PHP & MySQL compare password

Question

How does one check to see if a user has typed in the right password to log in?

This is what (out of a bunch of combinations...) I am doing:

Answer 1

Greater than PHP 5.6, you can use hash_compare function.

 $users_password = hash(sha256,$salt.$post_password);

 if (hash_equals($users_dbpassword, $users_password)) {
      //pass is good
 } else {
       // pass failed
 }

http://php.net/manual/ru/function.hash-equals.php