Doc #77218 [Com]: password_hash returns null

From:	petk@php.net	Date:	Sat, 01 Dec 2018 13:15:59 +0000
Subject:	Doc #77218 [Com]: password_hash returns null
References:	1	Groups:	php.doc.bugs
Request:	Send a blank email to doc-bugs+get-16191@lists.php.net to get a copy of this message

Edit report at https://bugs.php.net/bug.php?id=77218&edit=1

 ID:                 77218
 Comment by:         petk@php.net
 Reported by:        magnar at myrtveit dot com
 Summary:            password_hash returns null
 Status:             Open
 Type:               Documentation Problem
 Package:            *Encryption and hash functions
 Operating System:   Any
 PHP Version:        7.3.0RC6
 Block user comment: N
 Private report:     N

 New Comment:

Hello, I'm just confirming this issue for now. Yes, the documentation should be probably fixed
from false to null in case of failure such as non existing algorithm. Returning string or null is
more logical in these more recently added functions. Returning mixed value of boolean is much less
logical to expect and understand in such case I think.


Previous Comments:
------------------------------------------------------------------------
[2018-11-29 08:33:25] magnar at myrtveit dot com

It seems that password_hash returns null on all failures. Here is my test: https://3v4l.org/DMv87

------------------------------------------------------------------------
[2018-11-29 08:26:53] magnar at myrtveit dot com

Description:
------------
From manual page: http://php.net/manual/en/function.password-hash.php

The return value is documented as "Returns the hashed password, or FALSE on failure."
However, password_hash returns null on failure, as is evident from this test: https://3v4l.org/siaNi I am not sure whether password_hash returns
false on other failures.

I don't know whether the issue is with the documentation or with the function.

Test script:
---------------
var_dump(password_hash('foo', -1));

Expected result:
----------------
false (based on the documentation)

Actual result:
--------------
null


------------------------------------------------------------------------



--
Edit this bug report at https://bugs.php.net/bug.php?id=77218&edit=1


   

Thread (10 messages)

• magnar at myrtveit dot comThu, 29 Nov 2018 08:26:53 +0000
  • magnar at myrtveit dot comThu, 29 Nov 2018 08:33:25 +0000Doc #77218 [Com]: password_hash returns null
  • petk@php.netSat, 01 Dec 2018 13:15:59 +0000Doc #77218 [Com]: password_hash returns null
  • nikic@php.netWed, 02 Jan 2019 13:55:02 +0000Bug->Doc #77218 [Opn]: password_hash returns null
  • cmb@php.netWed, 02 Jan 2019 14:32:38 +0000Doc #77218 [Opn]: password_hash returns null
  • girgias@php.netThu, 24 Jan 2019 18:10:59 +0000Doc #77218 [Opn->Fbk]: password_hash returns null on failure instead of false as of PHP 7.3
  • cmb@php.netThu, 24 Jan 2019 18:45:48 +0000Doc #77218 [Fbk->Opn]: password_hash returns null on failure instead of false as of PHP 7.3
  • cmb@php.netThu, 24 Jan 2019 19:09:04 +0000Doc #77218 [Opn]: password_hash returns null on failure instead of false as of PHP 7.4
  • weirdan at gmail dot comSun, 17 Feb 2019 04:08:44 +0000Doc #77218 [Com]: password_hash returns null on failure instead of false as of PHP 7.4
  • weirdan at gmail dot comMon, 02 Dec 2019 21:27:54 +0000Doc #77218 [Com]: password_hash returns null on failure instead of false as of PHP 7.4