?????? ???? ??? ????? ?? ????? ???? ??

?????? ????? ????? ???? ?? ?????. ?? ???? ?? ? ??? ?? ?? ??? ???(salt)? ??? ???? ??? ??? ???? ????. ?? ???? ??? ??????? ??? ??? ??? ?????.

??: ?? ??? ??

MySQL? ??? ?? ????? ?? ???? ??? ? ????? ???? ??? ?? ???? ??? ?????. ??? ??? ???? ??? ?? ???? ???? ?? ?? ???? ???? ? ????.

?? ?? ??

?? ?? ??? ?? ???? ???? ? ?????.

$name = mysqli_real_escape_string($connect, $_POST['name']);
$password = mysqli_real_escape_string($connect, $_POST['password']);
$saltQuery = "SELECT salt FROM users WHERE name = '$name';";
$result = mysqli_query($connect, $saltQuery);
if ($result === false){
    die(mysqli_error());
}
$row = mysqli_fetch_assoc($result);
$salt = $row['salt'];
$saltedPW = $password . $salt;
$hashedPW = hash('sha256', $saltedPW);
$sqlQuery = "SELECT * FROM users WHERE name = '$name' AND password = '$hashedPW'";

if (mysqli_query($connect, $sqlQuery)){
    echo '<h1>Welcome to the member site '.$name.'</h1>';
} else {
    echo 'error adding the query: '.$sql_q.'<br> Reason: '.mysqli_error($connect);
}

???: ??? ???? ??

SQL ???? ?? ???? ??? ???? ??? ?????. ??? ????? ?? ???? ???? ? ??? ?? ??? ??? ??? ??? ?? ?????. ? ??? ????? ?? ??? ???? ???.

1. ???????? ??? ?? ??: ??? ???? ?? ???? ??(?? ??)? ?????. ??? ??? ???? ?????.
2. ??? ????? ??? ??? ?????. ???? ?? ? ?? ??? ???? ???? Password_verify() ??? ???? ??? ??? ?? ??? ????? ???? ?????.

mysqli? ???? ?? ??:

// Connect to the database
$mysqli = new mysqli($servername, $username, $password, $dbname);

// Initialize variables
$username = mysqli_real_escape_string($mysqli, $_POST['username']);
$password = mysqli_real_escape_string($mysqli, $_POST['password']);

// Fetch the salted hash for the specified username
$query = "SELECT password FROM users WHERE username = ?";
$stmt = $mysqli->prepare($query);
$stmt->bind_param('s', $username);
$stmt->execute();
$stmt->bind_result($hashedPassword);
$stmt->fetch();

// Verify the entered password
if (password_verify($password, $hashedPassword)) {
    // Login successful
    echo '<h1>Welcome to the member site '.$username.'</h1>';
} else {
    // Password did not match
    echo 'Invalid login credentials';
}

? ??? ??? ????? ???? ???? ? ?? ???? ???? ??? ???? ??? ??????? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!