Short answer: Your not hashing your password before saving it.
Longer answer: Laravel validates a user by fetching a user using a where on any credentials that aren't a password. In your case it will do a where on the username field. It then calls EloquentUserProvider::validateCredentials which checks your password against the database password using Hash::check. See https://github.com/illuminate/auth/blob/master/EloquentUserProvider.php#LC104
$password = Input::get('password');
$user->password = Hash::make($password);
Alright well I had that integrated earlier. Do I only need to hash the password when they sign up and then just pass the regular text password when I use Auth::attempt?
charlietechnology said:
Alright well I had that integrated earlier. Do I only need to hash the password when they sign up and then just pass the regular text password when I use Auth::attempt?
Yep thats right.
Sign in to participate in this thread!
The Laravel portal for problem solving, knowledge sharing and community building.
The community