使用PHP password_hash()加密（Php>=5.5）

CREATE TABLE `user` (
  `user_id` int(11) NOT NULL AUTO_INCREMENT,
  `user_name` varchar(16) DEFAULT NULL,
  `user_password` char(60) DEFAULT NULL,
  PRIMARY KEY (`user_id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;

        /**
         * 新增的密码对其进行md5()、password_hash()加密
         */
        $password = md5('userpassword');
        $hash_password = password_hash($password, PASSWORD_BCRYPT);
        var_dump($hash_password);//$2y$10$RorBQzZ9H4CXefLT.9gVtuqeHi8pqAcdtXr/Oa5G.mwKEi2PaJ10i
        /**
         * $hash_password为保存入库的hash
         */

        /**
         * 验证阶段
         */
        $user_name = I("post.username");
        $user_password = I("post.password");
        $verity_hash = D("user")->field("user_password")->where(array("user_name" => $user_name))->find();
        if (!password_verify($user_password, $verity_hash["user_password"])) echo "密码错误";