PHP 5.5 Detailed explanation of the easiest way to create and verify hashes

PHP 5.5 Detailed explanation of the easiest way to create and verify hashes_PHP Tutorial

WBOY

Release： 2016-07-13 10:25:26

Original

914 people have browsed it

Let's discuss the password_hash() function first. This will be used as the hash value to create a new password. It contains three parameters: password, hash algorithm, options. The first two items are required. You can use this function according to the following example:

Copy the code The code is as follows:

$password = 'foo';
$ have = password. 🎜>
You will notice that we have not given this hash any option. The available options are now limited to two: cost and salt. To add options you need to create an associative array.

Copy code

The code is as follows:$options = [ 'cost' => 10,

'salt' => mcrypt_create_iv(22, MCRYPT_DEV_URANDOM) ];

After adding the option to the password_hash() function, our hash value changes, which is more secure.

Copy code

The code is as follows:$hash = password_hash($password,PASSWORD_BCRYPT,$options);

/ /$2y$10$JDJ5JDEwJDhsTHV6SGVIQuprRHZnGQsUEtlk8Iem0okH6HPyCoo22

Now that the hash is created, we can view the new hash value related information through password_get_info(). password_get_info() takes one argument - the hash value - and returns a parameter containing the algorithm (an integer representation of the hashing algorithm used), the algorithm name (the human-readable name of the hashing algorithm used), and the options we used to create the hash associative array of value options).

Copy code

The code is as follows:var_dump(password_get_info($hash));

array (3) {
["algo"]=>
int(1)
["algoName"]=>
string(6) "bcrypt"
["options" ]=>
array(1) {
["cost"]=>
int(10)
}
}
*/

The first one added to the Password Hashing API is password_needs_rehash(), which accepts three parameters, hash, hash algorithm and options. The first two are required. password_needs_rehash() is used to check whether a hash value was created using a specific algorithm and options. This is useful if your database is damaged and you need to adjust the hash. By checking each hash value with password_needs_rehash(), we can see whether the existing hash value matches the new parameter, affecting only those values created with the old parameter.
Finally, we have created our hash, looked up how it was created, checked whether it needs to be re-hashed, now we need to verify it. To verify plain text to its hash value, we must use password_verify(), which takes two parameters, password and hash value, and will return TRUE or FALSE. Let's check the hashed we got to see if it's correct.

Copy code

The code is as follows:$authenticate = password_verify('foo','$2y$10$JDJ5JDEwJDhsTHV6SGVIQuprRHZnGQsUEtlk8Iem0okH6HPyCoo2 2');

//TRUE

$authenticate = password_verify('bar','$2y$10$JDJ5JDEwJDhsTHV6SGVIQuprRHZnGQsUEtlk8Iem0okH6HPyCoo22');
//FALSE

http://www.bkjia.com/PHPjc/825081.html