How to send the password already with the hash to the database

Question

How could I send a hashed password to my database?

Code

$PDO = db_connect();
$sql = "INSERT INTO users(nome, login, password, email,linkfb) VALUES(:name, :login, :senha, :email, :linkfb)";
$stmt = $PDO->prepare($sql);
$stmt->bindParam(':name', $name);
$stmt->bindParam(':login', $login);
$stmt->bindParam(':senha', $senha);
$stmt->bindParam(':email', $email);
$stmt->bindParam(':linkfb', $linkfb);
$senha = isset($_POST['senha']) ? $_POST['senha'] : null;

Answer 1

hash

$PDO = db_connect();
$sql = "INSERT INTO users(nome, login, password, email,linkfb) VALUES(:name, :login, :senha, :email, :linkfb)";
$senha = hash('ripemd160', $senha);
$stmt = $PDO->prepare($sql);
$stmt->bindParam(':name', $name);
$stmt->bindParam(':login', $login);
$stmt->bindParam(':senha', $senha);
$stmt->bindParam(':email', $email);
$stmt->bindParam(':linkfb', $linkfb);
$stmt->execute();

or

$senha = password_hash($senha, PASSWORD_BCRYPT, 10);

validation

$senha = isset($_POST['senha']) ? hash('ripemd160', $_POST['senha']) : hash('ripemd160', 'null');

if you use the hash 'ripemd160' and what you will use to validate the password again when you need it

Answer 2

One way to do this would be:

$senha = (isset($_POST['senha'])) ? password_hash($_POST['senha'], PASSWORD_BCRYPT) : null;

$stmt->bindParam(":senha", $senha);

You can make these transformations in the SET method of your class that receives the data... I hope it helps...