哈希密码无法登录

Question

Register.php

       $query = " 
        INSERT INTO users( 
            email,
            pass, 
            salt
        ) VALUES ( 
            :email, 
            :password, 
            :salt
        ) 
    "; 

      $salt = dechex(mt_rand(0, 2147483647)) . dechex(mt_rand(0, 2147483647)); 
    $password = hash('sha256', $_POST['password'] . $salt); 

    for($round = 0; $round < 65536; $round++) 
    { 
        $password = hash('sha256', $password . $salt); 
    } 

    $query_params = array( 
        ':email' => $_POST['email'],
        ':password' => $password, 
        ':salt' => $salt
    ); 

Login.php

        if($row) 
    { 

        $check_password = hash('sha256', $_POST['password'] . $row['salt']); 
        for($round = 0; $round < 65536; $round++) 
        { 
            $check_password = hash('sha256', $check_password . $row['salt']); 
        } 

        if($check_password === $row['pass']) 
        { 
            // If they do, then we flip this to true 
            $login_ok = true; 
        } 
    } 

Passwords/usernames are correct so can't figure out why this isn't working. In the database the hashed pass length is the same as the salt password which I am not sure is correct

Answer 1

Check if your pass column is varchar with length greater or equal of hashed password. I think your stored password has been truncated during saving.