tbrehm
2010-03-08 1275f48a10cd41fed218b92bacbbb8af3e15152e
Fixed the salt generation algorithm in the password reset function.
1 files modified
6 ■■■■■ changed files
interface/web/login/password_reset.php 6 ●●●●● patch | view | raw | blame | history
interface/web/login/password_reset.php
@@ -54,8 +54,10 @@
    if($client['client_id'] > 0) {
        $new_password = md5 (uniqid (rand()));
        $salt="$1$";
        for ($n=0;$n<11;$n++) {
            $salt.=chr(mt_rand(64,126));
        $base64_alphabet='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
        for ($n=0;$n<8;$n++) {
            //$salt.=chr(mt_rand(64,126));
            $salt.=$base64_alphabet[mt_rand(0,63)];
        }
        $salt.="$";
        $new_password_encrypted = crypt($new_password,$salt);