joomla password encryption

by

Joomla passwords are MD5 hashed, but the passwords are salted before being hashed.
They are stored in the database as {hash}:{salt} this salt is a random string 32 characters in length.

So to create a new password hash you would do md5($password.$salt)

EDIT

Okay so for checking a password, say a user myguy enters the password mypassword, you would retrieve the row from the database that has username myguy.

In this row you’ll find a password say 4e9e4bcc5752d6f939aedb42408fd3aa:0vURRbyY8Ea0tlvnTFn7xcKpjTFyn0YT.
You split up the password hash and the salt:

$hashparts = preg_split (':' , $dbpassword);
echo $hashparts[0]; //this is the hash  4e9e4bcc5752d6f939aedb42408fd3aa
echo $hashparts[1]; //this is the salt  0vURRbyY8Ea0tlvnTFn7xcKpjTFyn0YT

now calculate the hash using this salt and the password myguy entered

$userhash = md5($userpassword.$hashparts[1]); // This would be 'mypassword' and the salt used in the original hash

Now if this $userhash and $hashparts[0] are identical the user has entered the correct password.

More Related Contents:

  1. Why do I get this error on first load of website?
  2. Parse error: parse error, expecting `'{” in [closed]
  3. CodeIgniter removing index.php from url
  4. Remove index.php From URL – Codeigniter 2
  5. Header and footer in CodeIgniter
  6. SHA1 vs md5 vs SHA256: which to use for a PHP login?
  7. CodeIgniter PHP Framework – Need to get query string
  8. CodeIgniter – best place to declare global variable
  9. SSL operation failed with code 1: dh key too small
  10. How to add an ORDER BY clause using CodeIgniter’s Active Record methods?
  11. How can I Use Prepared Statements in CodeIgniter
  12. How do I check if the request is made via AJAX in CodeIgniter?
  13. Retrieve JSON POST data in CodeIgniter
  14. Codeigniter – Using Multiple Databases
  15. How to create Codeigniter language files from database?
  16. Codeigniter multiple file upload messes file extension
  17. Codeigniter send email with attach file
  18. Upload multiple files in CodeIgniter
  19. Codeigniter session data lost after redirect
  20. Codeigniter CSRF – how does it work
  21. How to select rows where column value IS NOT NULL using CodeIgniter’s ActiveRecord?
  22. codeigniter check for user session in every controller
  23. Codeigniter CSRF valid for only one time ajax request
  24. How to make CodeIgniter accept “query string” URLs?
  25. Role Based Access Control
  26. How can I redirect a 404 Error in a custom 404 page using Codeigniter?
  27. Passing variable from controller to view in CodeIgniter
  28. Escaping SQL queries in Codeigniter
  29. enabling cors in codeigniter ( restserver by @chriskacerguis )
  30. Sending XML data using HTTP POST with PHP

Leave a Comment