Changeset 1990

Timestamp:

12/22/2004 02:41:32 AM (21 years ago)

Author:

saxmatt

Message:

Make reset passwords use the same randomness we do in install.php. Hat tip: swoolley.

File:

• trunk/wp-login.php (modified) (1 diff)

trunk/wp-login.php

@@ -81 +81 @@
 
     // Generate something random for a password... md5'ing current time with a rand salt
-    $user_pass = substr( MD5('time' . rand(1, 16000) ), 0, 6);
+    $user_pass = substr(md5(uniqid(microtime())), 0, 6);
     // now insert the new pass md5'd into the db
     $wpdb->query("UPDATE $wpdb->users SET user_pass = MD5('$user_pass') WHERE user_login = '$user_login'");