@@ -26,7 +26,7 @@ class API
session_start();
}
if (!isset($_SESSION['XSRF-TOKEN'])) {
- $_SESSION['XSRF-TOKEN'] = sha1(session_id() . openssl_random_pseudo_bytes(16));
+ $_SESSION['XSRF-TOKEN'] = sha1(session_id() . random_bytes(16));
if (!isset($_COOKIE['XSRF-TOKEN']) || $_COOKIE['XSRF-TOKEN'] !== $_SESSION['XSRF-TOKEN']) {
setcookie('XSRF-TOKEN', $_SESSION['XSRF-TOKEN'], 0, '/', '', false, false);
@@ -273,7 +273,7 @@ class Advanced extends SystemModule
private function addApiToken()
{
if (isset($this->request->name)) {
- $token = hash('sha512', openssl_random_pseudo_bytes(32));
+ $token = hash('sha512', random_bytes(32));
$name = $this->request->name;
$this->dbConnection->exec("INSERT INTO api_tokens(token, name) VALUES('%s','%s');", $token, $name);
$this->response = ["success" => true, "token" => $token, "name" => $name];