如何使用PHP PDO跨平台进行用户名/密码管理

Question

I am working on a project which may be running on a server using mySQL or MS SQL as the Database. Therefore I am using PHP PDO to connect with my database. How can I most effectively handle password storage and verification as I do not want to store them in plain text.

I have attempted using Google for PDO Login and all the articles are mySQL specific, including using mySQL functions. I have so far been unable to find anything regarding cross database support.

   $qry = $db_conn->query("Select UserADID, EMPLID, UserActive, UserRole from tbl_Users Where UserADID= :USR_NAME and UserPass= :USR_PASS Limit 1");

I would expect to be able to pull from the DB the users's credentials (role and status) if their account is verified.

Answer 1

I used @aynber's suggestion of password_hash and password_verify .

If the connection is all done with PHP, then use password_hash and password_verify – aynber Jul 25