将password_hash生成的两个哈希值与一个密码进行比较

Question

So I store users password in database after hashed by password_hash() (php 5.5+). and then verify user when logging in using password_verify(). but now i want to also store password on users browser with cookies. i hash the same password using password_hash but this time the second part of hash is obviously different. (salt)

because of that, two hashes (the one in database and the one in cookie) are NOT equal. how do i verify them then???

Answer 1

store user credential on cookie is high risk.

If you store hashes password on database so you only need pass username and password then will hashes from other file and match it into your database.

ex. login.php post username and password

usercheck.php md5(password) and check it into database which already hashes password