Browse Source

Refactor php7-mod-openssl code

DSR! 2 năm trước cách đây
mục cha
commit
3448269fbc

+ 1 - 1
src/pineapple/api/API.php

@@ -26,7 +26,7 @@ class API
             session_start();
         }
         if (!isset($_SESSION['XSRF-TOKEN'])) {
-            $_SESSION['XSRF-TOKEN'] = sha1(session_id() . openssl_random_pseudo_bytes(16));
+            $_SESSION['XSRF-TOKEN'] = sha1(session_id() . random_bytes(16));
         }
         if (!isset($_COOKIE['XSRF-TOKEN']) || $_COOKIE['XSRF-TOKEN'] !== $_SESSION['XSRF-TOKEN']) {
             setcookie('XSRF-TOKEN', $_SESSION['XSRF-TOKEN'], 0, '/', '', false, false);

+ 1 - 1
src/pineapple/modules/Advanced/api/module.php

@@ -273,7 +273,7 @@ class Advanced extends SystemModule
     private function addApiToken()
     {
         if (isset($this->request->name)) {
-            $token = hash('sha512', openssl_random_pseudo_bytes(32));
+            $token = hash('sha512', random_bytes(32));
             $name = $this->request->name;
             $this->dbConnection->exec("INSERT INTO api_tokens(token, name) VALUES('%s','%s');", $token, $name);
             $this->response = ["success" => true, "token" => $token, "name" => $name];