better blowfish secret generation

2005-11-27 21:06:17 +00:00
parent 7670cdfa7e
commit 3913d28de7
1 changed files with 1 additions and 2 deletions
--- a/scripts/setup.php
+++ b/scripts/setup.php
@@ -970,8 +970,7 @@ switch ($action) {
                $show_info = TRUE;
                if ($new_server['auth_type'] == 'cookie' && empty($cfg['blowfish_secret'])) {
                    message('notice', 'You did not have configured blowfish secret and you want to use cookie authentication so I generated blowfish secret for you. It is used to encrypt cookies.', 'Blowfist secret generated');
-                    // FIXME: Find better way:
-                    $cfg['blowfish_secret'] = '' . rand();
+                    $cfg['blowfish_secret'] = uniqid('', TRUE);
                }
            }
            unset($new_server);