07-03-2022, 11:46 AM
|
|
Confirmed User
Industry Role:
Join Date: Oct 2018
Location: New Orleans, Louisiana. / Newcastle, England.
Posts: 1,125
|
Quote:
Originally Posted by k0nr4d
His issue is very simple - he's using BCRYPT, which generates a different hash for the same string each time it's run. You can literally run it on the same password 100 times and get 100 different hashes. As such, you can't compare strings like you could with a normal salted MD5 or something.
You have to use this:
https://www.php.net/manual/en/functi...ord-verify.php
Code:
if(password_verify($_POST['password'], $password)) {
|
I'm still getting an error when using that K0nr4d.
__________________
SOMETHING EXTREME IS COMING SOON!
|
|
|