More shitty-code geek theater, this time regarding password salting and hashing. The code in question:
function _encrypt($string) {
$first = crypt($string, '$2a$07$'.sha1('d67c5cbf5b01c9f91932e3b8def5e5f8').'$');
$final = sha1($first);
return $final;
}
// Part of the newer authentication system
function _password_hash($password, $salt
(
Read more... )