Use gen_pw_hash for customer password changes to use modern hash
Hanno Böck commited on 2024-01-24 11:51:59
Zeige 1 geänderte Dateien mit 1 Einfügungen und 1 Löschungen.
- session/checkuser.php 115df91..1503299
| ... | ... |
@@ -240,7 +240,7 @@ function set_customer_lastlogin($customerno) |
| 240 | 240 |
function set_customer_password($customerno, $newpass) |
| 241 | 241 |
{
|
| 242 | 242 |
$customerno = (int) $customerno; |
| 243 |
- $newpass = sha1($newpass); |
|
| 243 |
+ $newpass = gen_pw_hash($newpass); |
|
| 244 | 244 |
db_query("UPDATE kundendaten.kunden SET passwort=:newpass WHERE id=:customerno", [":newpass" => $newpass, ":customerno" => $customerno]);
|
| 245 | 245 |
logger(LOG_INFO, "session/checkuser", "pwchange", "changed customer's password."); |
| 246 | 246 |
} |
| 247 | 247 |