common.lib.php안에 login_password_check함수 질문 채택완료

// 로그인 패스워드 체크

function login_password_check($mb, $pass, $hash)

{

    global $g5;

 

    $mb_id = isset($mb['mb_id']) ? $mb['mb_id'] : '';

 

    if(!$mb_id)

        return false;

 

    if(G5_STRING_ENCRYPT_FUNCTION === 'create_hash' && (strlen($hash) === G5_MYSQL_PASSWORD_LENGTH || strlen($hash) === 16)) {

        if( sql_password($pass) === $hash ){

 

            if( ! isset($mb['mb_password2']) ){

                $sql = "ALTER TABLE `{$g5['member_table']}` ADD `mb_password2` varchar(255) NOT NULL default '' AFTER `mb_password`";

                sql_query($sql);

            }

            

            $new_password = create_hash($pass);

            $sql = " update {$g5['member_table']} set mb_password = '$new_password', mb_password2 = '$hash' where mb_id = '$mb_id' ";

            sql_query($sql);

            return true;

        }

    }

 

    return check_password($pass, $hash);

}

// check_password함수 내용

function check_password($pass, $hash)

{

    if(defined('G5_STRING_ENCRYPT_FUNCTION') && G5_STRING_ENCRYPT_FUNCTION === 'create_hash') {

        return validate_password($pass, $hash);

    }

 

    $password = get_encrypt_string($pass);

 

    return ($password === $hash);

}

//validate_password 함수 내용

function validate_password($password, $hash)

{

    // Split the hash into 4 parts.

    

    $params = explode(':', $hash);

    if (count($params) < 4) return false;

    

    // Recalculate the hash and compare it with the original.

    

    $pbkdf2 = base64_decode($params[3]);

    $pbkdf2_check = pbkdf2_default($params[0], $password, $params[2], (int)$params[1], strlen($pbkdf2));

    return slow_equals($pbkdf2, $pbkdf2_check);

}