From 964bb83300a75095a19768d3e426a429d77c4d6a Mon Sep 17 00:00:00 2001 From: Michael Foster Date: Mon, 23 Sep 2013 14:23:42 +1000 Subject: [PATCH] OK, now it is secure. --- inc/functions.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/inc/functions.php b/inc/functions.php index 3448e7db..7c6d3df3 100644 --- a/inc/functions.php +++ b/inc/functions.php @@ -1973,13 +1973,14 @@ function generate_tripcode($name) { if (isset($config['custom_tripcode']["##{$trip}"])) $trip = $config['custom_tripcode']["##{$trip}"]; else - $trip = '!!' . substr(crypt($trip, substr(base64_encode(sha1($trip . $config['secure_trip_salt'], true)), 0, 9)), -10); + $trip = '!!' . substr(crypt($trip, '_..A.' . substr(base64_encode(sha1($trip . $config['secure_trip_salt'], true)), 0, 4)), -10); } else { if (isset($config['custom_tripcode']["#{$trip}"])) $trip = $config['custom_tripcode']["#{$trip}"]; else $trip = '!' . substr(crypt($trip, $salt), -10); } + return array($name, $trip); }