Welcome to the Treehouse Community

Want to collaborate on code errors? Have bugs you need feedback on? Looking for an extra set of eyes on your latest project? Get support with fellow developers, designers, and programmers of all backgrounds and skill levels here with the Treehouse Community! While you're at it, check out some resources Treehouse students have shared here.

Looking to learn something new?

Treehouse offers a seven day free trial for new students. Get access to thousands of hours of content and join thousands of Treehouse students and alumni in the community today.

Start your free trial

PHP PHP User Authentication Adding Authentication to Your Application Password Hashing

Ronaldo Fialho
Ronaldo Fialho
5,105 Points
Posted by Ronaldo Fialho
Ronaldo Fialho
5,105 Points

You guys can help me with this challenge, plz? 

function newPasswordValid($userPassword, $currPassword, $newPassword, $confirmNewPassword) {
    if(!password_verify($currPassword, $userPassword)) {
      return false; 
    }

    if($newPassword == $confirmNewPassword) {
         $updated = password_hash($newPassword, PASSWORD_DEFAULT);  
      return true;
    }

}```



Bum(it says to make a new password and verify the new one)

```index.php
<?php

function newPasswordValid($userPassword, $currPassword, $newPassword, $confirmNewPassword) {
    if(!password_verify($currPassword, $userPassword)) {
      return false; 
    }

    if($newPassword == $confirmNewPassword) {
         $updated = password_hash($newPassword, PASSWORD_DEFAULT);  
      return true;
    }

}

1 Answer

Backend Intern
Backend Intern
7,148 Points
Backend Intern
Backend Intern
7,148 Points

Hello, first you need to check if passwords are not equal. And if they are not equal return a false. Second password validation is correct return hashed password but not true.

<?php

function newPasswordValid($userPassword, $currPassword, $newPassword, $confirmNewPassword) {

    if(!password_verify($currPassword, $userPassword)) {
      return false; 
    }
    if($newPassword != $confirmNewPassword) {
      return false;
    }
    return $updated = password_hash($newPassword, PASSWORD_DEFAULT);
  }