It would certainly be harder, but as with breaking any hash, it becomes more feasible every day. It's likely easier to replace "sha1" with "sha256" in your cod

It would certainly be harder, but as with breaking any hash, it becomes more feasible every day. It's likely easier to replace "sha1" with "sha256" in your code than it is to construct a Frankenstein's monster of hashing.