]> source.dussan.org Git - nextcloud-server.git/commit
Ensure instanceid contains a letter
authorMiquel Rodríguez Telep / Michael Rodríguez-Torrent <miquel@designunbound.co.uk>
Tue, 26 Mar 2013 21:49:32 +0000 (21:49 +0000)
committerMiquel Rodríguez Telep / Michael Rodríguez-Torrent <miquel@designunbound.co.uk>
Tue, 26 Mar 2013 21:49:32 +0000 (21:49 +0000)
commit93a6ed3dab8d54fa2c735381298bec2bbcdfde41
tree38274c8fcdc72fe60f06115234782b6f9cbd6dbf
parent53fd122b89ff14b056094fcbcbd294bb63687778
Ensure instanceid contains a letter

instanceid is generated by uniqid() and then used as the
session_name. Because session_name requires at least one letter
and uniqid() does not guarantee to provide that, in the case that
uniqid() generates a string of only digits, the user will be stuck
in an infinite login loop because every request will generate a
new PHP session.
lib/util.php
tests/lib/util.php