OpenCart客户密码加密

根据OpenCart的用户模型,密码加密比MD5更复杂:

public function addUser($data) {
    $this->db->query("INSERT INTO `" . DB_PREFIX . "user` SET username = '" . $this->db->escape($data['username']) . "', salt = '" . $this->db->escape($salt = substr(md5(uniqid(rand(), true)), 0, 9)) . "', password = '" . $this->db->escape(sha1($salt . sha1($salt . sha1($data['password'])))) . "', firstname = '" . $this->db->escape($data['firstname']) . "', lastname = '" . $this->db->escape($data['lastname']) . "', email = '" . $this->db->escape($data['email']) . "', user_group_id = '" . (int)$data['user_group_id'] . "', status = '" . (int)$data['status'] . "', date_added = NOW()");
}

所以首先你生成这样的盐:

$salt = substr(md5(uniqid(rand(), true)), 0, 9);

然后你加密密码:

$password = sha1($salt . sha1($salt . sha1($data['password'])));