moodle - Moodle 如何加密密码？

Question

我正在为 Moodle 开发自定义登录应用程序。

我只想知道Moodle用什么算法来加密密码？这样，我就可以在我的登录应用程序上对 Moodle 用户进行身份验证。

Answer 1

这取决于 Moodle 版本。直到 2.5:MD5 加可选盐(全局盐，用于每个密码，存储在 $CFG->passwordsaltmain 中)。从 Moodle 2.5 开始:

From Moodle 2.5 onwards Moodle automatically generates and adds a different salt for each individual user.

和:

The new password hashing mechanism relies on bcrypt support from PHP which is only normally available in PHP version is 5.3.7 or greater (see note below). If you are using a version of PHP which doesn't properly support bcrypt, Moodle will fall back to the old password hashing scheme, so we recommend that you continue to use a site-wide salt until you are able to upgrade PHP.

来源:Password salting .