password_verify(3) [php man page]

PASSWORD_VERIFY(3)							 1							PASSWORD_VERIFY(3)

password_verify - Verifies that a password matches a hash

SYNOPSIS

       boolean password_verify (string	$password, string  $hash)

DESCRIPTION

	Verifies that the given hash matches the given password.

	Note  that password_hash(3) returns the algorithm, cost and salt as part of the returned hash. Therefore, all information that's needed to
       verify the hash is included in it. This allows the verify function to verify the hash without needing separate  storage	for  the  salt	or
       algorithm information.

PARAMETERS

	      o $password
		- The user's password.

	      o $hash
		- A hash created by password_hash(3).

RETURN VALUES

	Returns TRUE if the password and hash match, or FALSE otherwise.

EXAMPLES

       Example #1

	      password_verify(3) example

	      <?php
	      // See the password_hash() example to see where this came from.
	      $hash = '$2y$07$BCryptRequires22Chrcte/VlQH0piJtjXl.0t1XkA8pw9dMXTpOq';

	      if (password_verify('rasmuslerdorf', $hash)) {
		  echo 'Password is valid!';
	      } else {
		  echo 'Invalid password.';
	      }
	      ?>

	      The above example will output:

	      Password is valid!

SEE ALSO

       password_hash(3), userland implementation.

PHP Documentation Group 													PASSWORD_VERIFY(3)

PASSWORD_NEEDS_REHASH(3)						 1						  PASSWORD_NEEDS_REHASH(3)

password_needs_rehash - Checks if the given hash matches the given options

SYNOPSIS

       boolean password_needs_rehash (string  $hash, integer  $algo, [array  $options])

DESCRIPTION

	This  function checks to see if the supplied hash implements the algorithm and options provided. If not, it is assumed that the hash needs
       to be rehashed.

PARAMETERS

	      o $hash
		- A hash created by password_hash(3).

	      o $algo
		- A password algorithm constant denoting the algorithm to use when hashing the password.

	      o $options
		- An associative array containing options. See the password algorithm constants for documentation on  the  supported  options  for
		each algorithm.

EXAMPLES

       Example #1

	      Usage of password_needs_rehash(3)

	      <?php

	      $password = 'rasmuslerdorf';
	      $hash = '$2y$10$YCFsG6elYca568hBi2pZ0.3LDL5wjgxct1N8w/oLR/jfHsiQwCqTS';

	      // The cost parameter can change over time as hardware improves
	      $options = array('cost' => 11);

	      // Verify stored hash against plain-text password
	      if (password_verify($password, $hash)) {
		  // Check if a newer hashing algorithm is available
		  // or the cost has changed
		  if (password_needs_rehash($hash, PASSWORD_DEFAULT, $options)) {
		      // If so, create a new hash, and replace the old one
		      $newHash = password_hash($password, PASSWORD_DEFAULT, $options);
		  }

		  // Log user in
	      }
	      ?>

RETURN VALUES

	Returns TRUE if the hash should be rehashed to match the given $algo and $options, or FALSE otherwise.

PHP Documentation Group 												  PASSWORD_NEEDS_REHASH(3)