PHP - Save And Read Files With Hashing System

Hey,

I'm looking for some PHP code which can read a certain text file i have.
I need to get certain information from this text file.

This is how the text file looks like:

metadataIngester: now executing performAction with token: 9188147351
metadataIngester: result of performAction with token:9188147351
metadataIngester: runtime (ms) for token 9188147351: 9953
inferencer: now executing performAction with token:9188147351
inferencer: result of performAction with token:9188147351
inferencer: runtime (ms) for token 9188147351: 10903
transcoder: now executing performAction with token:9188147351
transcoder: result of performAction with token:9188147351
transcoder: runtime (ms) for token 9188147351: 65456
transcoder: now executing performAction with token:9188147351
transcoder: result of performAction with token:9188147351
transcoder: runtime (ms) for token 9188147351: 83128
streamingServerTransfer: now executing performAction with token:9188147351
streamingServerTransfer: result of performAction with token:9188147351
streamingServerTransfer: runtime (ms) for token 9188147351: 12187
middlewa now executing performAction with token:9188147351
middlewa result of performAction with token:9188147351
middlewa runtime (ms) for token 9188147351: 28148


Now, there are more parts like this with an other tokenID & runtimes.
I need to get the runtime for each token (in this example it will be 9953 + 10903 + 65456 + 83128 + 12187 + 28148 = 209775 (ms)).
I need PHP to display the tokenID + the total time per token.

Hi, I have coded a site, whereby users can log in, and depending on their group, view all files within their group directory:
Code: [Select]
if ($handle = opendir("storage/Admin/$group")) {
while (false !== ($file = readdir($handle))) {
        if ($file != "." && $file != "..") {
            echo "<a target=\"_blank\" href=\"storage/Admin/$group/$file\">$file</a> <br />";
        }
}
closedir($handle);
}
In this example, a user can click on their file, and it will let them download it, but if there is a folder (directory) in there, once clicked on, it will open a  index of the directory.

Is there a way instead, to let it open a custom page and list the files within it there?

i use csv file reader class to read csv file...... i need to understand where i should create the sessions array so that i dont have to go back to this class everytime to reteive data.....

Hi

I have been googling really hard and haven't found any satysfying solution except http://www.phpfreaks.com/forums/php-coding-help/open-and-get-contents-of-a-word-document-with-php/

Do you know any PHP class to play with *.doc (up to 2003) files on Linux server? COM is nice but only on w1ndows

Thanks in advance
Tom

Is there a code library out there that can read the exif data from image files, without the use of the php exif extension?  I have a Windows hosting package and am noticing that several hosts don't (and won't) enable the exif extension for PHP for some reason.  I need Windows for one of my sites which requires MS SQL access, so I can't use a Unix/Linux host because of that. But all of them support PHP on Windows.   Suggestions?

Hey guys!
I have the following script to create an excel file, the thing is that I dont want to be asked if I want to open or save the file when accessing the php file...I just want the php file directly to save the excel file.

Heres the code:


$filename = "test.xls";
$contents = "testdata1 \ntestdata2 \ntestdata3 \n";
header('Content-type: application/vnd.ms-excel');
header('Content-Disposition: attachment; filename='.$filename);
echo $contents;


Is there a way instead of using the header function, use something like: fopen, fwrite, fclose ?

Thanks in advance!
Cheers,

Hello. I have a few questions about the hashing methods available.

I have read plenty of articles on the net about how MD5 and SHA0/SHA1 are not ideal methods to hash your data. PHP.net has recommended crypt() or hash(), but I am curious if salting even protects your users passwords? I know salting protects against rainbow tables ... but is there no way to defend against Brute Force or Dictionary Attacks?

Anyways. What do you guys recommend I use just to make sure my user's password's are not ... compromised. I guess the first-layer of defense would be to make sure your database passwords are secure and under a DMZ. But solutions like that including IDS / Firewall are ranging between $2500-$5000 a month.

Any help would be greatly appreciated.

Thank you.

