PHP's own password_hash() should be used more · HackerTrans