Jump to content

[Solved] PHP 7.2.0 GA is Released


jomgapuz

Recommended Posts

Hi,

 

Just in.

 

As of release PHP 7.2.0, the new password hashing algorithm should be available but it doesn't seem to exist.

Using the hashing algorithm introduce from here, here and here:

PASSWORD_ARGON2I

The usage below should work...:

<?php
/**
* This code will benchmark your server to determine how high of a cost you can
* afford. You want to set the highest cost that you can without slowing down
* you server too much. 8-10 is a good baseline, and more is good if your servers
* are fast enough. The code below aims for ≤ 50 milliseconds stretching time,
* which is a good baseline for systems handling interactive logins.
*/

$timeTarget = 0.05; // 50 milliseconds

$cost = 8;
do {
$cost++;
$start = microtime(true);
password_hash("test", PASSWORD_BCRYPT, ["cost" => $cost]);
$end = microtime(true);
} while ((
$end - $start) < $timeTarget);

echo
"Appropriate Cost Found: " . $cost;
?>

...but it failed with the warning:

Warning: Use of undefined constant PASSWORD_ARGON2I - assumed 'PASSWORD_ARGON2I' (this will throw an Error in a future version of PHP) in /home/gapuz/public_html/jomgapuz.com/public_html/info.php on line 14

Warning: password_hash() expects parameter 2 to be integer, string given in /home/gapuz/public_html/jomgapuz.com/public_html/info.php on line 14
Edited by jomgapuz
Link to comment
Share on other sites

  • 2 weeks later...
Guest
This topic is now closed to further replies.
×
×
  • Create New...