Skip to:
Content

BuddyPress.org


Ignore:
Timestamp:
05/24/2016 02:45:08 PM (10 years ago)
Author:
boonebgorges
Message:

Better hash building for activation keys, password reset keys, and filenames.

There is no need to use user-facing info for these hashes.

Ports [10800] to the 2.5 branch.

Props DJPaul, vortfu.

Location:
branches/2.5
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/2.5

    • Property svn:mergeinfo changed
      /trunk (added)merged: 10800
  • branches/2.5/tests/phpunit/testcases/members/functions.php

    r9819 r10801  
    262262
    263263                // Fake an old-style registration
    264                 $key = wp_hash( $u_obj->ID );
     264                $key = wp_generate_password( 32, false );
    265265                update_user_meta( $u, 'activation_key', $key );
    266266
     
    296296
    297297                // Fake an old-style registration
    298                 $key = wp_hash( $u_obj->ID );
     298                $key = wp_generate_password( 32, false );
    299299                update_user_meta( $u, 'activation_key', $key );
    300300
Note: See TracChangeset for help on using the changeset viewer.