Use SHA256 instead of SHA1 for hashing api tokens

mantisbt · Dec 2, 2015 · 8cc1abb · 8cc1abb
1 parent f47329c
commit 8cc1abb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/api_token_api.php b/core/api_token_api.php
@@ -69,7 +69,7 @@ function api_token_create( $p_token_name, $p_user_id ) {
  * @access public
  */
 function api_token_hash( $p_token ) {
-	return sha1( $p_token );
+	return hash( 'sha256', $p_token );
 }
 
 /**