From bc3ff3cf1b99d47ac08e58b2a61c771c3ea2fd28 Mon Sep 17 00:00:00 2001 From: Anthony Ferrara Date: Thu, 20 Jun 2013 22:01:29 +0000 Subject: [PATCH] Update password_verify() to include the reason it doesn't need the algorithm or salt. git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@330568 c90b9560-bf6c-de11-be94-00142212c4b1 --- reference/password/functions/password-verify.xml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/reference/password/functions/password-verify.xml b/reference/password/functions/password-verify.xml index e2ccb98dbc..b52b23bc0d 100644 --- a/reference/password/functions/password-verify.xml +++ b/reference/password/functions/password-verify.xml @@ -17,6 +17,12 @@ Verifies that the given hash matches the given password. + + Note that password_hash returns the algorithm, cost and salt + as part of the returned hash. Therefore, all information that's needed to verify + the hash is included in it. This allows the verify function to verify the hash + without needing separate storage for the salt or algorithm information. +