Quick Questions

I am writing a PHP script for friend for authentication. I already got info but I just need to know how the passwords are hashed and salted. Thanks in advance I couldn't find it.

Jake Bunce

XenForo moderator
Staff member
XenForo uses a salted double hash. I looked at the code and it appears to use one of two hash functions, depending on which is available:

sha1(sha1(password) . salt)


sha256(sha256(password) . salt)