Question

我正在努力解决问题。我使用Phalcon框架。

问题是，$this->security->checkHash()函数总是返回false。

到目前为止我检查了什么：检查varchar密码字段的长度（为255），以便散列完全适合字段。

目前，代码如下所示：

注册功能：

public function registerAction()
{
    $postData = $this->request->getPost();

    /*
     * Validation
     */
    $validation         = new  RegistrationValidation();
    $validationMessages = $validation->validate($postData);

    if (count($validationMessages)) {
        // Validation Failed!
        foreach ($validationMessages as $message)
            $this->flashSession->error( $message);
        $this->response->redirect( $_SERVER['HTTP_REFERER'] );
        $this->response->send();
    } else {
        // Check Passwords Match
        if($postData['password'] !== $postData['password-repeat']) {
            $this->flashSession->error( "Passwords don't match");
            $this->response->redirect( $_SERVER['HTTP_REFERER'] );
            $this->response->send();
        }
    }

    /**
     * Begin registration Process
     */
    $user = new Users();

    $password = $this->request->getPost('pawword');
    $password = $this->security->hash($password);

    $user->username     = $this->request->getPost('username');
    $user->email        = $this->request->getPost('email');
    $user->register_ip  = $_SERVER['REMOTE_ADDR'];
    $user->password     = $password;
    $user->active       = 0;

    // Store user
    $user->save();
    $this->view->emailmsg = $this->sendVerificationMail($user->id, $user->email, $user->username);
}

登录功能：

public function loginAction()
{
    if ($this->request->isPost()) {

        $email = $this->request->getPost("email");
        $password = $this->request->getPost("password");

        var_dump($password);

        $user = Users::findFirstByEmail($email);


        var_dump($this->security->checkHash( 'edrsvc', '$2y$12$ZERPY2Q3N0hUdG1XSkw5V.DqhYek97IZyrRQwq/UP/X7xO3PiPIpG' ));

        var_dump($this->security->checkHash($password,  $user->password));
        var_dump(password_verify('edrsvc',  '$2y$12$ZERPY2Q3N0hUdG1XSkw5V.DqhYek97IZyrRQwq/UP/X7xO3PiPIpG'));



        die();
        if ($user) {
            if ($this->security->checkHash($password, $user->password)) {

                var_dump($user);
                die();


                $this->_registerSession($user);

                $this->flash->success(
                    "Welcome " . $user->name
                );

                // Forward to the 'invoices' controller if the user is valid
                $this->dispatcher->forward(
                    [
                        "controller" => "index",
                        "action" => "index",
                    ]
                );
            }
        } else {

            $this->security->hash(rand());

            $this->flashSession->error(
                'Wrong Email or password <a href="#">Back</a>'
            );

        }
    }
}

你可以看到那3个var_dump，它们实际上正在运行而不是抛出异常，但总是返回false。密码当然是纠正并检查两次。

workFactor设置为Phalcon的默认workFactor。

Phalcon checkHash返回false（总是）

0 个答案: