From c65ac0a6d3b6d0ffc3ed389b24cb4c0543fd1d0a Mon Sep 17 00:00:00 2001
From: Quentin RIBAC <quentin.ribac@xelians.fr>
Date: Tue, 28 Sep 2021 17:30:10 +0200
Subject: [PATCH] FIX #18115 TIME 0:15 switch instanceId hashing algorithm from
 md5 to sha256

---
 src/core/controllers/AuthenticationController.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/core/controllers/AuthenticationController.php b/src/core/controllers/AuthenticationController.php
index 97bdb33a3c2..44cb53d7c9c 100755
--- a/src/core/controllers/AuthenticationController.php
+++ b/src/core/controllers/AuthenticationController.php
@@ -46,7 +46,7 @@ class AuthenticationController
         if (!file_exists($path)) {
             return $response->withStatus(403)->withJson(['errors' => 'No configuration file found']);
         }
-        $hashedPath = md5($path);
+        $hashedPath = hash('sha256', $path);
 
         $appName   = CoreConfigModel::getApplicationName();
         $configFile = CoreConfigModel::getJsonLoaded(['path' => 'config/config.json']);
-- 
GitLab