PHP密码验证，[重复]

Question

您好， 有一个基本的注册/登录表单，只是使用 password_hash 将哈希存储在数据库中。检查密码登录有问题

尽量不要煮过头 :)

<?php
    session_start();

    require_once 'conn.php';

    if(ISSET($_POST['login'])){
        if($_POST['user_name'] != "" || $_POST['password'] != ""){
            $username = $_POST['user_name'];
            $password = $_POST['password'];
            $sql = "SELECT * FROM `users` WHERE `user_name`=? AND `password`=? ";
            $query = $conn->prepare($sql);
            $query->execute(array($username,$password));
            $row = $query->rowCount();
            $fetch = $query->fetch();
            if($row > 0) {
                $_SESSION['user'] = $fetch['user_id'];
                header("location: home.php");
            } else{
                echo "<script>alert('Detalii Incorecte'); window.location='login.php'</script>";
            }
        }else{
             "<script>alert('Completeaza tot!'); window.location='login.php'</script>";
        }
    }
?>

好的，我在这里错了 当我存储纯文本时，这非常有效...... 当我应用 pasword_hash 时，我很难“重写”我的代码以匹配散列密码列

Answer 1

<?php

session_start();
require 'conn.php';

ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);

  if($_SERVER["REQUEST_METHOD"] == "POST"){
    $maile = $_POST["maile"];
    $password = $_POST["password"];

  $con = mysqli_connect('localhost','u3970232106_donat','jesu');

    $query = "SELECT * FROM `users` WHERE `maile` = '$maile'";
    $result = mysqli_query($con, $query);
    $hashed = password_hash($password, PASSWORD_DEFAULT);

         if(password_verify($_POST["password"],$hashed)) {
            header("location: home.php");
}else{
echo 'wrong';
}
}
?>

已修复！ ！ ！ 但无论如何，在这里的大多数帖子中，都说“不需要在 LOGIN.PHP 中放置 paword_hash ......一直都是这样......