dongluanban3536 2017-06-17 19:30
浏览 44
已采纳

PHP数据库比较哈希登录与db

I am attempting to build a login feature but without a registration system. This presents an issue as I am not sure how to make hashing compatible between mysql and php.

My PHP code:

    if (password_verify($upass, 'sha256') && $count == 1){
        $_SESSION['userSession'] = $row['uid'];
        header("Location:profilepage.php");
    }
    else {
     //SPLOSIONS!!
    }

$upass represents a POST on my form input, where users enter their given password.

My attempt at hashing password in MySQL:

 UPDATE users SET `userpassword` = SHA2(`userpassword`, 256)

The userpassword matches my userpassword column on my database, which I have hashed with SHA2.

The problem here is that my password_verify code on PHP appears incompatible with my updated hashed password on MySQL. As a result I run into my else command, rather than the code I want.

Was wondering how to make my MySQL password column compatible with my PHP code, or vice versa, or if there is a more practical approach to this.

  • 写回答

1条回答 默认 最新

  • duanniubeng2265 2017-06-17 19:47
    关注

    Solved it!

    Added the following code:

        $hashslingingslasher = password_hash($upass, PASSWORD_DEFAULT);
    

    Then called it via:

        if (password_verify($upass, $hashslingingslasher) && $count == 1){
            $_SESSION['userSession'] = $row['uid'];
            header("Location:userpage.php");
        }
    
    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 用windows做服务的同志有吗
  • ¥60 求一个简单的网页(标签-安全|关键词-上传)
  • ¥35 lstm时间序列共享单车预测,loss值优化,参数优化算法
  • ¥15 Python中的request,如何使用ssr节点,通过代理requests网页。本人在泰国,需要用大陆ip才能玩网页游戏,合法合规。
  • ¥100 为什么这个恒流源电路不能恒流?
  • ¥15 有偿求跨组件数据流路径图
  • ¥15 写一个方法checkPerson,入参实体类Person,出参布尔值
  • ¥15 我想咨询一下路面纹理三维点云数据处理的一些问题,上传的坐标文件里是怎么对无序点进行编号的,以及xy坐标在处理的时候是进行整体模型分片处理的吗
  • ¥15 一直显示正在等待HID—ISP
  • ¥15 Python turtle 画图