I am no expert in salt hash but while I was installing Acquia Dev, I noticed a variable $drupal_hash_salt
, filled with a randomly generated string, in settings.php of newly installed Drupal 7 and a file called .hashlist under root drupal installation folder. Can someone help me understand the salting concepts in Drupal 7?
When I tried to import a new version of Drupal 7 site, I could not see any random string in that same variable and also no .hashlist file. I may be doing something wrong here. I tried googling around to see if I could find something useful but no luck.
So I have 3 questions
How to do salt hashing in Drupal 7 during/before installation process?
What kinds of data are being hashed (other than password)?
How can I extend this salting concept further?
Thanks a lot in advance.