Changeset 3813 for branches/2.0/wp-includes/pluggable-functions.php

Timestamp:

05/31/2006 05:01:09 AM (20 years ago)

Author:

ryan

Message:

wp_hash(), wp_salt(), and server secret.

File:

• branches/2.0/wp-includes/pluggable-functions.php (modified) (2 diffs)

branches/2.0/wp-includes/pluggable-functions.php

@@ -489 +489 @@
 
         //Allow for expanding range, but only do one check if we can
-        if( substr(md5($i . DB_PASSWORD . $action . $uid), -12, 10) == $nonce || substr(md5(($i - 1) . DB_PASSWORD . $action . $uid), -12, 10) == $nonce )
+        if( substr(wp_hash($i . $action . $uid), -12, 10) == $nonce || substr(wp_hash(($i - 1) . $action . $uid), -12, 10) == $nonce )
                 return true;
         return false;
@@ -502 +502 @@
         $i = ceil(time() / 43200);
         
-        return substr(md5($i . DB_PASSWORD . $action . $uid), -12, 10);
+        return substr(wp_hash($i . $action . $uid), -12, 10);
+}
+endif;
+
+if ( !function_exists('wp_salt') ) :
+function wp_salt() {
+        $salt = get_option('secret');
+        if ( empty($salt) )
+                $salt = DB_PASSWORD . DB_USER . DB_NAME . DB_HOST . ABSPATH;
+
+        return $salt;
+}
+endif;
+
+if ( !function_exists('wp_hash') ) :
+function wp_hash($data) {
+        $salt = wp_salt();
+
+        if ( function_exists('hash_hmac') ) {
+                return hash_hmac('md5', $data, $salt);
+        } else {
+                return md5($data . $salt);
+        }
 }
 endif;