\n$output .= $this->itoa64[($value >> 12) & 0x3f];
\nif ($i++ >= $count)
\nbreak;
\n$output .= $this->itoa64[($value >> 18) & 0x3f];
\n} while ($i < $count);<\/p>\n
return $output;
\n}<\/p>\n
function gensalt_private($input)
\n{
\n$output = ‘$P$’;
\n$output .= $this->itoa64[min($this->iteration_count_log2 +
\n((PHP_VERSION >= ‘5’) ? 5 : 3), 30)];
\n$output .= $this->encode64($input, 6);<\/p>\n
return $output;
\n}<\/p>\n
function crypt_private($password, $setting)
\n{
\n$output = ‘*0’;
\nif (substr($setting, 0, 2) == $output)
\n$output = ‘*1’;<\/p>\n
$id = substr($setting, 0, 3);
\n# We use “$P$”, phpBB3 uses “$H$” for the same thing
\nif ($id != ‘$P$’ && $id != ‘$H$’)
\nreturn $output;<\/p>\n
$count_log2 = strpos($this->itoa64, $setting[3]);
\nif ($count_log2 < 7 || $count_log2 > 30)
\nreturn $output;<\/p>\n
$count = 1 << $count_log2;<\/p>\n
$salt = substr($setting, 4, 8);
\nif (strlen($salt) != 8)
\nreturn $output;<\/p>\n
# We’re kind of forced to use MD5 here since it’s the only
\n# cryptographic primitive available in all versions of PHP
\n# currently in use.\u00a0 To implement our own low-level crypto
\n# in PHP would result in much worse performance and
\n# consequently in lower iteration counts and hashes that are
\n# quicker to crack (by non-PHP code).
\nif (PHP_VERSION >= ‘5’) {
\n$hash = md5($salt . $password, TRUE);
\ndo {
\n$hash = md5($hash . $password, TRUE);
\n} while (–$count);
\n} else {
\n$hash = pack(‘H*’, md5($salt . $password));
\ndo {
\n$hash = pack(‘H*’, md5($hash . $password));
\n} while (–$count);
\n}<\/p>\n
$output = substr($setting, 0, 12);
\n$output .= $this->encode64($hash, 16);<\/p>\n
return $output;
\n}<\/p>\n
function gensalt_extended($input)
\n{
\n$count_log2 = min($this->iteration_count_log2 + 8, 24);
\n# This should be odd to not reveal weak DES keys, and the
\n# maximum valid value is (2**24 – 1) which is odd anyway.
\n$count = (1 << $count_log2) – 1;<\/p>\n
$output = ‘_’;
\n$output .= $this->itoa64[$count & 0x3f];
\n$output .= $this->itoa64[($count >> 6) & 0x3f];
\n$output .= $this->itoa64[($count >> 12) & 0x3f];
\n$output .= $this->itoa64[($count >> 18) & 0x3f];<\/p>\n
$output .= $this->encode64($input, 3);<\/p>\n
return $output;
\n}<\/p>\n
function gensalt_blowfish($input)
\n{
\n# This one needs to use a different order of characters and a
\n# different encoding scheme from the one in encode64() above.
\n# We care because the last character in our encoded string will
\n# only represent 2 bits.\u00a0 While two known implementations of
\n# bcrypt will happily accept and correct a salt string which
\n# has the 4 unused bits set to non-zero, we do not want to take
\n# chances and we also do not want to waste an additional byte
\n# of entropy.
