password_get_info

(PHP 5 >= 5.5.0, PHP 7, PHP 8)

password_get_info — Devuelve información sobre el hash proporcionado

Descripción

password_get_info(string $hash): array

Cuando se le pasa un hash válido creado con un algoritmo soportado por password_hash(), esta función devolverá un array con información sobre dicho hash.

Parámetros

hash: Un hash creado por password_hash().

Valores devueltos

Devuelve un array asociativo con tres elementos:

algo, que coincidirá con una constante de algoritmo de contraseñas
algoName, que tiene el nombre legible por humanos del algoritmo
options, que incluye las opciones proporcionadas al llamar a password_hash()

Found A Problem?

Learn How To Improve This Page • Submit a Pull Request • Report a Bug

＋add a note

User Contributed Notes 1 note

down

cbungholio at gmail dot com ¶

7 years ago

If you're curious to use this method to determine if there is someway to evaluate if a given string is NOT a password_hash() value...

<?php

// Our password.. the kind of thing and idiot would have on his luggage:
$password_plaintext = "12345";

// Hash it up, fuzzball!
$password_hash = password_hash( $password_plaintext, PASSWORD_DEFAULT, [ 'cost' => 11 ] );

// What do we get?
print_r( password_get_info( $password_hash ) );

/* returns:
Array ( 
    [algo] => 1 
    [algoName] => bcrypt  // Your server's default.
    [options] => Array ( [cost] => 11 ) 
)
*/

// What about if it's un-hashed?...
print_r( password_get_info( $password_plaintext ) );

/* returns:
Array ( 
    [algo] => 0 
    [algoName] => unknown 
    [options] => Array ( ) 
) 
*/
?>

... Looks like it's up to each of us to personally decide if it's safe to compare against the final returned array.

＋add a note