使用PHP password_hash()加密（Php>=5.5）

CREATE TABLE `user` (
`user_id` int(11) NOT NULL AUTO_INCREMENT,
`user_name` varchar(16) DEFAULT NULL,
`user_password` char(60) DEFAULT NULL,
PRIMARY KEY (`user_id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;

/**
* 新增的密码对其进行md5()、password_hash()加密
*/
$password = md5('userpassword');
$hash_password = password_hash($password, PASSWORD_BCRYPT);
var_dump($hash_password);//$2y$10$RorBQzZ9H4CXefLT.9gVtuqeHi8pqAcdtXr/Oa5G.mwKEi2PaJ10i
/**
* $hash_password为保存入库的hash
*/

/**
* 验证阶段
*/
$user_name = I("post.username");
$user_password = I("post.password");
$verity_hash = D("user")->field("user_password")->where(array("user_name" => $user_name))->find();
if (!password_verify($user_password, $verity_hash["user_password"])) echo "密码错误";