diff --git a/check_password.php b/check_password.php index b24af7a..4e602ab 100644 --- a/check_password.php +++ b/check_password.php @@ -1,62 +1,61 @@ "https://api.pwnedpasswords.com/range/$sha1_password_short", + CURLOPT_RETURNTRANSFER => true, + CURLOPT_ENCODING => "", + CURLOPT_MAXREDIRS => 10, + CURLOPT_TIMEOUT => 30, + CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1, + CURLOPT_CUSTOMREQUEST => "GET", + CURLOPT_HTTPHEADER => array( + "content-type: text/plain" + ), + )); - curl_setopt_array($curl, array( - CURLOPT_URL => "https://api.pwnedpasswords.com/range/$sha1_password_short", - CURLOPT_RETURNTRANSFER => true, - CURLOPT_ENCODING => "", - CURLOPT_MAXREDIRS => 10, - CURLOPT_TIMEOUT => 30, - CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1, - CURLOPT_CUSTOMREQUEST => "GET", - CURLOPT_HTTPHEADER => array( - "content-type: text/plain" - ), - )); + $response = curl_exec($curl); + $err = curl_error($curl); -$response = curl_exec($curl); -$err = curl_error($curl); + // Put reponse into an array + $lines = explode(PHP_EOL, $response); -// Put reponse into an array -$lines = explode(PHP_EOL, $response); + // Set hitcounter to ZERO + $hitcounter=0; -// Set hitcounter to ZERO -$hitcounter=0; + // Loop through all lines + foreach ($lines as $line => $row) { + // Join the 5 sha1 chars with the result + $row = $sha1_password_short . $row; + // Break output + $row = explode(':', $row); + // Set hash as row (part zero of the explode) + $row = $row[0]; -// Loop through all lines -foreach ($lines as $line => $row) { - // Join the 5 sha1 chars with the result - $row = $sha1_password_short . $row; - // Break output - $row = explode(':', $row); - // Set hash as row (part zero of the explode) - $row = $row[0]; - - // Check if the hash matches your encrypted password - if ($row == $sha1_password) { - $hitcounter++; + // Check if the hash matches your encrypted password + if ($row == $sha1_password) { + $hitcounter++; + } } -} -curl_close($curl); + curl_close($curl); -if ($err) { - echo "cURL Error: $err"; -} + if ($err) { + echo "cURL Error: $err"; + } -if ($hitcounter != 0) { - echo "

The chosen password is known as a breached password!
- Please select a different password

"; - die; -} + if ($hitcounter != 0) { + echo "

The chosen password is known as a breached password!
+ Please select a different password

"; + die; + } } password_check("MySsecretPassword");