From 208d69e3607e4866ec9c61fe42584cf377444dcd Mon Sep 17 00:00:00 2001 From: GRMrGecko Date: Wed, 17 Sep 2014 07:55:42 -0500 Subject: [PATCH] Changed terminalogy to stolen as that is what it really is. Added return key detection for SHA1 field and Email Address field. Will not add for password field as I do not want any activity with the password field to make internet calls. The user should be forced to click the check button to send the hash. --- code/api.php | 2 +- code/index.php | 32 +++++++++++++++++++++++--------- readme.md | 2 +- 3 files changed, 25 insertions(+), 11 deletions(-) diff --git a/code/api.php b/code/api.php index cc5f1ed..a6cd57e 100644 --- a/code/api.php +++ b/code/api.php @@ -189,7 +189,7 @@ if ($_MGM['path'][1]=="email") { $entries = databaseQuery("SELECT * FROM `sha1` WHERE `hash`=%s", $_REQUEST['sha1']); $entry = databaseFetchAssoc($entries); if ($entry!=null) { - ?>

Password seems to have been leaked to hackers via .

Password was stolen by hackers via .

No leaks known in this database.

Check your email

- This checks your email address against leaks of passwords and email addresses. If a match is found, you can have my server email you the password through gmail via ssl with settings to automatically permanently delete sent emails. + This checks your email address against passwords and email addresses which have been stolen by hackers. If a match is found, you can have my server email you the password through gmail via ssl with settings to automatically permanently delete sent emails.

@@ -53,10 +53,17 @@ Total count of hashed passwords in database is
@@ -66,7 +73,7 @@ Total count of hashed passwords in database is Check your password

Only enter your password on a website you trust!
If you trust me and what I say below, go ahead and enter your password.

- This field uses JavaScript to check the strength of your password. Clicking the check button will hash your password using JavaScript and send the hash to my server to check against my hash database for leaked passwords. + This field uses JavaScript to check the strength of your password. Clicking the check button will hash your password using JavaScript and send the hash to my server to check against my hash database for stolen passwords.