php password hash and password verify issues no match

Question

I'm testing out the new password hash function from PHP 5.5. (). The $hash and the $password won't match no matter what I do.

$password = "test";

$hash = "$2y$10$fXJEsC0zWAR2tDrmlJgSaecbKyiEOK9GDCRKDReYM8gH2bG2mbO4e";


if (password_verify($password, $hash)) {
    echo "Success";
}
else {
    echo "Error";
}

Can someone please help me with this?

Answer 1

The issue with your code is that when dealing with your hash, you are using double quotation marks rather than single quotation marks.

When distributing:

$hash = "$2y$10$fXJEsC0zWAR2tDrmlJgSaecbKyiEOK9GDCRKDReYM8gH2bG2mbO4e";

By doing this, you are tricking PHP into believing that you have three variables: $2y, $10, and $fXJEsC0zWAR2tDrmlJgSaecbKyiEOK9GDCRKDReYM8gH2bG2mbO4e. which is obviously false.

When I enabled error reporting, I saw that the error:

Notice: Undefined variable: fXJEsC0zWAR2tDrmlJgSaecbKyiEOK9GDCRKDReYM8gH2bG2mbO4e

Replace all your double quote marks with single quote marks to fix.

I hope this helps you.