mirror of
https://github.com/FreshRSS/FreshRSS.git
synced 2026-01-17 01:37:53 -05:00
a18c35046d
* Housekeeping lib_rss.php `lib_rss.php` had become much too large, especially after https://github.com/FreshRSS/FreshRSS/pull/7924 Moved most functions to other places. Mostly no change of code otherwise (see comments). * Extension: composer run-script phpstan-third-party
37 lines
904 B
PHP
37 lines
904 B
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
class FreshRSS_password_Util {
|
|
// Will also have to be computed client side on mobile devices,
|
|
// so do not use a too high cost
|
|
public const BCRYPT_COST = 9;
|
|
|
|
/**
|
|
* Return a hash of a plain password, using BCRYPT
|
|
*/
|
|
public static function hash(string $passwordPlain): string {
|
|
$passwordHash = password_hash(
|
|
$passwordPlain,
|
|
PASSWORD_BCRYPT,
|
|
['cost' => self::BCRYPT_COST]
|
|
);
|
|
return $passwordHash;
|
|
}
|
|
|
|
/**
|
|
* Verify the given password is valid.
|
|
*
|
|
* A valid password is a string of at least 7 characters.
|
|
*
|
|
* @return bool True if the password is valid, false otherwise
|
|
*/
|
|
public static function check(string $password): bool {
|
|
return strlen($password) >= 7;
|
|
}
|
|
|
|
public static function cryptAvailable(): bool {
|
|
$hash = '$2y$04$usesomesillystringfore7hnbRJHxXVLeakoG8K30oukPsA.ztMG';
|
|
return $hash === @crypt('password', $hash);
|
|
}
|
|
}
|