From 6a29c54e782724a61f9177c32a82dcf5faa379d1 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 22 May 2025 22:35:47 +0900
Subject: [PATCH] Default to best supported password algorithm, although we
 never fell back to MD5 anyway #2556

---
 common/framework/Password.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/common/framework/Password.php b/common/framework/Password.php
index 96282d624..3182557fb 100644
--- a/common/framework/Password.php
+++ b/common/framework/Password.php
@@ -128,12 +128,12 @@ class Password
 			$algorithm = $config->password_hashing_algorithm ?? '';
 			if (strval($algorithm) === '')
 			{
-				$algorithm = 'md5';
+				$algorithm = self::getBestSupportedAlgorithm();
 			}
 		}
 		else
 		{
-			$algorithm = 'md5';
+			$algorithm = self::getBestSupportedAlgorithm();
 		}
 		return $algorithm;
 	}