Password hashing

@ardavan

Your code is wrong.
Place the following code within a page, reload it several times and you will find out why.

Code:

echo '<br />';

$password = 'test';

$password_h = password_hash($password, PASSWORD_BCRYPT);
// Note that every time a hash is produced,
// it is different than the previous one.
// It is for prevention dictionary attacks.
echo $password_h;

echo '<br />';

$password_at_login = 'test';

$success = password_verify($password_at_login, $password_h);
var_dump($success);

echo '<br />';

@ivantcholakov 

wait wait...
You said every time the hash will change...!
 
I think totally i got wrongly because I've saved the hashed password after register inside the DB.

correct me if I'm wrong : So I've to save the standard chars inside the DB AND i should use password_hash() & password_verify() for login.