Alright so Im trying to verify password with SHA 512, but no matter what it still returns false like the hash check is not correct.
Generating hash when registering
$hashed = password_hash(hash('sha512', $password), PASSWORD_DEFAULT);
And to verify (upon login) I use simple
public function isValidLogin($username, $password) {
$sql = $this->connect();
$sql->real_escape_string($username);
$sql->real_escape_string($password);
$res = $sql->query("SELECT password FROM users WHERE name='".$username."'");
if ($res->num_rows >= 1) {
while($row = $res->fetch_assoc()) {
if (password_verify(hash('sha512', $password), $row['password'])) {
return true;
}
}
}
return false;
}
Try this code at time of registering instead of your code.
$hashed = hash("sha512", $password);
// original password
$_password = 'bluebeans123';
$password = hash('sha512', $_password);
$password = password_hash($password, PASSWORD_DEFAULT);
var_dump($password);
$verify = hash('sha512', $_password);
$verify = password_verify($verify, $password);
var_dump($verify);
Elaborate example: http://wiki.travisfont.com/PHP:Passwords(hash_w/_SHA512)
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With