Well to be honest its first time a costumer asked me for a SHa1 store and load from database as its not that safe anymore , myself i use bcrypt all the time.
However im trying to come together with this? login / signup system and at signup everything works perfectly , sha1 encrypts it and stores it to the database
Now the issue its the loading from database , even tho i write the same password it still doesnt work
this is the code from loading the Sha1
$hashpass = sha1($userpass);
? ? ? ? ? ? ? ?if (password_verify($hashpass, $row))
? ? ? ? ? ? ? ?{
? ? ? ? ? ? ? ? ? ?session_start();
? ? ? ? ? ? ? ? ? ?$_SESSION = $row;
? ? ? ? ? ? ? ? ? ?header("Location:../index.php?login:sucess");
? ? ? ? ? ? ? ?}
? ? ? ? ? ? ? ?else{
? ? ? ? ? ? ? ? ? ?header("Location:../login.php?error:wrongpassword");
? ? ? ? ? ? ? ? ? ?exit();
? ? ? ? ? ? ? ?}
Storing
$hashedpass = sha1($password);
? ? ? ? ? ? ? ? ? ? ? ?mysqli_stmt_bind_param($stmt, "sss", $username, $email, $hashedpass);
? ? ? ? ? ? ? ? ? ? ? ?mysqli_stmt_execute($stmt);
? ? ? ? ? ? ? ? ? ? ? ?header("Location:../index.php?Signup:Sucessful");
Help me pelase , i really need this.