DAO Pattern angepasst & Passwörter gehashed

2026-05-27 19:25:58 +02:00
parent 46a307a5b0
commit 4d8f338649
4 changed files with 14 additions and 3 deletions
@@ -19,7 +19,7 @@ if ($_SERVER["REQUEST_METHOD"] === "POST") {
    $user = $dao->findUser($email);

    // Prüfung der Zugangsdaten
-    if ($user && $user["password"] === $password) {
+    if ($user && password_verify($password, $user["password"])){

        // Session setzen = User ist eingeloggt
        $_SESSION["user"] = $user["username"];