PayPal IPN用户名/密码哈希，它是如何工作的？ [英] PayPal IPN username/password hashing, how does it work?
问题描述
我试图利用IPN的PayPal订阅，为我的客户提供每月结算。
IPN工作正常，但我不知道密码hashing是如何工作的。
I'm trying to make use of the PayPal Subscription with IPN to provide monthly billing for my customers. The IPN works fine but I am not sure how the password hashing works.
用户名给予
订户访问订阅。 64密码（可选）
由PayPal生成并授予订阅者访问
订阅的密码（密码将被加密）。
username (optional) Username generated by PayPal and given to subscriber to access the subscription. 64 password (optional) Password generated by PayPal and given to subscriber to access the subscription (password will be encrypted).
我的理解是，我需要'哈希'真正的密码，然后与我收到的通过IPN保存的'哈希'密码进行比较。但是没有提到什么是'哈希'真的。从一些论坛，我收集它是一个linux crypt和Apache密码。所以我试图找到c＃实现和在线生成器哈希密码，但我从来没有得到IPN哈希密码作为结果。
My understanding was that I need to 'hash' the real password and then compare it with the saved 'hashed' password I received via IPN. but there is no mention on what that 'hash' really is. From some forum I gather it is a 'linux crypt' and 'Apache password'. So I have tried to find c# implementation and online generators to hash the password but I never get the IPN hashed password as a result.
- A ）这是我通过IPN得到的：password = nw4eVBBG2F0hk
- 这是我看到卖家记录时看到的：密码uq6oa0zmZSORU
- C）这是客户在他们的记录中看到的：密码探针^ blob
我需要一种方法从C到A，这将是很高兴知道为什么B不同于A。
I need a way to get from C to A and it would be nice to know why is B different then A.
推荐答案
这听起来很奇怪，是如何工作，如果你试图预先哈希，我不知道如何从你的结尾。
This is going to sound pretty weird, but this seems to be how it is working and I'm not exactly sure how this works out from your end if you're trying to pre-hash.
Paypal使用des crypt密码和最终密码的前2个字符作为盐。例如，如果你这样做：
Paypal uses a des crypt on the password with the final password's first 2 char as salt. So for example, if you do:
<?php echo crypt("probe^blob", "nw"); ?>
您将得到密码。我不知道他们是如何做到这一点，它是一种低效率检查后，事实与一个大的用户群。
You will get the salted password. I have no idea how they are doing that on their end, and it's sort of inefficient to check that after the fact with a large user base.
资料来源： http://www.sitepoint.com/forums/showthread.php?52952-PayPal-IPN-Password-Hashing
这篇关于PayPal IPN用户名/密码哈希，它是如何工作的？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
