Crack Functions

Introduction

These functions allow you to use the CrackLib library to test the 'strength' of a password. The 'strength' of a password is tested by that checks length, use of upper and lower case and checked against the specified CrackLib dictionary. CrackLib will also give helpful diagnostic messages that will help 'strengthen' the password.

Note:

This extension has been moved to the » PECL repository and is no longer bundled with PHP as of PHP 5.0.0.

Requirements

More information regarding CrackLib along with the library can be found at » http://sourceforge.net/projects/cracklib.

Installation

This » PECL extension is not bundled with PHP. Information for installing this PECL extension may be found in the manual chapter titled Installation of PECL extensions. Additional information such as new releases, downloads, source files, maintainer information, and a CHANGELOG, can be located here: » http://pecl.php.net/package/crack.

In PHP 4 this PECL extensions source can be found in the ext/ directory within the PHP source or at the PECL link above. In order to use these functions you must compile PHP with Crack support by using the --with-crack[=DIR] configuration option.

Windows users will enable php_crack.dll inside of php.ini in order to use these functions. In PHP 4 this DLL resides in the extensions/ directory within the PHP Windows binaries download. The DLL for this PECL extension may be downloaded from either the » PHP Downloads page or from » http://pecl4win.php.net/

Runtime Configuration

The behaviour of these functions is affected by settings in php.ini.

Table 38. Crack configuration options

Name	Default	Changeable	Changelog
crack.default_dictionary	NULL	PHP_INI_PERDIR	PHP_INI_SYSTEM in crack <= 0.2. Available since PHP 4.0.5. Removed in PHP 5.0.0.

For further details and definitions of the PHP_INI_* constants, see the Appendix I, php.ini directives.

Resource Types

The CrackLib extension defines a dictionary resource identifier returned by crack_opendict().

Predefined Constants

This extension has no constants defined.

Examples

This example shows how to open a CrackLib dictionary, test a given password, retrieve any diagnostic messages, and close the dictionary.

Example 415. CrackLib example

copy to clipboard

<?php
// Open CrackLib Dictionary
$dictionary = crack_opendict('/usr/local/lib/pw_dict')

     or die('Unable to open CrackLib dictionary');

// Perform password check
$check = crack_check($dictionary, 'gx9A2s0x');

// Retrieve messages
$diag = crack_getlastmessage();

echo $diag; // 'strong password'


// Close dictionary
crack_closedict($dictionary);
?>

Note:

If crack_check() returns TRUE, crack_getlastmessage() will return 'strong password'.

Table of Contents

crack_check — Performs an obscure check with the given password
crack_closedict — Closes an open CrackLib dictionary
crack_getlastmessage — Returns the message from the last obscure check
crack_opendict — Opens a new CrackLib dictionary

Code Examples / Notes » ref.crack

martin

For those of you not familiar with the CrackLib Library: CrackLib (or PHP Crack) can not cope with plaintext wordlists. You have to generate a binary version of any plaintext list first. After you have done this you get 3 files with different extensions: my_list.txt ----> my_list.pwd my_list.hwm my_list.pwi crack_opendict() must be called with the first argument describing the path and base filename of the binary wordlist, e.g. C:\....\my_list or /usr/local/... (see below) Now the bad news - how to generate the 3 files: The only way i managed to do it: o Download the CrackLib package from sourceforge (see link in php.net txt) o USE UNIX/LINUX: o run configure o run make all o run make install o run make dict (having the wordlists in the /dict directory) o look for the files in /usr/local/share/cracklib/ o copy the files in a convenient directory That's it.