用于登录的codeigniter中的密码验证功能

Question

Hi all I have this issue when I validate log in in codeigniter that seems it does not check the required password in my database.The required password in my database is hash using this

$password_hash = password_hash($password, PASSWORD_BCRYPT);

How can i used password_verify function in my model code?

Here is my model code:

public function login($data) {

    $condition = "username =" . "'" . $data['username'] . "' AND " . "password =" . "'" . $data['password'] . "'";
    $this->db->select('*');
    $this->db->from('users');
    $this->db->where($condition);
    $this->db->limit(1);
    $query = $this->db->get();

    if ($query->num_rows() == 1) 
    {
        return true;
    } else 
    {
        return false;
    }
}

Here is my controller:

public function login_user() 
{

    $this->form_validation->set_rules('username', 'Username', 'trim|required|xss_clean','required');
    $this->form_validation->set_rules('password', 'Password', 'trim|required|xss_clean','required');

    if ($this->form_validation->run() == FALSE) {

          $this->load->view('login_view');
    } else {
        $data = array(
            'username' => $this->input->post('username'),
            'password' => $this->input->post('password'),
            'firstname' => $this->input->post('firstname'),
            'lastname' => $this->input->post('lastname')
        );
        $result = $this->login_database->login($data);
        if ($result == TRUE) {
                    // Add user data in session
            $this->session->set_userdata('username', $data['username']);
            $this->session->set_userdata('firstname', $data['firstname']);
            $this->session->set_userdata('lastname', $data['lastname']);

            //redirect to dashboard
            $this->load->view('include/sidenavbar');
            $this->load->view('include/topnavbar');
            $this->load->view('dashboard');
        } else {


             $this->session->set_flashdata('message', 'Login is invalid. Please try again!');
            $this->load->view('login_view', $data);
        }
    }
}

can anyone help me how to do this.. Thanks in advance.

Answer 1

You should use password_verify() to know if you're password is valid.

Try this model function:

public function login($data) {
    $this->db->select('password');
    $this->db->from('users');
    $this->db->where('username', $data['username']);
    $this->db->limit(1);
    $query = $this->db->get();

    if ($query->num_rows() == 1) {
        $record = $query->row_array();
        return password_verify($data['password'], $record['password']);
    } else {
        return false;
    }
}