better blowfish secret generation
This commit is contained in:
@@ -970,8 +970,7 @@ switch ($action) {
|
|||||||
$show_info = TRUE;
|
$show_info = TRUE;
|
||||||
if ($new_server['auth_type'] == 'cookie' && empty($cfg['blowfish_secret'])) {
|
if ($new_server['auth_type'] == 'cookie' && empty($cfg['blowfish_secret'])) {
|
||||||
message('notice', 'You did not have configured blowfish secret and you want to use cookie authentication so I generated blowfish secret for you. It is used to encrypt cookies.', 'Blowfist secret generated');
|
message('notice', 'You did not have configured blowfish secret and you want to use cookie authentication so I generated blowfish secret for you. It is used to encrypt cookies.', 'Blowfist secret generated');
|
||||||
// FIXME: Find better way:
|
$cfg['blowfish_secret'] = uniqid('', TRUE);
|
||||||
$cfg['blowfish_secret'] = '' . rand();
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
unset($new_server);
|
unset($new_server);
|
||||||
|
Reference in New Issue
Block a user