diff --git a/.gitignore b/.gitignore index 4dff4e4..4e79763 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,2 @@ # Created by .gitignore support plugin (hsz.mobi) -.idea/ \ No newline at end of file +.idea/ diff --git a/application/config/aauth.php b/application/config/aauth.php index 053324c..ef1cb27 100644 --- a/application/config/aauth.php +++ b/application/config/aauth.php @@ -64,6 +64,9 @@ defined('BASEPATH') OR exit('No direct script access allowed'); | ['verification_link'] Link for verification without site_url or base_url | ['reset_password_link'] Link for reset_password without site_url or base_url | +| ['hash'] Name of selected hashing algorithm (e.g. "md5", "sha256", "haval160,4", etc..) +| Please, run hash_algos() for know your all supported algorithms +| */ $config_aauth = array(); @@ -115,7 +118,9 @@ $config_aauth["default"] = array( 'verification' => false, 'verification_link' => '/account/verification/', - 'reset_password_link' => '/account/reset_password/' + 'reset_password_link' => '/account/reset_password/', + + 'hash' => 'sha256' ); $config['aauth'] = $config_aauth['default']; diff --git a/application/libraries/Aauth.php b/application/libraries/Aauth.php index 40f91bd..0ecff64 100644 --- a/application/libraries/Aauth.php +++ b/application/libraries/Aauth.php @@ -1145,7 +1145,7 @@ class Aauth { function hash_password($pass, $userid) { $salt = md5($userid); - return hash('sha256', $salt.$pass); + return hash($this->config_vars['hash'], $salt.$pass); } ########################