note 115023 added to function.password-needs-rehash

nick, this function cannot check if a string is a MD5 or SHA1 hash. It can only tell you if a password, hashed using the password_hash function, needs to be put through the hashing function again to keep up to date with the new defaults. The only time you can use this function is when your user logs in and you have already checked by means of password_verify that the password entered is actually correct. At that point, if password_needs_rehash returns true, you can put the plain text password through the password_hash function. ---- Server IP: 92.48.119.85 Probable Submitter: 5.199.155.134 ---- Manual Page -- http://php.net/manual/en/function.password-needs-rehash.php Edit -- https://master.php.net/note/edit/115023 Del: integrated -- https://master.php.net/note/delete/115023/integrated Del: useless -- https://master.php.net/note/delete/115023/useless Del: bad code -- https://master.php.net/note/delete/115023/bad+code Del: spam -- https://master.php.net/note/delete/115023/spam Del: non-english -- https://master.php.net/note/delete/115023/non-english Del: in docs -- https://master.php.net/note/delete/115023/in+docs Del: other reasons-- https://master.php.net/note/delete/115023 Reject -- https://master.php.net/note/reject/115023 Search -- https://master.php.net/manage/user-notes.php