banananetwork
/
tt-rss
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

use login as salt when generating passwords (2)

Browse Source
master
Andrew Dolgov 17 years ago
parent 1a9f4d3c9d
commit c3a005adbc
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File

6
modules/pref-users.php
Unescape Escape View File

@ -73,7 +73,7 @@
$password = db_escape_string(trim($_GET["password"])); $password = db_escape_string(trim($_GET["password"]));
if ($password) { if ($password) {
$pwd_hash = 'SHA1:' . sha1($password); $pwd_hash = encrypt_password($password, $login);
$pass_query_part = "pwd_hash = '$pwd_hash', "; $pass_query_part = "pwd_hash = '$pwd_hash', ";
print_notice(T_sprintf('Changed password of user <b>%s</b>.', $login)); print_notice(T_sprintf('Changed password of user <b>%s</b>.', $login));
} else { } else {
@ -101,7 +101,7 @@
$login = db_escape_string(trim($_GET["login"])); $login = db_escape_string(trim($_GET["login"]));
$tmp_user_pwd = make_password(8); $tmp_user_pwd = make_password(8);
$pwd_hash = 'SHA1:' . sha1($tmp_user_pwd); $pwd_hash = encrypt_password($tmp_user_pwd, $login);
$result = db_query($link, "SELECT id FROM ttrss_users WHERE $result = db_query($link, "SELECT id FROM ttrss_users WHERE
login = '$login'"); login = '$login'");
@ -146,7 +146,7 @@
$login = db_fetch_result($result, 0, "login"); $login = db_fetch_result($result, 0, "login");
$email = db_fetch_result($result, 0, "email"); $email = db_fetch_result($result, 0, "email");
$tmp_user_pwd = make_password(8); $tmp_user_pwd = make_password(8);
$pwd_hash = 'SHA1:' . sha1($tmp_user_pwd); $pwd_hash = encrypt_password($tmp_user_pwd, $login);
db_query($link, "UPDATE ttrss_users SET pwd_hash = '$pwd_hash' db_query($link, "UPDATE ttrss_users SET pwd_hash = '$pwd_hash'
WHERE id = '$uid'"); WHERE id = '$uid'");

Write Preview
Loading…
Cancel
Save