3v4l.org

run code in 300+ PHP versions simultaneously

@ 2016-09-03T20:57:06Z

<?php
declare(strict_types=1);

    /**
     * Verify a Django password (PBKDF2-SHA256)
     *
     * @param string $password   The password provided by the user
     * @param string $djangoHash The hash stored in the Django app
     * @return bool
     * @throws Exception
     */
    function django_password_verify(string $password, string $djangoHash): bool
    {
        $pieces = explode('$', $djangoHash);
        if (count($pieces) !== 4) {
            throw new Exception("Illegal hash format");
        }
        list($header, $iter, $salt, $hash) = $pieces;
        // Get the hash algorithm used:
        if (preg_match('#^pbkdf2_([a-z0-9A-Z]+)$#', $header, $m)) {
            $algo = $m[1];
        } else {
            throw new Exception(sprintf("Bad header (%s)", $header));
        }
        if (!in_array($algo, hash_algos())) {
            throw new Exception(sprintf("Illegal hash algorithm (%s)", $algo));
        }
        
        $calc = hash_pbkdf2($algo, $password, base64_decode($salt), (int) $iterations);
        var_dump($calc);
        return false;
    }
    
    var_dump(django_password_verify('123', 'pbkdf2_sha256$20000$MflWfLXbejfO$tNrjk42YE9ZXkg7IvXY5fikbC+H52Ipd2mf7m0azttk='));

Output for git.master, git.master_jit, rfc.property-hooks: Warning: Undefined variable $iterations in /in/KVaSt on line 29 Fatal error: Uncaught ValueError: hash_pbkdf2(): Argument #4 ($iterations) must be greater than 0 in /in/KVaSt:29 Stack trace: #0 /in/KVaSt(29): hash_pbkdf2('sha256', Object(SensitiveParameterValue), '1\xF9V|\xB5\xDBz7\xCE', 0) #1 /in/KVaSt(34): django_password_verify('123', 'pbkdf2_sha256$2...') #2 {main} thrown in /in/KVaSt on line 29
Process exited with code 255.

This tab shows result from various feature-branches currently under review by the php developers. Contact me to have additional branches featured.

Active branches

Archived branches

Once feature-branches are merged or declined, they are no longer available. Their functionality (when merged) can be viewed from the main output page

2022-12-01 RFC: Property hooks - included in PHP 8.4
2020-03-21 RFC: Is_Literal - declined
2020-12-04 Enumerations - included in PHP 8.1
2018-06-15 Typed Properties v2 - implemented in PHP 7.4
2016-08-12 Object typehint - included in PHP 7.2
2016-08-14 Arrow functions - withdrawn
2016-05-29 array_change_keys() - withdrawn
2016-04-19 Lexical scope support for anonymous classes - suspended
2016-04-17 Functional Interfaces - declined
2016-03-16 Typed Properties - superseded in favor of Typed Properties 2.0
2015-08-27 Callable Prototypes - declined
2015-05-01 Short Closures - declined / withdrawn in favor of Arrow Functions
2015-02-18 Scalar type hints v5 - included in PHP 7
2015-02-14 Union Types - declined
2013-09-22 Anonymous classes - included in PHP 7

preferences:dark modelive previewkey bindings

194.99 ms | 406 KiB | 5 Q