From bc3ff3cf1b99d47ac08e58b2a61c771c3ea2fd28 Mon Sep 17 00:00:00 2001
From: Anthony Ferrara <ircmaxell@php.net>
Date: Thu, 20 Jun 2013 22:01:29 +0000
Subject: [PATCH] Update password_verify() to include the reason it doesn't
 need the algorithm or salt.

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@330568 c90b9560-bf6c-de11-be94-00142212c4b1
---
 reference/password/functions/password-verify.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/reference/password/functions/password-verify.xml b/reference/password/functions/password-verify.xml
index e2ccb98dbc..b52b23bc0d 100644
--- a/reference/password/functions/password-verify.xml
+++ b/reference/password/functions/password-verify.xml
@@ -17,6 +17,12 @@
   <para>
    Verifies that the given hash matches the given password.
   </para>
+  <para>
+   Note that <function>password_hash</function> returns the algorithm, cost and salt 
+   as part of the returned hash. Therefore, all information that's needed to verify
+   the hash is included in it. This allows the verify function to verify the hash
+   without needing separate storage for the salt or algorithm information.
+  </para>
  </refsect1>
 
  <refsect1 role="parameters">