From 2fa6c5cd9735b82206ef952ae2b23bedce32c765 Mon Sep 17 00:00:00 2001 From: "Michael Kaufmann (d00p)" Date: Mon, 9 Dec 2013 10:57:54 +0100 Subject: [PATCH] generate more secure password suggestions and respect password-min-length setting Signed-off-by: Michael Kaufmann (d00p) --- lib/functions/froxlor/function.generatePassword.php | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/lib/functions/froxlor/function.generatePassword.php b/lib/functions/froxlor/function.generatePassword.php index 132e24c7..d4db872f 100644 --- a/lib/functions/froxlor/function.generatePassword.php +++ b/lib/functions/froxlor/function.generatePassword.php @@ -19,5 +19,9 @@ * Generates a random password */ function generatePassword() { - return substr(md5(uniqid(microtime(), 1)), 24, 10); + global $settings; + return substr( + base64_encode(sha1(md5(uniqid(microtime(), 1))).md5(uniqid(microtime(), 1)).sha1(md5(uniqid(microtime(), 1)))), + rand(5, 50), $settings['panel']['password_min_length'] + ); }