Password hashing

@ardavan

Your code is wrong.
Place the following code within a page, reload it several times and you will find out why.

Code:

echo '<br />';

$password = 'test';

$password_h = password_hash($password, PASSWORD_BCRYPT);
// Note that every time a hash is produced,
// it is different than the previous one.
// It is for prevention dictionary attacks.
echo $password_h;

echo '<br />';

$password_at_login = 'test';

$success = password_verify($password_at_login, $password_h);
var_dump($success);

echo '<br />';