How to insert a hashed password into table users?

I’m using services module, but i’ve created my own resource ‘login’, I’m using $data to store username + password.

When i use postman, I put a text plain for password, and in my service code i’ve added the hash function (see my code please)

this is my resource declaration :

'user_connexion' => array(   'actions'=> array(     'login'=> array(       'help'=> t('Permet de se connecter'),       'file'=>array('type'=>'inc','module'=>'my_module','name'=>'my_module.resource'),       'callback'=>'my_module_connexion_login',       'access arguments' => array('connexion resource login'),       'access arguments append' => FALSE,       'args'=> array(         array(           'name' => 'username',           'type' => 'string',           'description' => 'username du client',           'source' => array('data'=>'username'),           'optional' => FALSE,         ),         array(           'name' => 'password',           'type' => 'string',           'description' => 'password du client',           'source' => array('data'=>'password'),           'optional' => FALSE,         ), 

and this is the function callback :

function my_module_connexion_login($username, $password){ //hasher (pour le moment pour tester) password module_load_include('inc', 'services', 'includes/password'); $password_h= user_hash_password(trim($password)); var_dump($password_h); } 

the var_dump result change every time i send a post request (example for the same password text plain i’ve got this) :

string(55) "$S$DV5cPYQpTqX94qlY9jiYSsCkMCE7AZldfHbXx7qm1ju1aA6AQxRv" string(55) "$S$DMM2YDpjJ6R0q8.QxLTVjMrIw2dslnt.fBTRGUK6Q8RWEls.vEjy"..ect 

this is the complete function :

function my_module_connexion_login($username, $password){ //hasher (pour le moment pour tester) password module_load_include('inc', 'services', 'includes/password'); $password_h= user_hash_password(trim($password)); //var_dump($password_h); $log = db_select('users','u'); $log->addfield('u','uid','id_user'); $log->addfield('u','name','username'); $log->condition('name',$username,'='); $log->condition('pass',$password_h,'='); $login = $log->execute(); $connexion = array();  foreach ($login as $co) {        $connexion [] = array(         'uid'=>$co->id_user,         'username'=>$co->username         );       } if($connexion == null){     $response = array(); // error, so no login     return func_succes(3,$response); } else{      $response = $connexion; //no error and login     return func_succes(0,$response); }  } 

If i create a valid user and i choose a password, there is no way to login with this password (using my custom resource) because my function that take text plain from postman as THE password and hash it with MY RESOURCE will not returns the same hashed password as the real drupal hashed password for the password i’ve created before

How to use my resource to login, with taking the username (works now) and a text password, hash it and have the same hashed password stored on users table, to be able to compare it ?

Thank you.

This article was republished from its original source.
Call Us: 1(800)730-2416

Pixeldust is a 20-year-old web development agency specializing in Drupal and WordPress and working with clients all over the country. With our best in class capabilities, we work with small businesses and fortune 500 companies alike. Give us a call at 1(800)730-2416 and let’s talk about your project.

FREE Drupal SEO Audit

Test your site below to see which issues need to be fixed. We will fix them and optimize your Drupal site 100% for Google and Bing. (Allow 30-60 seconds to gather data.)

Powered by

How to insert a hashed password into table users?

On-Site Drupal SEO Master Setup

We make sure your site is 100% optimized (and stays that way) for the best SEO results.

With Pixeldust On-site (or On-page) SEO we make changes to your site’s structure and performance to make it easier for search engines to see and understand your site’s content. Search engines use algorithms to rank sites by degrees of relevance. Our on-site optimization ensures your site is configured to provide information in a way that meets Google and Bing standards for optimal indexing.

This service includes:

  • Pathauto install and configuration for SEO-friendly URLs.
  • Meta Tags install and configuration with dynamic tokens for meta titles and descriptions for all content types.
  • Install and fix all issues on the SEO checklist module.
  • Install and configure XML sitemap module and submit sitemaps.
  • Install and configure Google Analytics Module.
  • Install and configure Yoast.
  • Install and configure the Advanced Aggregation module to improve performance by minifying and merging CSS and JS.
  • Install and configure Schema.org Metatag.
  • Configure robots.txt.
  • Google Search Console setup snd configuration.
  • Find & Fix H1 tags.
  • Find and fix duplicate/missing meta descriptions.
  • Find and fix duplicate title tags.
  • Improve title, meta tags, and site descriptions.
  • Optimize images for better search engine optimization. Automate where possible.
  • Find and fix the missing alt and title tag for all images. Automate where possible.
  • The project takes 1 week to complete.