总结一下laravel中Hash::make()遇到的坑

{{--修改密码--}}
<form action="{{ route('changepwd') }}" method="post">
    {{{ csrf_field() }}}
    <div class="layui-form-item">
    <label for="L_nowpass" class="layui-form-label">当前密码</label>
    <div class="layui-input-inline">
      <input type="password" id="L_nowpass" name="oldpass" required lay-verify="required" autocomplete="off" class="layui-input">
    </div>
    </div>
    <div class="layui-form-item">
    <label for="L_pass" class="layui-form-label">新密码</label>
    <div class="layui-input-inline">
      <input type="password" id="L_pass" name="password" required lay-verify="required" autocomplete="off" class="layui-input">
    </div>
    <div class="layui-form-mid layui-word-aux">6到16个字符</div>
    </div>
    <div class="layui-form-item">
    <label for="L_repass" class="layui-form-label">确认密码</label>
    <div class="layui-input-inline">
      <input type="password" id="L_repass" name="password_confirmation" required lay-verify="required" autocomplete="off" class="layui-input">
    </div>
    </div>
    <div class="layui-form-item">
    
    <button class="layui-btn" key="set-mine" lay-filter="*" >确认修改</button>
    </div>
</form>
{{--修改密码--}}

//修改用户密码
Route::post('/changepwd', 'PasswordController@changepwd')->name('changepwd');

<?php
namespace App\Http\Requests;

use Illuminate\Foundation\Http\FormRequest;

class PasswordRequest extends FormRequest
{
    /**
     * Determine if the user is authorized to make this request.
     *
     * @return bool
     */
    public function authorize()
    {
        return true;
    }

    /**
     * Get the validation rules that apply to the request.
     *
     * @return array
     */
    public function rules()
    {
        return [
            'password'=>'required|min:6|max:16|confirmed',   // confirmed:   password  和  password_confirmation是否相同
        ];
    }
}

use DB;
use Hash;

//修改密码
public function changepwd(PasswordRequest $req){
    $users = DB::table('users')
                    ->where('id', '=', session('id'))
                    ->first();
    //判断用户输入的密码与数据库的密码是否一致
    // 表单中的密码：$req->password   （原始）
    // 数据库的密码：$user->password （哈希之后 ）
    // laravel中 Hash::check(原始，哈希之后)判断是否一致
    if(  Hash::check(  $req->oldpass   ,   $users->password   )  ){
        //更新密码并且保存
        DB::table('users')
            ->where('id', session('id'))
            ->update(['password' => Hash::make($req->password)]);
        // 跳转到 登录页
        return redirect()->route('login');
    }else{
        return back()->withErrors(['oldpass'=>'密码不正确！']);
    }

}