Changeset 3813 for branches/2.0/wp-includes/cache.php

Timestamp:

05/31/2006 05:01:09 AM (20 years ago)

Author:

ryan

Message:

wp_hash(), wp_salt(), and server secret.

File:

• branches/2.0/wp-includes/cache.php (modified) (5 diffs)

branches/2.0/wp-includes/cache.php

@@ -65 +65 @@
         var $warm_cache_hits = 0;
         var $cache_misses = 0;
+        var $secret = '';
 
         function acquire_lock() {
@@ -143 +144 @@
                 }
 
-                $cache_file = $this->cache_dir.$this->get_group_dir($group)."/".md5($id.DB_PASSWORD).'.php';
+                $cache_file = $this->cache_dir.$this->get_group_dir($group)."/".$this->hash($id).'.php';
                 if (!file_exists($cache_file)) {
                         $this->non_existant_objects[$group][$id] = true;
@@ -172 +173 @@
 
                 return "{$this->blog_id}/$group";
+        }
+
+        function hash($data) {
+                if ( function_exists('hash_hmac') ) {
+                        return hash_hmac('md5', $data, $this->secret);
+                } else {
+                        return md5($data . $this->secret);
+                }
         }
 
@@ -333 +342 @@
                         $ids = array_unique($ids);
                         foreach ($ids as $id) {
-                                $cache_file = $group_dir.md5($id.DB_PASSWORD).'.php';
+                                $cache_file = $group_dir.$this->hash($id).'.php';
 
                                 // Remove the cache file if the key is not set.
@@ -425 +434 @@
                         $this->expiration_time = CACHE_EXPIRATION_TIME;
 
-                $this->blog_id = md5($blog_id);
+                if ( defined('WP_SECRET') )
+                        $this->secret = WP_SECRET;
+                else
+                        $this->secret = DB_PASSWORD . DB_USER . DB_NAME . DB_HOST . ABSPATH;
+
+                $this->blog_id = $this->hash($blog_id);
         }
 }