From 5e42368d69b1725fd31577acdce099763430d681 Mon Sep 17 00:00:00 2001
From: Pig Fang <g-plane@hotmail.com>
Date: Mon, 8 Apr 2019 21:53:00 +0800
Subject: [PATCH] New hash algorithm: Bcrypt

---
 .env.example                              |  6 +++---
 .env.testing                              |  2 +-
 app/Services/Cipher/BCRYPT.php            | 16 ++++++++++++++++
 app/Services/Cipher/PHP_PASSWORD_HASH.php |  3 ---
 4 files changed, 20 insertions(+), 7 deletions(-)
 create mode 100644 app/Services/Cipher/BCRYPT.php

diff --git a/.env.example b/.env.example
index 53368580..cd325a88 100644
--- a/.env.example
+++ b/.env.example
@@ -29,14 +29,14 @@ DB_PREFIX = null
 # Hash Algorithm for Passwords
 #
 # Available values:
-# - PHP_PASSWORD_HASH
+# - BCRYPT, PHP_PASSWORD_HASH
 # - MD5, SALTED2MD5
 # - SHA256, SALTED2SHA256
 # - SHA512, SALTED2SHA512
 #
-# New sites are *highly* recommended to use PHP_PASSWORD_HASH.
+# New sites are *highly* recommended to use BCRYPT.
 #
-PWD_METHOD = PHP_PASSWORD_HASH
+PWD_METHOD = BCRYPT
 
 # Salt
 # Change it to any random string to secure your passwords & tokens.
diff --git a/.env.testing b/.env.testing
index d945c7fd..7497f810 100644
--- a/.env.testing
+++ b/.env.testing
@@ -14,7 +14,7 @@ DB_USERNAME = root
 DB_PASSWORD = null
 DB_PREFIX = null
 
-PWD_METHOD = PHP_PASSWORD_HASH
+PWD_METHOD = BCRYPT
 SALT  = c67709dd8b7b733aca0d570681fe96cf
 APP_KEY = base64:eVX/xzF5NhpGB2luswliFx9XSBsbbAP21wOi68X/P34=
 
diff --git a/app/Services/Cipher/BCRYPT.php b/app/Services/Cipher/BCRYPT.php
new file mode 100644
index 00000000..7f9ec885
--- /dev/null
+++ b/app/Services/Cipher/BCRYPT.php
@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Services\Cipher;
+
+class BCRYPT extends BaseCipher
+{
+    public function hash($value, $salt = '')
+    {
+        return password_hash($value, PASSWORD_BCRYPT);
+    }
+
+    public function verify($password, $hash, $salt = '')
+    {
+        return password_verify($password, $hash);
+    }
+}
diff --git a/app/Services/Cipher/PHP_PASSWORD_HASH.php b/app/Services/Cipher/PHP_PASSWORD_HASH.php
index 12d08555..2eab9c09 100644
--- a/app/Services/Cipher/PHP_PASSWORD_HASH.php
+++ b/app/Services/Cipher/PHP_PASSWORD_HASH.php
@@ -4,9 +4,6 @@ namespace App\Services\Cipher;
 
 class PHP_PASSWORD_HASH extends BaseCipher
 {
-    /**
-     * Use password_hash() to create hash.
-     */
     public function hash($value, $salt = '')
     {
         return password_hash($value, PASSWORD_DEFAULT);