Method for encrypting plaintext password based on PHP development platform non-stop service

Abstract

The invention discloses a method for encrypting a plaintext password based on PHP development platform non-stop service. The implementation method comprises the following steps: (1) increasing the length of a password character string; and (2) performing incremental data transformation; (3) updating data transformation; (4) solving the user password problem of data reading, including in links such as user identity verification and the like, the transformation operation comprises two parts of database operation object transformation and SQL query transformation; (5) updating stock data in batches; and (6) designing a private key file and storing in a non-system directory, and the position of the non-system directory needs to be hidden. Compared with the prior art, the invention has the advantages that strong uniformity, silent implementation and gradual updating of data and program codes are not needed.

Description

technical field [0001] The invention relates to the technical field of plaintext password encryption, and specifically refers to a method for encrypting plaintext passwords based on non-stop service of a PHP development platform. Background technique [0002] Many projects that have been in operation for a long time cannot be thoughtful in all aspects in the early stage of rapid development, so as to meet the needs of the market after a few years. Among them, the encryption of user passwords is a problem that many projects have not considered in advance. With the rapid development of Internet technology, saving users' plaintext passwords in the database has become a major security risk for enterprises. Once the server is hacked, the database If the data is stolen, the user's plaintext password will be clearly placed in front of the hacker, which will cause unimaginable losses to the enterprise, and even directly lead to the direct collapse of the enterprise project departmen...

AI Technical Summary

Problems solved by technology

[0002] Many projects that have been in operation for a long time cannot be thoughtful in all aspects in the early stage of rapid development, so as to meet the needs of the market after a few years

Among them, the encryption of user passwords is a problem that many projects have not considered in advance. With the rapid development of Internet technology, saving users' plaintext passwords in the database has become a major security risk for enterprises. Once the server is hacked, the database If the data is stolen, the user's plaintext password will be clearly placed in front of the hacker, which will cause unimaginable losses to the enterprise, and even directly lead to the direct collapse of the enterprise project department

[0003] Commonly used plaintext password encryption schemes use MD5 hash algorithm to irreversibly encrypt passwords. This scheme requires strong unity of program code and data, and it takes a long time to transform massive data.

Directly adopt the encryption method of MD5 hash algorithm to encrypt the user's plaintext password in the database, and it is necessary to modify all the program codes of the entire system related to password reading, password updating, and user authentication. The workload of the operation is huge

Moreover, the number of users on the platform has already reached millions or more than ten million. To modify the code and update the database password at the same time, it is inevitable to suspend the provision of services to users and carry out a large-scale modification project of user plaintext passwords. The loss of the enterprise is also very large