회원 가입시 global_salt를 올바르게 사용하지 않는 문제 해결

This commit is contained in:
2018-03-16 02:20:39 +09:00
parent cdae15fd41
commit 3fcaa153f9
3 changed files with 3 additions and 2 deletions
+1 -1
View File
@@ -3,7 +3,7 @@ require(__dir__.'/../vendor/autoload.php');
/**
* 비밀번호 해시용 전역 SALT 반환
* 비밀번호는 sha512(sha512(password|globalsalt)|usersalt); 순임
* 비밀번호는 sha512(usersalt|sha512(globalsalt|password|globalsalt)|usersalt); 순임
*
* @return string
*/
+1
View File
@@ -86,6 +86,7 @@ $(document).ready( function () {
$( "#main_form" ).submit(function(){
var raw_password = $('#password').val();
var salt = $('#global_salt').val();
console.log(salt + raw_password + salt);
var hash_pw = sha512(salt + raw_password + salt);
$.post({
+1 -1
View File
@@ -97,7 +97,7 @@ if($canJoin != 'Y'){
</div>
</div>
<input type="hidden" id="input_hash_salt1" name="global_salt" value="<?=getGlobalSalt()?>">
<input type="hidden" id="global_salt" name="global_salt" value="<?=getGlobalSalt()?>">
<div class="form-group row">
<div class="col-sm-3"></div>
<div class="col-sm-9">