wp_check_password

Source code

function wp_check_password($password, $hash, $user_id = '') {

	global $wp_hasher;



	// If the hash is still md5...

	if ( strlen($hash) <= 32 ) {

		$check = ( $hash == md5($password) );

		if ( $check && $user_id ) {

			// Rehash using new hash.

			wp_set_password($password, $user_id);

			$hash = wp_hash_password($password);

		}



		return apply_filters('check_password', $check, $password, $hash, $user_id);

	}



	// If the stored hash is longer than an MD5, presume the

	// new style phpass portable hash.

	if ( empty($wp_hasher) ) {

		require_once( ABSPATH . 'wp-includes/class-phpass.php');

		// By default, use the portable hash from phpass

		$wp_hasher = new PasswordHash(8, TRUE);

	}



	$check = $wp_hasher->CheckPassword($password, $hash);



	return apply_filters('check_password', $check, $password, $hash, $user_id);

}