使用PHP中的加密密码登录验证

Question

I have a PostgreSQL database, which have many users. Users' passwords are encrypted in this format:

sha1$678ae$0dd4b5a9588be91a931d1ef1f7e7053477c1478e

This encryption was done with Django (although I don't know if you can encrypt it directly in database).

What I'm trying to do is make a PHP application that can use and validate these users, with those encrypted passwords.

How could I do it? PS: I'm using PHP 7.

Answer 1

By default, Django stores passwords using the PBKDF2 hash (see their docs ). Assuming you have not changed this default, you should be able to hash using PBKDF2 in PHP using the hash_pbkdf2 function.

You'll need to accept a user's password in your PHP app, turn it into a PBKDF2 hash with the same algo , salt , iterations , and length that your Django app uses, and then compare the resulting value against the encrypted password in your Django database to see whether they match.