Set default pass encryption from sha1 to bcrypt - Refs #8271

10 years ago · ba188a932f
parent b7a684cd56
commit ba188a932f
1 changed files with 2 additions and 2 deletions
--- a/main/install/index.php
+++ b/main/install/index.php
@ -256,7 +256,7 @@ if (!isset($_GET['running'])) {
    $userMailCanBeEmpty = 1;
    $allowSelfReg = 1;
    $allowSelfRegProf = 1;
-    $encryptPassForm = 'sha1';
+    $encryptPassForm = 'bcrypt';
    if (!empty($_GET['profile'])) {
        $installationProfile = api_htmlentities($_GET['profile'], ENT_QUOTES);
    }
@ -303,7 +303,7 @@ if (!$_POST) {

 // Managing the $encryptPassForm
 if ($encryptPassForm == '1') {
-    $encryptPassForm = 'sha1';
+    $encryptPassForm = 'bcrypt';
 } elseif ($encryptPassForm == '0') {
    $encryptPassForm = 'none';
 }