note 112098 added to function.password-hash

Based on what I know of salting, I was wondering why I would want the function to generate a random salt without telling me what it was. After all, wouldn't I need the salt later when verifying a password? Turns out that isn't the case. The salt is included in the password_hash() return value and is automatically extracted by the password_verify() function. So it's not necessary to keep track of the salt value or store it separately. ---- Server IP: 69.147.83.199 Probable Submitter: 71.208.43.32 ---- Manual Page -- http://php.net/manual/en/function.password-hash.php Edit -- https://master.php.net/note/edit/112098 Del: integrated -- https://master.php.net/note/delete/112098/integrated Del: useless -- https://master.php.net/note/delete/112098/useless Del: bad code -- https://master.php.net/note/delete/112098/bad+code Del: spam -- https://master.php.net/note/delete/112098/spam Del: non-english -- https://master.php.net/note/delete/112098/non-english Del: in docs -- https://master.php.net/note/delete/112098/in+docs Del: other reasons-- https://master.php.net/note/delete/112098 Reject -- https://master.php.net/note/reject/112098 Search -- https://master.php.net/manage/user-notes.php