Download the PHP package edwinmugendi/hashdigest without Composer
On this page you can find all versions of the php package edwinmugendi/hashdigest. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download edwinmugendi/hashdigest
More information about edwinmugendi/hashdigest
Files in edwinmugendi/hashdigest
Informations about the package hashdigest
hashdigest
A PHP Hash Generator and Verifier
This is a wrapper on the PHP function HASH for generating hash digests using sha256 algorithm and also verifying a given hash againist given data.
Installation
Requirements
PHP v>=5.1.2+
With Composer
The easiest way to install Carbon is via composer. Create the following composer.json
file and run the php composer.phar install command to install it.
Without Composer
Why not use composer? Anyway, Download Digester.php from the repo and save the file somewhere in your project.
Algorithm
Hash generation
The hash is generated by:
-
The function takes a string or array as parameter of data to be hashed eg;
-
If parameter is array, Sort the array by the key, Hence the above array will sorted into
- Generate the string to be hashed by joining the array elements with a '.' (default) or the separator you put in the 4th parameter of the
digest
function. Hence, the string generated from the above array will be:
`
- Hash the generated string with sha256 algorithm (for PHP use PHP Hash)
Hash verification
- To perform hash verification, Using the
isHashValid($hash,$dataToHash)
, you need to pass the pre created hash and the data from which the hash was generated from. - This function return
true
if hash is verified,false
otherwise
Possible applications
- Securing API - This library can be used to generate hash digest plus an (see below) of data to be passed to an API. Remember to also include the generated hash to the data being POSTed so that the API can generate an hash using the data and try and verify against the POSTed hash.
NB: This is code or a random string known only to the API provider and consumer and is included in the data to be hashed to make the hash more difficult to regenerate.
Happy Coding!