Changeset 11826

Timestamp:

Jul 25, 2011, 7:56:47 PM (13 years ago)

Author:

rvelices

Message:

• simplify calculation of auto login key (no need to concatenate 2 hashes)

File:

• trunk/include/functions_user.inc.php (modified) (1 diff)

trunk/include/functions_user.inc.php

@@ -1033 +1033 @@
     $row = pwg_db_fetch_assoc($result);
     $username = stripslashes($row['username']);
-    $data = $time.stripslashes($row['username']).$row['password'];
-    $key = base64_encode(
-      pack('H*', sha1($data))
-      .hash_hmac('md5', $data, $conf['secret_key'],true)
-      );
+    $data = $time.$user_id.$username;
+    $key = base64_encode( hash_hmac('sha1', $data, $conf['secret_key'].$row['password'],true) );
     return $key;
   }