密码加密Android，PHP

Question

已更新：

我有我的android应用程序工作正常与纯文本密码，直到现在。我正在尝试将密码散列为下一步。无法找到错误是什么。

我非常肯定的是，通信罚款明文密码。 我确认散列值被得到存储在DB正确（使用VARCHAR（80），用于在DB本属性）。

请帮忙。

Register.php

<?php 
include("config.php"); 

session_start(); 


// username and password sent from form 


$firstName = mysqli_real_escape_string($db,$_POST["firstName"]); 

$lastName = mysqli_real_escape_string($db,$_POST["lastName"]); 

$email = mysqli_real_escape_string($db,$_POST["email"]); 

$myusername = mysqli_real_escape_string($db,$_POST["username"]); 

$mypassword = mysqli_real_escape_string($db,$_POST["password"]); 

$passwordhash = password_hash($mypassword, PASSWORD_DEFAULT); 

$sql = "INSERT into user VALUES ('$firstName', '$lastName', '$myusername', '$email', '$passwordhash')"; 


$result = mysqli_query($db,$sql); 


if($result) 
{ 

    echo "success"; 

}else{ 

    echo "failed"; 

} 



?> 

的login.php

<?php 
include("config.php"); 


session_start(); 



// username and password sent from form 

$myusername = mysqli_real_escape_string($db,$_POST["username"]); 

$mypassword = mysqli_real_escape_string($db,$_POST["password"]);  

$sql = "SELECT * FROM user WHERE username = '$myusername'"; 

$result = mysqli_query($db,$sql); 
$count = mysqli_num_rows($result); 
$row = mysqli_fetch_array($result,MYSQLI_ASSOC); 
$hash = $row['password']; 

// If result matched $myusername and $mypassword, table row must be 1 row 



if(true === password_verify($mypassword,$hash)) { 

    echo "success". "\n"; 

    echo $row['firstName'] . "\n"; 

    echo $row['lastName'] . "\n"; 

    echo $row['username'] . "\n"; 

    echo $row['email'] . "\n"; 

} 
else{ 

    echo " Incorrect Login. Please try again "; 
} 


?> 

Answer 1

你必须使用一个叫做password_verify另一个PHP函数

，它会验证一个特定的密码被用于创建哈希值。

http://php.net/manual/en/function.password-verify.php

Answer 2

您需要使用password_verify（$密码，$散列）来验证密码。新的散列将使用不同的salt并为散列产生新的值。