比較兩個密碼PHP

Question

這是我的代碼，看起來似乎很好，但是看起來卻不正確。 我知道我很容易注射。 只想知道這是否是比較兩個密碼的最佳方法？

if (empty($_POST['password'])) {
    $errors[] = "Please enter a password";
} else {
    if ($_POST['password'] != $_POST['password1']) {
        $errors[] = "Your password did not match the confirmed password";
    } else {
        $p = $_POST['password'];
    }
}

Answer 1

您的代碼很好，我會寫一些不同的代碼：

if (empty($_POST['password'])) {
   $errors[] = "Please enter a password";
} elseif($_POST['password'] !== $_POST['password1']) {
   $errors[] = "Your password did not match the confirmed password";
} else {
   $p = $_POST['password'];
}

Answer 2

我建議您一開始就必須同時檢查$_POST['password']和$_POST['password1'] 。

if (!empty($_POST['password']) && !empty($_POST['password1'])) {
        if (strcmp($_POST['password'], $_POST['password1']) === 0) {
            $p = $_POST['password'];
        } else {
            $errors[] = "Your password did not match the confirmed password";
        }
    } else {
        $errors[] = "Please enter a password";
    }