From c6f4f1a8011ae1c0e13ad349bbe66f1fbbcaeedf Mon Sep 17 00:00:00 2001
From: Daniel Triendl <daniel@pew.cc>
Date: Wed, 5 Jun 2013 02:17:13 +0200
Subject: [PATCH] add bcrypt to settings.php on setup

---
 setup.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/setup.php b/setup.php
index 349ca01..4df213f 100644
--- a/setup.php
+++ b/setup.php
@@ -21,6 +21,7 @@
 # the Initial Developer. All Rights Reserved.
 # 
 # Contributor(s):
+#   Daniel Triendl <daniel@pew.cc>
 # 
 # Alternatively, the contents of this file may be used under the terms of
 # either the GNU General Public License Version 2 or later (the "GPL"), or
@@ -149,6 +150,10 @@ function write_config_file($dbt, $dbh, $dbn, $dbu, $dbp, $fsRoot) {
         $cfg_content .= "    define(\"MYSQL_USER\", \"$dbu\");\n";
         $cfg_content .= "    define(\"MYSQL_PASSWORD\", \"$dbp\");\n";
     }
+    $cfg_content .= "\n";
+    $cfg_content .= "    // Use bcrypt instead of MD5 for password hashing\n";
+    $cfg_content .= "    define(\"BCRYPT\", true);\n";
+    $cfg_content .= "    define(\"BCRYPT_ROUNDS\", 12);\n";
 
     $cfg_content .= "\n?>\n";