Use BCrypt costs '9' for MFA backup codes

Resolves #4206

diff --git a/wcfsetup/install/files/lib/system/user/multifactor/BackupMultifactorMethod.class.php b/wcfsetup/install/files/lib/system/user/multifactor/BackupMultifactorMethod.class.php
index b6948397108a64aa53f6d2bfbe1809e8e4f45a00..41e787223d47dd478a960ab99c621e30485c3205 100644 (file)
--- a/wcfsetup/install/files/lib/system/user/multifactor/BackupMultifactorMethod.class.php
+++ b/wcfsetup/install/files/lib/system/user/multifactor/BackupMultifactorMethod.class.php
@@ -60,7 +60,7 @@ final class BackupMultifactorMethod implements IMultifactorMethod
 
     public function __construct()
     {
-        $this->algorithm = new Bcrypt();
+        $this->algorithm = new Bcrypt(9);
     }
 
     /**