Part of my class: using PHP5 ( http://php.net/manua...ssword-hash.php) If you know of anything new in PHP5 related to please do share

protected function create_hash($string){
$password = "#" . strrev($password);
    $grs =  $this->grs("|WordToTheWise",rand(22, 50));
    $hash = password_hash("_" . strrev($string), PASSWORD_BCRYPT, array('cost'=>rand(4,14),'salt'=>$grs));
    return strrev($hash);
}
public function verifyhash($string, $hash_string){//verifies that the hash is equal to the password
    return (password_verify("_" . strrev($string), strrev($hash_string)) ? true : false);
  }
 
private function grs($string_append = "", $length = 22) {
   $length = $length - strlen($string_append);
   $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!@#$%^&()_*,./;[]|';
   $randomString = '';
   for ($i = 0; $i < $length; $i++) {
       $randomString .= $characters[rand(0, strlen($characters) - 1)];
   }
   return $randomString . $string_append;
}

Okay so u use strrev on my string and hash just to make everything a bit more CONFUSING and i append the string with a "]" just to make the password harder to brute the strrev and append string is not meant to make the hash any more secure.   I store the reversed hash in my DB as a varchar   The point of the reverse hash is only to make the hash a little more unrecognizable to the human eye.     The Const is randomly chosen 4 - 14, and the salt is randomly generated with a special string appended.     How would you improve the hashing?
Edited by Richard_Grant, 09 September 2014 - 11:48 PM.

{
$getp=$_POST["password"];
$newhas=password_hash($getp,PASSWORD_BCRYPT);

I am trying to use this code for password hashing for every time that password is hashed it returns a different value.

How do I save the hashed value in database ?

I am currently testing a small hash idea, for say database encryption for passwords.

Basically what I want to know is if this is a good or not the best method for encryption...

Code: [Select]
<?php

    $us_password = 'drowssap'; // User-Submitted Password; 
    $salt = '))!&8d*34d763!(('; //The salt
    $dbs_password = '3750221c513902ff76f4ec7ffed5fa4385d2599d'; // Sha1 hash for "drowssap"+Salt;

        if($us_password == sha1($us_password.$salt)){
            //Some other code for success here
        } else {
           //Failure code here
        }
    
?>

So basically, this is an abstract example of what I'm doing... Is it any good, or what could be improved? I've also used DB-Stored salts unique to each user, so even if someone used rainbow tables ( even after failure on my part for letting them get the hash... ), and multiple users had the same password, they would only crack one, rather than all of them, since the hashes would be different due to the different salts.

When to use password_needs_rehash  Workflow for account registration. 1.       The user creates an account. 2.       Their password is hashed password_hash($password, PASSWORD_DEFAULT) and stored in the database. 3.       When the user attempts to login, the hash (password_verify  ) of the password they entered is checked against the hash of their real password (retrieved from the database). 4.       If the hashes match, the user is granted access. If not, the user is told they entered invalid login credentials. My question is 1.       When should I call password_needs_rehash? 2.       Do I really need to use it?     

Just a quick question.

I have heard a few people say that they store a specific (maybe random) salt string in the same row as the user that is generated when the user account is created or password is changed. But I thought one of the reasons people use hashing is so if someone managed to get hold of the database they couldn't decipher the password (like a simple md5'd string). But putting the salt string next to the username surely gives the attacker a major push in the right direction?

I am not claiming to know anything, I'm just asking because I'm trying to find the best practice (Or at least a good tried and tested one). I like the idea of having a salt in a php config file, because that would mean an attacker would actually have to get your files, and if they had got that far then your pretty much screwed anyway.

What is the latest and greatest way to hash data in PHP?

Hello all,

I looked everytwhere to find the answer to my question bug so far, no luck. I hope someone here can help me with this issue.

Oke, my problem is as following.

I'm creating a string with a foreach loop that I then will has after the loop. The problem is, is that that string is addad to a variable. When I sha1 hash that variable with the sha1 function from within PHP I get a different hash as when I just echo the string and manually hash that.

The point is, is that the manually hashed string is then correct, and the automitically hash string isn't.

This is the code I'm using, can someone tell me where to look at to solve this problem?


if (is_array($this->getFormData())){
     foreach ($this->getFormData() as $name => $value) { 
         $string .= $name."=".$value.$shamethod;
   }
}
$hashstring = sha1($string, false);
echo '<br /><br />'.$hashstring.'<br /><br />';
echo $string;


Thanks for  your time.

Dok