What best practice did the user overlook when creating the password input field in the PHP form?

The user overlooked the best practice of hashing passwords before storing them in the database. Storing plain text passwords is a security risk as they can be easily compromised in case of a data breach. To solve this issue, the user should hash the password using a secure hashing algorithm like bcrypt before saving it to the database. 

// Hashing the password before storing it in the database
$password = password_hash($_POST['password'], PASSWORD_DEFAULT);

// Inserting the hashed password into the database
$query = "INSERT INTO users (username, password) VALUES (?, ?)";
$stmt = $pdo->prepare($query);
$stmt->execute([$_POST['username'], $password]);

Keywords

password input field PHP form validation hashing security

Related Questions