Hi, Just in. As of release PHP 7.2.0, the new password hashing algorithm should be available but it doesn't seem to exist. Using the hashing algorithm introduce from here, here and here:
PASSWORD_ARGON2IThe usage below should work...: <?php /** * This code will benchmark your server to determine how high of a cost you can * afford. You want to set the highest cost that you can without slowing down * you server too much. 8-10 is a good baseline, and more is good if your servers * are fast enough. The code below aims for ≤ 50 milliseconds stretching time, * which is a good baseline for systems handling interactive logins. */ $timeTarget = 0.05; // 50 milliseconds $cost = 8; do { $cost++; $start = microtime(true); password_hash("test", PASSWORD_BCRYPT, ["cost" => $cost]); $end = microtime(true); } while (($end - $start) < $timeTarget); echo "Appropriate Cost Found: " . $cost; ?> ...but it failed with the warning:
Warning: Use of undefined constant PASSWORD_ARGON2I - assumed 'PASSWORD_ARGON2I' (this will throw an Error in a future version of PHP) in /home/gapuz/public_html/jomgapuz.com/public_html/info.php on line 14
Warning: password_hash() expects parameter 2 to be integer, string given in /home/gapuz/public_html/jomgapuz.com/public_html/info.php on line 14