9. Admin and PHP Password Hash And Verify [with Homework!] | Build a CMS using OOP CMS tutorial MVC
Let's start with administration for our cms php oop project, and lets see how to do a PHP password hash and verify manually, AND also using password hashing and verification using password_hash function. We will also show why it is bad idea to use md5 to hash your passwords, and how easily it can be compromised, as well as what are the advantages of using the salt when hashing.
HOMEWORK: Make validation of password before even checking the database(check the timestamps). Post your code on gists and send it in the comments, or join Applicable Programmers facebook group to discuss the problem and solutions.
Interested in learning real-life PHP design patterns?
➡️ https://www.applicableprogramming.com/
Join our Facebook group to follow the news and join discussion
➡️ / applicableprogrammers
or discord group if that is more your thing
➡️ / discord
➤ LINKS
➡️ Source on github: https://github.com/applicable-program...
(use tags to navigate between lessons)
➡️ Private "Applicable Programmers" facebook group / applicableprogrammers
➡️ PHP password_hash function: https://www.php.net/manual/en/functio...
➡️ Online md5 encryption and decryption tool https://www.md5online.org/md5-decrypt...
➡️ Other tutorials: www.ApplicableProgramming.com
Timestamps:
Administration (00:00)
Old/wrong way of using md5 (13:50)
Password hashing and salt explained (20:00)
md5 vs hashing and salting (28:40)
Homework (33:43)
password_hash (35:20)