moving_from_md5.php

<?php
$userEmail = 'test@test.com';
$userPassword = '123456';

// Using Doctrine for example
$user = $repository->findByEmail($userEmail);

if(!$user) {
    // User not found
    // LOGIN ERROR
}

// Will be removed
if(md5($userPassword) == $user->getPassword()) {
    // encrypt correctly
    $options = ['cost' => 10];
    $hash = password_hash($userPassword, PASSWORD_DEFAULT, $options);
    // save $hash as a NEW password on database
    // DO LOGIN
}

if(password_verify($userPassword, $user->getPassword())) {
    $options = ['cost' => 10];
    if(password_needs_rehash($user->getPassword(), PASSWORD_DEFAULT, $options)) {
        $hash = password_hash($userPassword, PASSWORD_DEFAULT, $options);
        // save $hash as a NEW password on database
    }
    // DO LOGIN
}
// LOGIN ERROR