Whats new in phpSec 0.3-beta
I'm still trying out stuff with phpSec, that's why I call it a beta. I made a promise to my self not tho break stuff for anyone using it after the first beta release. And I still plan to keep that promise.
Last night I did some work on the password hashing methods and ended up deciding to rewrite the whole thing. And I did. But instead of rewriting the old class, i added a new one that I have called phpsecSuperPasswordHashingClass. That's why I haven't committed it yet. Still trying to figure out what to call it.
Anyway, the new password hashing class is based upon crypt() and how it formats it's output. So no more JSON objects from the password hashing method. It is capable to do both bcrypt and pbkdf2, as well as the sha2 variations. It should also be compatible with PHPASS, and any other systems using crypt() (That would be almost everything). All this power, at the tip of your fingers. It does automatic hash type detection as well, so you can use all types at once if you want (duh!).
Other than the new password hashing class, there is one other new feature I think is great. And that is the option to use phpSec without the need of setting up a database or having it write to files. Just do:
<?php require_once 'phpsec.class.php'; phpsec::init();
After this you can use all of the parts of phpSec that don't require to write any files. And that is:
- phpsecCrypt
- phpsecFilter
- phpsecPw
- phpsecRand
- phpsecYubikey
And, yeah.. phpsecSuperPasswordHashingClass. The reason why you have to still call phpsec::init() is that this sets up the autoloader function, so only files you need will be loaded. Cool eh?
phpSec homepage.