inc/auth.php · 183a7b8845875e4a6b67e466cfff9f5163da3f17 · BRIC / dokuwiki

11 years ago

make password reset token completely random · 183a7b88

Andreas Gohr authored 11 years ago

No need for HMAC here because there's no length attack vector here. We
only care for the existance of the file and each reset request is
completely (random) independent from each other.

183a7b88

History

make password reset token completely random

Andreas Gohr authored 11 years ago

No need for HMAC here because there's no length attack vector here. We
only care for the existance of the file and each reset request is
completely (random) independent from each other.

Code owners

Assign users and groups as approvers for specific file changes. Learn more.