summaryrefslogtreecommitdiff
path: root/it_user.class
diff options
context:
space:
mode:
authorChristian Schneider2019-03-12 14:41:22 +0100
committerChristian Schneider2019-03-12 14:41:22 +0100
commit7cabc0bf2f7e3b3bf87f8f0247a7a2eae4ebfc7f (patch)
tree7d5714ff1302701e9623626f2bc497689e2c28a2 /it_user.class
parent4318751130dc2bb157f6ee2ef47c6c34fbe252bf (diff)
downloaditools-7cabc0bf2f7e3b3bf87f8f0247a7a2eae4ebfc7f.tar.gz
itools-7cabc0bf2f7e3b3bf87f8f0247a7a2eae4ebfc7f.tar.bz2
itools-7cabc0bf2f7e3b3bf87f8f0247a7a2eae4ebfc7f.zip
Use cryptographically secure random_int() to generate password and increase length to 12 characters for 49^12 possibilities
Diffstat (limited to 'it_user.class')
-rw-r--r--it_user.class7
1 files changed, 4 insertions, 3 deletions
diff --git a/it_user.class b/it_user.class
index 68ff2b7..26046cf 100644
--- a/it_user.class
+++ b/it_user.class
@@ -329,14 +329,15 @@ function create_login_identifier()
/*
* Create a random password with given length.
*/
-function create_password($length = 8, $charset = 'abcdefghjkpqrstuvwxyz23456789ABCDEFGHJKPRSTUVWXYZ')
+function create_password($length = 12, $charset = 'abcdefghjkpqrstuvwxyz23456789ABCDEFGHJKPRSTUVWXYZ')
{
$result = "";
- mt_srand((double)microtime() * 1000000);
+ if (!function_exists($rand = 'random_int'))
+ $rand = 'mt_rand';
for ($i = 0; $i < $length; $i++)
- $result .= substr($charset, mt_rand(0, strlen($charset) - 1), 1);
+ $result .= substr($charset, $rand(0, strlen($charset) - 1), 1);
return $result;
}