// saltIt.php

<?php
function saltIt($password, $salt=null)
{
  $saltHash = array();
  $saltHash['salt'] = $salt;
  $saltHash['password'] = $password;
  $saltHash['saltedHash'] = null;

  $saltHash['privatKey'] = "
  G.k?Z2!%ü+_;2Ä?jbFkFMA!Qzq?fS;rZWJh&ä6Zeä{zy<äPLeMKhnfEZ9(ä+0A
  _;rfOx]9glRJZ.8QFBb:Där]7)m0:d\aöYXDUm3dj_Ös,I8XLfLM5Z,Ljt2M/c
  ÖfiF/pE=,Duzrb;H]pUR+C}Mq*>vgdextaÜÖr;c&-0PL-{Pl<vQZazeL%uMVvC
  G(U-30GRyR@ö0Ä54ZW5uiQ9Nv3*<_O5Zv#e]P6YoÖu3q?=-&,I29BükÖ!dR.vr
  )ÄwyEd\mA]7TTC6}.WRöJG(FT+@%üIgiTlXqg6x}öM((Ü!@8-F4U+v+[93G!Lt
  jlN;äJ9Wq53y}x0:U>rä2A?Dc#N#Cy=X]zLn5CXrOoYdäSya:PuxTQ%T,5e;/P
  jKxHWZG*+t\JMDOww_NKdR!S5Fv6Ö[pVXüX(*+:YSq/ÖVamabSOwwÜg)_U.>ÜP
  A<}y-X.<gM,VsVwcEL(jÄ])\lF}OouIkYIpniS-PvX>a6Nf9Gds-#bt4Ä?DÜJä";

  if($saltHash['salt'] == null)
  {
    $saltHash['salt'] = microtime();
    $saltHash['salt'] = crc32($saltHash['salt']);
    $saltHash['salt'] = pack('N', $saltHash['salt']);
    $saltHash['salt'] = base64_encode($saltHash['salt']);
    $saltHash['salt'] = substr($saltHash['salt'], 0, 6);
  }
  else if(strpos($saltHash['salt'], "|") !== false)
  {
    $saltHash['salt'] = substr($saltHash['salt'], 0, strpos($saltHash['salt'], "|"));
  }
  $saltHash['saltedHash'] = $saltHash['salt'];
  $saltHash['saltedHash'].= "|";
  $saltHash['saltedHash'].= sha1($saltHash['privatKey']);
  $saltHash['saltedHash'].= sha1($saltHash['salt'].$saltHash['password']);
  return $saltHash['saltedHash'];
}
?>

// Login

<?php
ob_start();
include_once("saltIt.php");
include_once("config.inc.php");
mysql_connect($database_host, $database_user, $database_password) or die ("Couldn't connect.");
mysql_select_db($database_name) or die ("No database with this name.");

$username = stripslashes(mysql_real_escape_string($_POST['username']));
$password = stripslashes(mysql_real_escape_string($_POST['password']));

$saltedHash = null;
$databaseSaltedHash = null;

$saltedHash = saltIt($password);

$sql="SELECT password FROM users WHERE username='$username'";
$result=mysql_query($sql);
$databaseSaltedHash = mysql_fetch_object($result);
$databaseSaltedHash = $databaseSaltedHash ->password;

if(saltIt($password, $databaseSaltedHash) == $databaseSaltedHash)
{
  session_register("username");
  echo "Successfully.";
}
else
{
  echo "Failed.";
}
ob_end_flush();
?>