diff options
| author | Andreas Gohr <andi@splitbrain.org> | 2013-05-31 09:22:45 +0200 |
|---|---|---|
| committer | Andreas Gohr <andi@splitbrain.org> | 2013-05-31 09:22:45 +0200 |
| commit | cdcd66dfc2bcf16e481d10bfa2d3ff1b4d433f99 (patch) | |
| tree | 33dd2352f449ea0dd7f89d244ed59412bf0819c9 /inc/common.php | |
| parent | 3c124064ad6f670d52c3678335caa57892408362 (diff) | |
| download | rpg-cdcd66dfc2bcf16e481d10bfa2d3ff1b4d433f99.tar.gz rpg-cdcd66dfc2bcf16e481d10bfa2d3ff1b4d433f99.tar.bz2 | |
use hmac for external ressource hash FS#2794
Diffstat (limited to 'inc/common.php')
| -rw-r--r-- | inc/common.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/inc/common.php b/inc/common.php index 4d939ac77..e096d8b30 100644 --- a/inc/common.php +++ b/inc/common.php @@ -470,7 +470,7 @@ function ml($id = '', $more = '', $direct = true, $sep = '&', $abs = false) if(preg_match('#^(https?|ftp)://#i', $id)) { $xlink .= 'lib/exe/fetch.php'; // add hash: - $xlink .= '?hash='.substr(md5(auth_cookiesalt().$id), 0, 6); + $xlink .= '?hash='.substr(PassHash::hmac('md5', $id, auth_cookiesalt()), 0, 6); if($more) { $xlink .= $sep.$more; $xlink .= $sep.'media='.rawurlencode($id); |