feat: MD5 passwords exchanged for bcrypt ones

This commit is contained in:
Martin Ambrus
2017-10-20 12:31:27 +02:00
parent 606d0a6ad2
commit f4021d1452
15 changed files with 219 additions and 78 deletions
+1 -1
View File
@@ -17,7 +17,7 @@ mysqli_select_db($GLOBALS["link"], SQL_DB);
$session = (int) $_POST['admid'];
$id = (int) $_POST['uid'];
$pass = md5($_POST['newpw']);
$pass = password_hash($_POST['newpw'], PASSWORD_BCRYPT, ['cost' => 12]);
$sql = mysqli_query($GLOBALS["link"], "SELECT * FROM ".TB_PREFIX."users WHERE id = ".$session."");
$access = mysqli_fetch_array($sql);