Quick Questions

[Seahawk]

I am writing a PHP script for friend for authentication. I already got info but I just need to know how the passwords are hashed and salted. Thanks in advance I couldn't find it.

 

[Jake Bunce]

XenForo uses a salted double hash. I looked at the code and it appears to use one of two hash functions, depending on which is available:

sha1(sha1(password) . salt)

or:

sha256(sha256(password) . salt)