Use a more random source...

diff --git a/lib/setup.php b/lib/setup.php
index b4b07bd70e494cac213f05e08f8bc7e470ae83f9..54b6149fe27908a36c09497db6843a666e2f48e1 100644 (file)
--- a/lib/setup.php
+++ b/lib/setup.php
@@ -333,7 +333,7 @@ class OC_Setup {
                        //add prefix to the postgresql user name to prevent collisions
                        $dbusername='oc_'.$username;
                        //create a new password so we don't need to store the admin config in the config file
-                       $dbpassword=md5(time());
+                       $dbpassword=md5(OC_Util::generate_random_bytes(30));
 
                        self::pg_createDBUser($dbusername, $dbpassword, $connection);