How to compare customer password in magento 1.9.2 [closed]

Question

I want to implement functionality which restrict the customer to not enter his old password. Means customer can not enter the same password which is previously entered by customer.I am stuck in comparing the old password with the new password if they are same.

Any help will be appreciable.

Answer 1

I got the solution. Magento stores the password in md5 hash format. But it concatenate the salt value with the password then convert it into md5 hash format preceded with the : and salt value.

md5($salt.$password).":".$salt 

Here is the solution

        $customer =Mage::getModel('customer/customer')
        ->setWebsiteId(Mage::app()->getStore()
        ->getWebsiteId())
        ->loadByEmail($email);

        $hash = $customer->getData('password_hash');
        $hashPassword = explode(':', $hash);
        $firstPart = $hashPassword[0];
        $salt = $hashPassword[1];

        $current_password=md5($salt.$current_password);
        if($current_password!=$firstPart){
            // do your stuff
        }