Laravel User Authentication

Question

I followed this http://laravel.com/docs/4.2/security#authenticating-users

And done with my tabels,

While i try to authenticate, It fails all the time,

I use the default User Model and the auth.php's users table with suggested things in documentation. Should i have to do anything beyond it.

  $email = Input::get('email');
  $password = Input::get('password');       
  if (Auth::attempt(array('email' => $email, 'password' => $password)))
    {
        return Redirect::intended('dashboard');
    }

"it fails all the time". Is that the actual error message you get? — Joseph Silber
– Joseph Silber, Commented Dec 26, 2014 at 18:20
@Teeyo: I am not getting error message, as i don't how to throw error message here (so i tried with just return statements) — Biz Dev B
– Biz Dev B, Commented Dec 26, 2014 at 18:32
I fear that should i do anyother stuffs rather than the thing i did ? — Biz Dev B
– Biz Dev B, Commented Dec 26, 2014 at 18:37

Community · Accepted Answer · 2017-03-17 13:14:45Z

1

The password you store in your table needs to be a hashed value. Laravel requires it to be. But that shouldn't even be the primary reason. The password needs to be hashed so no one can find out what the actual password is. It doesn't matter if you think your database server is secure and nobody will gain access. There's always a possibility that your database gets compromised and in this case you wan't to protect the users password.

Check this question on Security Stack Exchange out for more information on the topic.

Now here's a fast way to get a hashed version of your password. (Without having a registration form, which obviously needs to do that). Add this to routes.php

Route::get('hash/{value}', function($value){
    return Hash::make($value);
});

Open the url /hash/your-password and copy this string into the password field in your database.

edited Mar 17, 2017 at 13:14

CommunityBot

11 silver badge

answered Dec 26, 2014 at 19:39

lukasgeiter

154k29 gold badges349 silver badges280 bronze badges

Sign up to request clarification or add additional context in comments.

8 Comments

Biz Dev B Over a year ago

I can't do this without hashing my password ?

lukasgeiter Over a year ago

You shouldn't. And if you want to you need to do a bit more work or write your own Auth UserProvider. Why don't you want to hash your password?

Biz Dev B Over a year ago

Well, then i will hash my password,

lukasgeiter Over a year ago

It's better that way, believe me.

Biz Dev B Over a year ago

Is this the way $password = Hash::make('secret'); ?

|

Collectives™ on Stack Overflow

Laravel User Authentication

1 Answer 1

8 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

8 Comments

Your Answer

Sign up or log in

Post as a guest

Related