From ce9be505fdbe36ff95731d081991499f6414d6b0 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Tue, 23 Apr 2024 18:16:06 +0200
Subject: [PATCH] hash password when setting new password

---
 restapi/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/restapi/index.php b/restapi/index.php
index 4aa2c4de7..ea77e532f 100644
--- a/restapi/index.php
+++ b/restapi/index.php
@@ -2118,7 +2118,7 @@ class RestapiController { /* {{{ */
             return;
         }
 
-        $operation = $account->setPwd($newPassword);
+        $operation = $account->setPwd(seed_pass_hash($newPassword));
 
         if (!$operation){
             return $response->withJson(array('success'=>false, 'message'=>'', 'data'=>'Could not change password.'), 404);