title: Password_hash() need of pre-hashing before submit?
body: <p>I'm using the PHP 5.5+ password_hash() function to hash my passwords before storage in the database. So far so good.</p>
  
  <p>What I am a bit uncertain of is the need of pre-hashing the password that it sent from the form to my PHP script. </p>
  
  <p>Now the form submit procedure is (in short terms) done like this:</p>
  
  <ol>
  <li>HTML file which contains the form calls the controller script in form method=".." -> </li>
  <li>Controller script recieves the call and picks the correct function -></li>
  <li>function execution and storage to database. </li>
  </ol>
  
  <p>So basically the call is sent through three files from submit to storage. </p>
  
  <p>I am thinking that somewhere along the line the data could be hijacked and seen in plain view since the hashing is done in the third and final file. </p>
  
  <p>Should I be worried and somehow hash the password with some JavaScript during the initial submission of the form or is it safe? The final site will most likely use an SSL certificate but still I'm not 100% sure if I am safe or not.  </p>