password_get_info

(PHP 5 >= 5.5.0, PHP 7)

password_get_infoReturns information about the given hash

설명

array password_get_info ( string $hash )

When passed in a valid hash created by an algorithm supported by password_hash(), this function will return an array of information about that hash.

인수

hash

password_hash() 함수로 생성한 해시.

반환값

Returns an associative array with three elements:

add a note add a note

User Contributed Notes 3 notes

up
16
cbungholio at gmail dot com
6 years ago
If you're curious to use this method to determine if there is someway to evaluate if a given string is NOT a password_hash() value...

<?php

// Our password.. the kind of thing and idiot would have on his luggage:
$password_plaintext = "12345";

// Hash it up, fuzzball!
$password_hash = password_hash( $password_plaintext, PASSWORD_DEFAULT, [ 'cost' => 11 ] );

// What do we get?
print_r( password_get_info( $password_hash ) );

/* returns:
Array (
    [algo] => 1
    [algoName] => bcrypt  // Your server's default.
    [options] => Array ( [cost] => 11 )
)
*/

// What about if it's un-hashed?...
print_r( password_get_info( $password_plaintext ) );

/* returns:
Array (
    [algo] => 0
    [algoName] => unknown
    [options] => Array ( )
)
*/
?>

... Looks like it's up to each of us to personally decide if it's safe to compare against the final returned array.
up
-15
lincoln dot du dot j at gmail dot com
6 years ago
<?php

$a
= password_hash("rasmuslerdorf", PASSWORD_DEFAULT);

var_dump(password_get_info($a));
//change every refresh
var_dump($a);

?>

//Output like

array(3) {
  ["algo"]=>
  int(1)
  ["algoName"]=>
  string(6) "bcrypt"
  ["options"]=>
  array(1) {
    ["cost"]=>
    int(10)
  }
}
string(60) "$2y$10$wKEZs6W//QDoOeTKSCXx7.Y9Q7duFEtJpFFuJn1G5GhyWTTit/tL2"
up
-61
hej at gustav dot tv
9 years ago
<?php
var_dump
(password_get_info($hash));
// Example
array(3) {
  [
"algo"]=>
 
int(1)
  [
"algoName"]=>
 
string(6) "bcrypt"
 
["options"]=>
  array(
1) {
    [
"cost"]=>
   
int(10)
  }
}

?>
To Top