DADA::Security::Password
NAME
DADA::Security::Password
SYNOPSIS
use DADA::Security::Password Simple password checking, encrypting and generating for Dada Mail passwords, saved primarily in the List DB.
DESCRIPTION
Please note that I am not in any way a master or even a student of cryptology, for the most part, I'm using tried and true methods of encryption and taking the necessary precautions when I can. I don't think you should be using Dada Mail for International Trade Secrets. No, no. No. No. No. No. No.
Remember that an encryption scheme that uses a password is only as good as the password used with it. Please, do not use 'dada' as your passwrd.
Many, if not all of these subroutines can be repurpused for other projects, any variables that don't seem to be here are in the Config.pm file, no really, check it out.
SUBROUTINES
checkpassword
my $pwcheck = ($encrupted_pass, $unencrypted_pass);This subroutine checks to see if a encrypted password matches an unencrypted password. Passwords are first encrypted using your systems's crypt() function, the same one probably used for Apache Server Protected Directories and Hosting Directories themselves. The idea is the only way to compare a password given to the saved, encrypted password, is to encrypted the given password, and then check out if they match.
This function returns 1 if the passwords match.
encrypt_passwd
my $enc_pass = encrypt_passwd($string);Encrypts a string using crypt(). The salt number is created within the Config.pm file, every time its executed, so salt numbers are always pretty random. the encrypted password is made from the first 8 characters you give it, regardless of how long your password is.
The password that's created can only be successfully cracked using 'Brute Force' - trying every freakin combo available. That means the more random your password, the better it'll be.
generate_password
my $new_pass = generate_password();
creates a new, user-unfriendly password, full of numbers and funky symbols (all printable) this is primarily used when someone forgets their password and a new one needs to be made.
rot13
my $rotpass = rot13($string);encrypts a string, using rot13.
PLEASE BEWARE rot13 encrytpion is not very secure at all, you can decrypt it by hand. No, really. That's almost what it's used for. For now, its used to keep paswords that are saved in a cooke somewhat secure, like secure in passerbys or someone looking over your shoulder.
but anyways, its a nice little thing if you ever want to rot13 a message for sending, eh?
COPYRIGHT
Copyright (c) 1999 - 2014 Justin Simoni http://justinsimoni.com All rights reserved.
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.