Changeset 3810 for trunk/wp-includes/pluggable-functions.php

Timestamp:

05/31/2006 12:24:03 AM (20 years ago)

Author:

ryan

Message:

wp_hash() and server secret.

File:

• trunk/wp-includes/pluggable-functions.php (modified) (2 diffs)

trunk/wp-includes/pluggable-functions.php

@@ -492 +492 @@
 
     //Allow for expanding range, but only do one check if we can
-    if( substr(md5($i . DB_PASSWORD . $action . $uid), -12, 10) == $nonce || substr(md5(($i - 1) . DB_PASSWORD . $action . $uid), -12, 10) == $nonce )
+    if( substr(wp_hash($i . $action . $uid), -12, 10) == $nonce || substr(wp_hash(($i - 1) . $action . $uid), -12, 10) == $nonce )
         return true;
     return false;
@@ -505 +505 @@
     $i = ceil(time() / 43200);
     
-    return substr(md5($i . DB_PASSWORD . $action . $uid), -12, 10);
+    return substr(wp_hash($i . $action . $uid), -12, 10);
+}
+endif;
+
+if ( !function_exists('wp_hash') ) :
+function wp_hash($data) {
+    $secret = get_option('secret');
+    if ( empty($secret) )
+        $secret = DB_PASSWORD;
+
+    if ( function_exists('hash_hmac') ) {
+        return hash_hmac('md5', $data, $secret);
+    } else {
+        return md5($data . $secret);
+    }
 }
 endif;