From 399b607987cc01681cfb6750476f34bf6eb5a6d5 Mon Sep 17 00:00:00 2001
From: divinity76 <hans@loltek.net>
Date: Wed, 19 Mar 2025 21:41:01 +0100
Subject: [PATCH] hash is also sensitive now

when has might be plaintext, it's sensitive
---
 tinyfilemanager.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tinyfilemanager.php b/tinyfilemanager.php
index a43a489..4bc4756 100644
--- a/tinyfilemanager.php
+++ b/tinyfilemanager.php
@@ -328,6 +328,7 @@ if ($use_auth) {
     function tfm_password_verify(
         #[\SensitiveParameter]
         string $password,
+        #[\SensitiveParameter]
         string $hash
     ): bool {
         // CRYPT_MD5: $1$