\n$itoa64 = ‘.\/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789’;<\/p>\n
$output = ‘$2a$’;
\n$output .= chr(ord(‘0’) + $this->iteration_count_log2 \/ 10);
\n$output .= chr(ord(‘0’) + $this->iteration_count_log2 % 10);
\n$output .= ‘$’;<\/p>\n
$i = 0;
\ndo {
\n$c1 = ord($input[$i++]);
\n$output .= $itoa64[$c1 >> 2];
\n$c1 = ($c1 & 0x03) << 4;
\nif ($i >= 16) {
\n$output .= $itoa64[$c1];
\nbreak;
\n}<\/p>\n
$c2 = ord($input[$i++]);
\n$c1 |= $c2 >> 4;
\n$output .= $itoa64[$c1];
\n$c1 = ($c2 & 0x0f) << 2;<\/p>\n
$c2 = ord($input[$i++]);
\n$c1 |= $c2 >> 6;
\n$output .= $itoa64[$c1];
\n$output .= $itoa64[$c2 & 0x3f];
\n} while (1);<\/p>\n
return $output;
\n}<\/p>\n
function HashPassword($password)
\n{
\nif ( strlen( $password ) > 4096 ) {
\nreturn ‘*’;
\n}<\/p>\n
$random = ”;<\/p>\n
if (CRYPT_BLOWFISH == 1 && !$this->portable_hashes) {
\n$random = $this->get_random_bytes(16);
\n$hash =
\ncrypt($password, $this->gensalt_blowfish($random));
\nif (strlen($hash) == 60)
\nreturn $hash;
\n}<\/p>\n
if (CRYPT_EXT_DES == 1 && !$this->portable_hashes) {
\nif (strlen($random) < 3)
\n$random = $this->get_random_bytes(3);
\n$hash =
\ncrypt($password, $this->gensalt_extended($random));
\nif (strlen($hash) == 20)
\nreturn $hash;
\n}<\/p>\n
if (strlen($random) < 6)
\n$random = $this->get_random_bytes(6);
\n$hash =
\n$this->crypt_private($password,
\n$this->gensalt_private($random));
\nif (strlen($hash) == 34)
\nreturn $hash;<\/p>\n
# Returning ‘*’ on error is safe here, but would _not_ be safe
\n# in a crypt(3)-like function used _both_ for generating new
\n# hashes and for validating passwords against existing hashes.
\nreturn ‘*’;
\n}<\/p>\n
function CheckPassword($password, $stored_hash)
\n{
\nif ( strlen( $password ) > 4096 ) {
\nreturn false;
\n}<\/p>\n
$hash = $this->crypt_private($password, $stored_hash);
\nif ($hash[0] == ‘*’)
\n$hash = crypt($password, $stored_hash);<\/p>\n
return $hash === $stored_hash;
\n}
\n}<\/p>\n","protected":false},"excerpt":{"rendered":"
\u7533\u8bf7\u4e86\u4e00\u4e2aWordPress\u7a7a\u95f4\uff0c\u6ca1\u6599\u5230\u628a\u7528\u6237\u5bc6\u7801\u5fd8\u8bb0\u4e86\uff0c\u4e0d\u77e5\u9053\u4ec0\u4e48\u539f\u56e0\uff0cWordPress\u7684\u3010\u5fd8\u8bb0\u5bc6\u7801\u3011\u529f\u80fd…<\/p>\n","protected":false},"author":1,"featured_media":494,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[279,20],"tags":[24],"views":4824,"_links":{"self":[{"href":"http:\/\/www.brofive.net\/index.php?rest_route=\/wp\/v2\/posts\/226"}],"collection":[{"href":"http:\/\/www.brofive.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.brofive.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.brofive.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.brofive.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=226"}],"version-history":[{"count":2,"href":"http:\/\/www.brofive.net\/index.php?rest_route=\/wp\/v2\/posts\/226\/revisions"}],"predecessor-version":[{"id":898,"href":"http:\/\/www.brofive.net\/index.php?rest_route=\/wp\/v2\/posts\/226\/revisions\/898"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.brofive.net\/index.php?rest_route=\/wp\/v2\/media\/494"}],"wp:attachment":[{"href":"http:\/\/www.brofive.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=226"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.brofive.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=226"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.brofive.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=226"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"image\"](\"http:\/\/144.202.107.67\/wp-content\/uploads\/2018\/04\/image.png\" "\\"image\\"")
<\/a><\/p>\n