小编Lew*_*ler的帖子

我已经摸不着头脑了2个多小时.我研究过有关stackoverflow的文章,包括:

• Bcrypt无法正确验证的问题

• php password_hash和password_verify不匹配

• `password_verify`调用返回false以获取正确的密码

我还没能纠正我的问题.我会很感激我有多少白痴的指导:

将数据插入MySQL数据库的功能:

function insertUser($userObj) {
    $query = $this->databaseConnection->getStntPrepare()->prepare(
            "INSERT INTO user(username, userpassword) VALUES (?,?);");
    $username = $userObj->getUsername();
    $password = password_hash('testing1234', PASSWORD_BCRYPT);

    $query->bind_param('ss', $username, $password);
}

通过从MySQL检索数据来验证用户登录:

function findUser($userObj) {
    $query = $this->databaseConnection->getStntPrepare()->prepare(
            "SELECT userid, userpassword 
                FROM user 
                WHERE username=?");

    $pass = 'testing1234'
    $query->bind_param('s', $userObj->getUsername());
    $query->execute();
    $query->bind_result($userid, $hash);

    while ($query->fetch()) {

        if (password_verify($pass, $hash)) {
            echo 'Password is valid!';
        } else {
            echo 'Invalid password.';
        }
    }
}

运行时,我会收到"密码无效".

当我执行以下操作而不插入数据库然后检索:

$hash = password_hash('testing1234', PASSWORD_BCRYPT);
if (password_verify('testing1234', …