stian/gallery3
1
0
Fork 0
mirror of https://github.com/Pathduck/gallery3.git synced 2026-06-08 12:39:17 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

Use a random value for the password reset hash to reduce the chances

Browse Source 
that it can be guessed by an attacker.
This commit is contained in:
Bharat Mediratta
2009-05-27 00:50:24 -07:00
parent d987af5605
commit 0a66ddd2b4
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
modules/user/controllers/password.php
View File

@@ -54,8 +54,7 @@ class Password_Controller extends Controller {
}
if ($valid) {
$user->hash = md5("$user->id; $user->name; $user->full_name; " .
"$user->login_count; $user->last_login");
$user->hash = md5(rand());
$user->save();
$message = new View("reset_password.html");
$message->url = url::abs_site("password/do_reset?key=$user->hash");