From f7e8c7dbeb2d38df8a31048a49e869a4873102e9 Mon Sep 17 00:00:00 2001
From: Andreas Gohr <andi@splitbrain.org>
Date: Sun, 27 Aug 2017 16:18:54 +0200
Subject: [PATCH] adjust default bcrypt iterations to 10. fixes #2093
---
inc/PassHash.class.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/inc/PassHash.class.php b/inc/PassHash.class.php
index d24cc75e5..54b918984 100644
--- a/inc/PassHash.class.php
+++ b/inc/PassHash.class.php
@@ -530,7 +530,7 @@ class PassHash {
* @throws Exception
* @return string Hashed password
*/
- public function hash_bcrypt($clear, $salt = null, $compute = 8) {
+ public function hash_bcrypt($clear, $salt = null, $compute = 10) {
if(!defined('CRYPT_BLOWFISH') || CRYPT_BLOWFISH != 1) {
throw new Exception('This PHP installation has no bcrypt support');
}
--
GitLab