Skip to content

password_hash: Update for PHP 8.4 #4455

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Feb 23, 2025
Merged

Conversation

TimWolla
Copy link
Member

@TimWolla TimWolla commented Feb 9, 2025

This updates the password_hash() documentation for the updated default cost of bcrypt in PHP 8.4. It also performs some general cleanup.

This updates the `password_hash()` documentation for the updated default cost
of bcrypt in PHP 8.4. It also performs some general cleanup.
Copy link
Member

@nielsdos nielsdos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, I have one remark, I'm not sure if we have a real guideline about that but it's what I'm used to.

@TimWolla TimWolla requested a review from Girgias February 20, 2025 08:21
If omitted, a default value of <literal>10</literal> will be used. This is a good
baseline cost, but you may want to consider increasing it depending on your hardware.
If omitted, a default value of <literal>12</literal> will be used. This is a good
baseline cost, but you may want to consider adjusting it depending on your hardware.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe at the same time remove personalization (i.e. usage of "you")?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's all over the document. I'll do this in a follow-up.

@TimWolla TimWolla merged commit e302f07 into php:master Feb 23, 2025
2 checks passed
@TimWolla TimWolla deleted the password-hash branch February 23, 2025 13:56
@siliconforks
Copy link

I think constants.xml needs to be updated too?

If omitted, a default value of <literal>10</literal> will be used. This is a good

@nielsdos
Copy link
Member

nielsdos commented Mar 2, 2025

I think constants.xml needs to be updated too?

If omitted, a default value of <literal>10</literal> will be used. This is a good

Good find, thanks. Fixed in 66aff41

KentarouTakeda added a commit to php/doc-ja that referenced this pull request Mar 9, 2025
* password_hash: Update for PHP 8.4

* password_*(): Sync with `password_hash()`

* `password_hash()` のサンプルコードも原文の更新に追随

---------

Co-authored-by: 武田 憲太郎 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants