diff options
| author | Andreas Gohr <andi@splitbrain.org> | 2013-05-31 14:43:31 +0200 |
|---|---|---|
| committer | Andreas Gohr <andi@splitbrain.org> | 2013-06-16 21:25:02 +0200 |
| commit | 25e48e54df60b3df6efa365daceb3a8966c8f427 (patch) | |
| tree | 7ed474fee55fba477064ee5013989a1f702a1214 /lib | |
| parent | 45bc740ec08590304b589146b7f51ae8f3878e7c (diff) | |
| download | rpg-25e48e54df60b3df6efa365daceb3a8966c8f427.tar.gz rpg-25e48e54df60b3df6efa365daceb3a8966c8f427.tar.bz2 | |
make password reset token completely random
No need for HMAC here because there's no length attack vector here. We
only care for the existance of the file and each reset request is
completely (random) independent from each other.
Conflicts:
inc/auth.php
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions