Make WordPress Core


Ignore:
Timestamp:
01/11/2017 05:35:01 AM (8 years ago)
Author:
jeremyfelt
Message:

Multisite: Use wp_rand() in signup key creation.

Merges [39795] to the 3.7 branch.

Location:
branches/3.7
Files:
3 edited

Legend:

Unmodified
Added
Removed
  • branches/3.7

  • branches/3.7/src

  • branches/3.7/src/wp-includes/ms-functions.php

    r25862 r39806  
    632632    global $wpdb;
    633633
    634     $key = substr( md5( time() . rand() . $domain ), 0, 16 );
     634    $key = substr( md5( time() . wp_rand() . $domain ), 0, 16 );
    635635    $meta = serialize($meta);
    636636
     
    668668    $user = preg_replace( '/\s+/', '', sanitize_user( $user, true ) );
    669669    $user_email = sanitize_email( $user_email );
    670     $key = substr( md5( time() . rand() . $user_email ), 0, 16 );
     670    $key = substr( md5( time() . wp_rand() . $user_email ), 0, 16 );
    671671    $meta = serialize($meta);
    672672
Note: See TracChangeset for help on using the changeset viewer.