# sodium_crypto_pwhash_str_verify

(PHP 7 >= 7.2.0)

sodium_crypto_pwhash_str_verify — Verifies that a password matches a hash

### 说明

sodium_crypto_pwhash_str_verify ( string `$hash` , string `$password` ) : bool

Checks that a password hash created using sodium_crypto_pwhash_str() matches a given plain_text password. Note that the parameters are in the opposite order to the same parameters in the similar password_hash() function.

### 参数

`hash`

  一个由 password_hash() 创建的散列值。

`password`

  用户的密码。

### 返回值

Returns `TRUE` if the password and hash match, or `FALSE` otherwise.

### 注释

> Note:

> Hashes are calculated using the Argon2ID algorithm, providing resistance to both GPU and side-channel attacks.

### 参见

- sodium_crypto_pwhash_str() - Get an ASCII-encoded hash
- password_hash() - 创建密码的散列（hash）
- password_verify() - 验证密码是否和散列值匹配