devsam/core
3
6
Fork 1
Code Issues 60 Pull Requests Releases 1 Wiki Activity

회원 가입시 global_salt를 올바르게 사용하지 않는 문제 해결

Browse Source
This commit is contained in:
Hide_D
2018-03-16 02:20:39 +09:00
parent cdae15fd41
commit 3fcaa153f9
3 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
d_setting/conf.orig.php
+1 -1
View File
@@ -3,7 +3,7 @@ require(__dir__.'/../vendor/autoload.php');
/** /**
* 비밀번호 해시용 전역 SALT 반환 * 비밀번호 해시용 전역 SALT 반환
* 비밀번호는 sha512(sha512(password|globalsalt)|usersalt); 순임 * 비밀번호는 sha512(usersalt|sha512(globalsalt|password|globalsalt)|usersalt); 순임
* *
* @return string * @return string
*/ */
js/join.js
+1
View File
@@ -86,6 +86,7 @@ $(document).ready( function () {
$( "#main_form" ).submit(function(){ $( "#main_form" ).submit(function(){
var raw_password = $('#password').val(); var raw_password = $('#password').val();
var salt = $('#global_salt').val(); var salt = $('#global_salt').val();
console.log(salt + raw_password + salt);
var hash_pw = sha512(salt + raw_password + salt); var hash_pw = sha512(salt + raw_password + salt);
$.post({ $.post({
tmp_kakao/join.php
+1 -1
View File
@@ -97,7 +97,7 @@ if($canJoin != 'Y'){
</div> </div>
</div> </div>
<input type="hidden" id="input_hash_salt1" name="global_salt" value="<?=getGlobalSalt()?>"> <input type="hidden" id="global_salt" name="global_salt" value="<?=getGlobalSalt()?>">
<div class="form-group row"> <div class="form-group row">
<div class="col-sm-3"></div> <div class="col-sm-3"></div>
<div class="col-sm-9"> <div class="col-sm-9">