[Security] Hashing algorithms

[frostschutz]

This user has been denied support.

MyBB uses an outdated MD5 hashing algorithm. Should I switch to bcrypt using plugins or not?

It can be done easily (like, one line change in core easy) but then you're stuck with it forever.

Also you'd have to clean out your backup folder and perhaps old tables in database (if you did any weird stuff or merges in the past) as those still contain the old hashes.

I also have an external script that uses MyBB user authentication, but that checks for a MyBB session cookie first so if you're not already logged into MyBB itself, it won't ask you for a confirmation password either.