Req #77134 [NEW]: password_needs_rehash will flag a superior password

From: dsumner at sumone dot ca Operating system: all PHP version: 7.0.32 Package: hash related Bug Type: Feature/Change Request Bug description:password_needs_rehash will flag a superior password Description: ------------ On my website I am hashing all passwords with a cost of 7 (There is really no great security need). When a user logs on their password is checked with password_needs_rehash and it work well except that I want certain users to have a password with a higher cost than most users. I can generate their hashes quite easily, but when password_needs_rehash sees these "superior" passwords it returns TRUE and the logon logic then automatically downgrades their passwords. -- Edit bug report at https://bugs.php.net/bug.php?id=77134&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=77134&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=77134&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=77134&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=77134&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=77134&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=77134&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=77134&r=needscript Try newer version: https://bugs.php.net/fix.php?id=77134&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=77134&r=support Expected behavior: https://bugs.php.net/fix.php?id=77134&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=77134&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=77134&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=77134&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=77134&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=77134&r=dst IIS Stability: https://bugs.php.net/fix.php?id=77134&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=77134&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=77134&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=77134&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=77134&r=mysqlcfg