Changeset 29111 for trunk/include/functions_user.inc.php

Timestamp:

Jul 28, 2014, 9:27:50 PM (10 years ago)

Author:

plg

Message:

bug 3050: increase security on reset password algorithm.

• reset key has a 1-hour life
• reset key is automatically deleted once used
• reset key is stored as a hash

Thank you effigies for code suggestions

File:

• trunk/include/functions_user.inc.php (modified) (1 diff)

trunk/include/functions_user.inc.php

@@ -1467 +1467 @@
     .','.pwg_db_get_recent_period_expression(1,$user['last_photo_date']).')';
 }
-
-/**
- * Returns a unique activation key.
- *
- * @return string
- */
-function get_user_activation_key()
-{
-  while (true)
-  {
-    $key = generate_key(20);
-    $query = '
-SELECT COUNT(*)
-  FROM '.USER_INFOS_TABLE.'
-  WHERE activation_key = \''.$key.'\'
-;';
-    list($count) = pwg_db_fetch_row(pwg_query($query));
-    if (0 == $count)
-    {
-      return $key;
-    }
-  }
-}
-
 ?>