system: You are an expert security code reviewer. You will be shown a source code file along with a multiple-choice question listing several function or class names from that file. Your task is to identify which one contains the specified CWE vulnerability.

OUTPUT FORMAT: Respond with the single letter of the correct option, wrapped in \boxed{...}. Example: `\boxed{B}`. Output the boxed letter ONLY -- no explanation, no other text.

user: ```python
#!/usr/bin/env python3
# using (once again) http://blog.luisrei.com/articles/flaskrest.html
# Lab 4 server for 50.020 - vulnerable to XSS, SQLi, Command injection
# Nils, SUTD, 2017
# Z. TANG and Andrei Bytes, 2019.

from flask import Flask, render_template,request,redirect,make_response,session
import sqlite3
import os
import hashlib
import subprocess
db = "storage.db"

port = 5005

app = Flask(__name__)

def hash(data):
    """ Wrapper around sha224 """
    return hashlib.sha224(data.replace('\n','').encode('ascii')).hexdigest()

@app.route('/')
def main():
    if not 'username' in session:
        return redirect("/login",303)
    ul = None
    return render_template('main.html', name=session['username'][0], users=ul,news=getNews())

@app.route('/login', methods=['GET','POST'])
def login():
    if request.method == 'GET':
        return render_template('form.html')
    elif request.method == 'POST':
        conn = sqlite3.connect('storage.db')
        c=conn.cursor()
        email = request.form['email']        
        password = hash(request.form['password'])
        print("SELECT * FROM users WHERE email='%s' and password='%s'"%(email,password))
        c.execute("SELECT * FROM users WHERE email='%s' and password='%s'"%(email,password))
        rval=c.fetchone()
        if email == 'admin@a.com' and password == app.adminhash:
            rval=('admin','admin','admin')
        if rval:
            session['username'] = rval          
            return redirect("/",303)
        else:
            return render_template('form.html', error='Username or password incorrect!')

@app.route('/logout')
def logout():
    session.pop('username', None)
    return redirect("/login",303)    
        
@app.route('/search')
def search():
    if not 'username' in session:
        return redirect("/login",303)
    term = request.args.get('term')
    return render_template('main.html', name=session['username'][0],error="Search not implemented yet. Could not find "+term,news=getNews())

def getNews():
    conn = sqlite3.connect('storage.db')
    c=conn.cursor()
    return c.execute("SELECT * FROM news").fetchall()

@app.route('/news')
def news():
    if not 'username' in session:
        return redirect("/login",303)
    term = request.args.get('text')
    conn = sqlite3.connect('storage.db')
    c=conn.cursor()
    print(term)
    c.execute("insert into news (source,text) values (?,?)",(session['username'][0],term))
    conn.commit()
    return render_template('main.html', name=session['username'][0],news=getNews())


@app.route('/ping', methods=['POST'])
def ping():
    cmd = 'ping -c 1 '+ request.form['target']
    stream = subprocess.Popen(cmd,shell= True, executable='/bin/bash', stdout=subprocess.PIPE)    
    rval = stream.stdout.read()
    return render_template('main.html', name=session['username'][0], error3=rval, news=getNews())


@app.route('/malicious', methods=['GET'])
def malicious():
    """
    Intermediary page for uploading cookie
    :return:
    """
    s = request.cookies.get('session')
    with open('admin_pass.txt', 'w') as f:
        f.write(s)
    return redirect('/')


if __name__ == '__main__':
    with open('secrets.txt','r') as f:
        s = f.readlines()
    app.secret_key = s[0].replace('\n','')
    app.adminhash=hash(s[1])
    alicehash=hash(s[2])
    
    try:
        os.remove(db)
    except OSError:
        pass
    conn = sqlite3.connect(db)
    c=conn.cursor()
    c.execute("CREATE TABLE IF NOT EXISTS NEWS(source string, text string)")
    c.execute("CREATE TABLE IF NOT EXISTS USERS(name string, password string, email string)")
    c.execute("insert into users (email, name,password) values ('alice@alice.com','alice','"+alicehash+"')")
    conn.commit()
    app.config.update(SESSION_COOKIE_HTTPONLY=False)
    app.run(debug=True,port=port)

```

Which of the following functions or classes contains a `CWE-327: Use of a Broken or Risky Cryptographic Algorithm` vulnerability?

  A) logout
  B) search
  C) news
  D) hash
Answer: D