W3cubDocs

/WordPress

wp_hash( string $data, string $scheme = 'auth' )

Get hash of given string.

$data

(string) (Required) Plain text to hash

$scheme

(string) (Optional) Authentication scheme (auth, secure_auth, logged_in, nonce)

Default value: 'auth'

(string) Hash of $data

wp_hash( $data, $scheme );

This function can be replaced via plugins. If plugins do not redefine these functions, then this will be used instead.
Uses: wp_salt() Get WordPress salt.

function wp_hash( $data, $scheme = 'auth' ) {
		$salt = wp_salt( $scheme );

		return hash_hmac( 'md5', $data, $salt );
	}

Uses	Description
wp-includes/pluggable.php: wp_salt()	Returns a salt to add to hashes.

Used By	Description
wp-includes/comment.php: wp_get_unapproved_comment_author_email()	Get unapproved comment author’s email.
wp-includes/class-wp-customize-nav-menus.php: WP_Customize_Nav_Menus::hash_nav_menu_args()	Hashes (hmac) the nav menu arguments to ensure they are not tampered with when submitted in the Ajax request.
wp-includes/pluggable.php: wp_verify_nonce()	Verifies that a correct security nonce was used with time limit.
wp-includes/pluggable.php: wp_create_nonce()	Creates a cryptographic token tied to a specific action, user, user session, and window of time.
wp-includes/pluggable.php: wp_validate_auth_cookie()	Validates authentication cookie.
wp-includes/pluggable.php: wp_generate_auth_cookie()	Generates authentication cookie contents.
wp-includes/class-wp-customize-widgets.php: WP_Customize_Widgets::get_instance_hash_key()	Retrieves MAC for a serialized widget instance string.

Version	Description
2.0.3	Introduced.

© 2003–2019 WordPress Foundation
Licensed under the GNU GPLv2+ License.
https://developer.wordpress.org/reference/functions/wp_hash