Passwords: BCRYPT changed to default algorithm

Warning: the result in a database column can expand beyond 60 characters!
nette · Sep 4, 2018 · 200b5b0 · 200b5b0
1 parent ea89701
commit 200b5b0
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/Security/Passwords.php b/src/Security/Passwords.php
@@ -29,7 +29,7 @@ class Passwords
 	/**
 	 * See http://php.net/manual/en/password.constants.php
 	 */
-	public function __construct(int $algo = PASSWORD_BCRYPT, array $options = [])
+	public function __construct(int $algo = PASSWORD_DEFAULT, array $options = [])
 	{
 		$this->algo = $algo;
 		$this->options = $options;

diff --git a/tests/Security/Passwords.hash().phpt b/tests/Security/Passwords.hash().phpt
@@ -14,7 +14,7 @@ require __DIR__ . '/../bootstrap.php';
 
 
 Assert::truthy(
-	preg_match('#^\$2.\$\d\d\$.{53}\z#', (new Passwords)->hash(''))
+	preg_match('#^\$.{50,}\z#', (new Passwords)->hash(''))
 );
 
 Assert::truthy(