sodium_crypto_pwhash_str_verify()

(PHP 7 >= 7.2.0)

Verifies that a password matches a hash

说明

sodium_crypto_pwhash_str_verify(string $hash,string $password): bool

Checks that a password hash created using sodium_crypto_pwhash_str() matches a given plain-text password. Note that the parameters are in the opposite order to the same parameters in the similar password_hash() function.

参数

$hash

一个由password_hash()创建的散列值。

$password

用户的密码。

返回值

Returns TRUE if the password and hash match, or FALSE otherwise.

注释

Note:

Hashes are calculated using the Argon2ID algorithm, providing resistance to both GPU and side-channel attacks.

参见

• sodium_crypto_pwhash_str()Get an ASCII-encoded hash
• password_hash()创建密码的散列（hash）
• password_verify()验证密码是否和散列值匹配