Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
TimWolla
on Feb 23, 2023
|
parent
|
context
|
favorite
| on:
PHP bug: Password_verify() always return true with...
I assume s/bit/not/. The checking function is “does the given password with the stored parameters hash to the same value as the stored hash”. Hash functions are deterministic.
So returning the original hash for a valid password is the success case.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
So returning the original hash for a valid password is the success case.