note 112680 added to function.password-hash

Just to re-iterate what is said above in the documentation, the result of this function will be longer than 60 chars at some point in the future—if you allow PHP to use its default cost—even if you continue to specify the bcrypt algorithm, because computers get faster all the time and the default cost value will be increased in future releases of PHP. For example: strlen(password_hash('foo', PASSWORD_BCRYPT, ['cost' => 100])) == 61 strlen(password_hash('foo', PASSWORD_BCRYPT, ['cost' => 1000])) == 62 The cost is stored in the output as a decimal integer using ASCII digits. ---- Server IP: 94.76.225.145 Probable Submitter: 213.120.126.47 ---- Manual Page -- http://php.net/manual/en/function.password-hash.php Edit -- https://master.php.net/note/edit/112680 Del: integrated -- https://master.php.net/note/delete/112680/integrated Del: useless -- https://master.php.net/note/delete/112680/useless Del: bad code -- https://master.php.net/note/delete/112680/bad+code Del: spam -- https://master.php.net/note/delete/112680/spam Del: non-english -- https://master.php.net/note/delete/112680/non-english Del: in docs -- https://master.php.net/note/delete/112680/in+docs Del: other reasons-- https://master.php.net/note/delete/112680 Reject -- https://master.php.net/note/reject/112680 Search -- https://master.php.net/manage/user-notes.php