Could not fetch password hash from MySQL

Question

i've got a problem with password verify. I'm trying to fetch an hash from my password column and then verify with the password from form. I'm not sure why it doesn't work:

        $pass = mysqli_query($link, "SELECT password FROM male_users WHERE email=$email");
        $hash = mysqli_fetch_assoc($pass);
        if (password_verify($password, $hash)) {
            echo('Hello');
        } else  {
            echo('Email or Password not mach');
        }

It turns back an error: mysqli_fetch_assoc() expects parameter 1 to be mysqli_result, boolean given but i found on stack that people succesfully uses that. What am i doing wrong? Thnx in advance! best regards

Do you really have separate database tables for users based on their gender? — Mark Baker
– Mark Baker, Commented May 7, 2016 at 9:43
Also, your code is vulnerable to SQL injection, and mysqli_fetch_assoc() returns an array not a string. — Chris
– Chris, Commented May 7, 2016 at 9:48

JYoThI · Accepted Answer · 2016-05-07 09:51:58Z

1

try like this and your mysqli_fetch_assoc return array so use $hash['password'] insted of $hash and finally use single quotes in where condition .

 $pass = mysqli_query($link, "SELECT password FROM male_users WHERE email='$email'");
    $hash = mysqli_fetch_assoc($pass);
    if (password_verify($password, $hash['password'])) {
        echo('Hello');
    } else  {
        echo('Email or Password not mach');
    }

answered May 7, 2016 at 9:51

JYoThI

12.1k1 gold badge13 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Could not fetch password hash from MySQL

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related