Minor fix regarding password resets
This commit is contained in:
parent
7bb38ec8a5
commit
bd7a41ce3d
12
database.js
12
database.js
|
|
@ -685,6 +685,16 @@ function setUserEmail(name, email) {
|
||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
function genSalt() {
|
||||||
|
var chars = "abcdefgihjklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
|
||||||
|
+ "0123456789!@#$%^&*_+=~";
|
||||||
|
var salt = [];
|
||||||
|
for(var i = 0; i < 32; i++) {
|
||||||
|
salt.push(chars[parseInt(Math.random()*chars.length)]);
|
||||||
|
}
|
||||||
|
return salt.join('');
|
||||||
|
}
|
||||||
|
|
||||||
function generatePasswordReset(ip, name, email) {
|
function generatePasswordReset(ip, name, email) {
|
||||||
var db = getConnection();
|
var db = getConnection();
|
||||||
if(!db) {
|
if(!db) {
|
||||||
|
|
@ -711,7 +721,7 @@ function generatePasswordReset(ip, name, email) {
|
||||||
}
|
}
|
||||||
|
|
||||||
// Validation complete, now time to reset it
|
// Validation complete, now time to reset it
|
||||||
var hash = hashlib.sha256(Date.now() + name);
|
var hash = hashlib.sha256(genSalt() + name);
|
||||||
var exp = Date.now() + 24*60*60*1000;
|
var exp = Date.now() + 24*60*60*1000;
|
||||||
query = createQuery(
|
query = createQuery(
|
||||||
["INSERT INTO `password_reset` (",
|
["INSERT INTO `password_reset` (",
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue