Good day,
I am creating a program where all I need for credentials is the password.
$password = Input::get('password'); //eg: admin
and when I try to compare it with value on database which is hashed already.
$user = DB::table('users_table')->where('password',$password)->get();
//eg: hashed value for admin is '$10$zYy1fGLPh/eI/sj8YmkN8.sTTkD4k9t/gwrkgGWOIufHvRYhKwTay'.
I cant get any successful filter with it. Do I need special functions for this? thanks for the help.
If you're using Laravel's built in Hash::make() you won't be able to do it the way you're trying.
What happens when you Hash a password (using Laravel's Hash or PHP's password_hash()) is that you get a unique hash every time.
You should really require a user name, then fetch the password hash from that record and check it with Hash::check().
Otherwise you will need to fetch all passwords from the database, iterate through them and check each. Depending on the "cost" in the hashing algorithm, this could be an expensive operation if you have many users.
Now I don't know if you have multiple users in your table, but if you do, what happens if they have the same password?
It seems you're trying to compare plain $password, instead try to hash it, then do the compare, e.g.
DB::table('users_table')->where('password', some_hash_function($password))->get()
If the password on your database is hashed, then you will need to hash the password that the user enters using the same mechamism that you used when you stored the hashed password on the database, before you use it as a search criteria. Otherwise of course, it will not match the value on the database, even if it is the correct, unhashed value.
$password = Input::get('password'); //eg: admin
$password = your_hash_function($password);
$user = DB::table('users_table')->where('password',$password)->get();
true result. I also tried echoing ` $password = Hash::make('admin');` but every time I refresh the browser the value changes xD
Hash::make($password) as it is the user entered password that you want to make a hash out of, not some arbitrary string like 'admin'you can use Hash check
Hash::check('password', $password);
what is the method you used to hash the password ? then you have to compare the password in your database with the same hash method for the password got from the Input
