Hi Bill,
You probably would want to implement a modified version of the function user_check_password (in includes/password.inc)
For clarification of the method, see: http://hungred.com/useful-information/php-better-hashing-password/ http://stackoverflow.com/questions/3897434/password-security-sha1-sha256-or-...
Best regards, Ursula
On Tue, Jan 29, 2013 at 12:33 PM, Prothero William waprothero@gmail.comwrote:
Folks: I have an external application (a Shockwave movie) that uses my Drupal site for user verification and interaction. I use the store, etc to sell access to my product. My external application accesses the users table to get the username, email, and password. My application compares the entered password with the Drupal password. This was pretty straightforward with Drupal 6, which used MD5 encryption. Now it uses SHA512. While perusing the Drupal 7 scripts, it looks like Drupal relies on the shell to hash the password.
How can I, with a php script that runs outside of the Drupal environment, calculate the password that Drupal stores? I need this to be able to verify the user and determine the product licenses that he/she has purchased on my Drupal site.
Thanks for any info. I am not a php expert. Bill
Prothero William waprothero@gmail.com
-- [ Drupal support list | http://lists.drupal.org/ ]