WordPress 4.0.1

[autoinstalls/wordpress.git] / wp-includes / session.php

diff --git a/wp-includes/session.php b/wp-includes/session.php
index dca4d94e9a579231bdef0f6c952df1b5b5053923..2acaad31d5dddd0881bcff733de48fa4a7f5168e 100644 (file)
--- a/wp-includes/session.php
+++ b/wp-includes/session.php
@@ -61,7 +61,12 @@ abstract class WP_Session_Tokens {
         * @return string A hash of the session token (a verifier).
         */
        final private function hash_token( $token ) {
         * @return string A hash of the session token (a verifier).
         */
        final private function hash_token( $token ) {

-               return hash( 'sha256', $token );
+               // If ext/hash is not present, use sha1() instead.
+               if ( function_exists( 'hash' ) ) {
+                       return hash( 'sha256', $token );
+               } else {
+                       return sha1( $token );
+               }

        }
 
        /**
        }
 
        /**