stian/gallery3
1
0
Fork 0
mirror of https://github.com/Pathduck/gallery3.git synced 2026-05-01 02:29:10 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add more randomness to reset password mechanism.

Browse Source
This commit is contained in:
Andy Staudacher
2010-02-27 15:39:36 -08:00
parent d9707ae749
commit a18ddd2fe9
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/user/controllers/password.php
View File

@@ -52,7 +52,7 @@ class Password_Controller extends Controller {
$user_name = $form->reset->inputs["name"]->value;
$user = user::lookup_by_name($user_name);
if ($user && !empty($user->email)) {
$user->hash = md5(rand());
$user->hash = md5(uniqid(mt_rand(), true));
$user->save();
$message = new View("reset_password.html");
$message->confirm_url = url::abs_site("password/do_reset?key=$user->hash");