IPS connect not matching password

[freudo]

User password and posting password not matching.

$username		= $input[0]['username']; -- fetcRemote username input ingame
$password		= $input[0]['password']; -- fetcRemote password input ingame

$salt = $member->members_pass_salt; -- getting member pass salt
$hash = crypt($password, '$2y$10$' . $salt);

if (\IPS\Login::compareHashes($member->members_pass_hash, $hash) === TRUE) {
    	echo "correct";
}
else
{
	echo "incorrect";
}

result example:

- input password = QWEjashjfahsjahsfhjblabalbala

- hash password = KAJSFKJAQQWEbalalbal

note: not shared completed code

Edited June 19, 2020 by barikat

[Master_MTA]

just use md5 instead this type of hashing +_+

[Patrick]

5 hours ago, Master_MTA said:

just use md5 instead this type of hashing +_+

Just don't use MD5, instead of bcrypt.. please.

Here is NanoBob's tutorial, how to handle passwords: https://forum.multitheftauto.com/topic/119243-user-authentication-password-handling-and-doing-it-safely/

 

(Functions in php: password_hash, password_verify)

 

[freudo]

thanks, problem is solved.