SHA1 Crypt in RunUO2.0 to PHP ?

[Kaon]

Hello all

I search a way to use website login sharing the same accounting information with runuo server.

I saw password are crypted in SHA1 with RunUO2.0, but I can't get the same result with the SHA1 php crypt function ( sha1(string) )

Here is the crypt function of runuo :

public static string HashSHA1( string phrase )
		{
			if ( m_SHA1HashProvider == null )
				m_SHA1HashProvider = new SHA1CryptoServiceProvider();

			if ( m_HashBuffer == null )
				m_HashBuffer = new byte[256];

			int length = Encoding.ASCII.GetBytes( phrase, 0, phrase.Length > 256 ? 256 : phrase.Length, m_HashBuffer, 0 );
			byte[] hashed = m_SHA1HashProvider.ComputeHash( m_HashBuffer, 0, length );

			return BitConverter.ToString( hashed );
		}

Someone know how I can get the same crypted result with PHP5?
Thanks

[mordero]

I havent looked at it for a while, but im pretty sure the string is the username + password. So you might trying that.

[Kaon]

you're right, I found this this morning

Works fine

Just an example of script for testing (working, but it's not really good ) :

$tocrypt = 'test';
$crypted = sha1($tocrypt, true);
$crypted_array = array();
echo $tocrypt.' => '.$crypted.'<br />';

for( $i=0; $i<strlen($crypted); ++$i) {
	$crypted_array[$i] = $crypted[$i];
}

for( $i=0; $i<count($crypted_array); ++$i) {
	echo bin2hex($crypted_array[$i]).'-';
}

[Mark]

We salt the password with the username to help prevent dictionary attacks if the account file is stolen.

[Curuis]

Would you explain how to do this?

I think thta it would be so nice to have a way to use UO passwords ro acess the website...