Using the PASSWORD() function

Hi again, I just thought about something. There are a more recommended way, as your passwords can be matched against a rainbow table.
If you can use the provided mysql_password function please do the following instead.

1. Take every users password and rehash them using password_hash and then place a passwordConverted = 0 in the database.
What I mean is create a one time php file. Make a loop and get every users "mysql password" and add it into password_hash("MYSQL_PASSWORD",PASSWORD_DEFAULT) and replace the one in the database. Now you have a double hash password that can't be matched against a rainbow table. So if two or more users have 'password' they will be completely different.

Now if a user logins and passwordConverted are 0:
1. Validate password using:

PHP Code:

password_verify(
    mysql_password(
        $this->input->post('password')
    ),
    $dbPassword
); 


2. Rehash password password_hash($this->input->post('password'),PASSWORD_DEFAULT);
3. Save new password hash and passwordConverted = 1 in DB.

If 1:
1. password_verify($this->input->post('password'),$dbPassword);

Now you are secure. :-)