summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFlorian Pritz <bluewind@xssn.at>2010-02-26 17:30:44 +0100
committerFlorian Pritz <bluewind@xssn.at>2010-02-26 17:30:44 +0100
commit83bdc4bc426e838498bb89d3d2daa50463bf192b (patch)
tree8c5538467a768129a0adcc394287adf165bfb6b6
parentef0ec479b22fba60acbd92914b56295e296a0e7c (diff)
move password salt to config
Signed-off-by: Florian Pritz <bluewind@xssn.at>
-rwxr-xr-xsystem/application/config/example/config.php1
-rw-r--r--system/application/models/file_mod.php3
2 files changed, 2 insertions, 2 deletions
diff --git a/system/application/config/example/config.php b/system/application/config/example/config.php
index 33a436d31..7b325a3e0 100755
--- a/system/application/config/example/config.php
+++ b/system/application/config/example/config.php
@@ -343,6 +343,7 @@ $config['upload_max_text_size'] = 2*1024*1024;
$config['upload_max_age'] = 60*60*24*5; // 5 days
$config['paste_show_url'] = 'file/show_url/'; // "s/" with url rewrite
$config['paste_download_url'] = 'file/download/'; // "d/" with url rewrite
+$config['passwordsalt'] = ''; // just enter any strign you want here
/* End of file config.php */
/* Location: ./system/application/config/config.php */
diff --git a/system/application/models/file_mod.php b/system/application/models/file_mod.php
index fae20492c..23c3002af 100644
--- a/system/application/models/file_mod.php
+++ b/system/application/models/file_mod.php
@@ -66,8 +66,7 @@ class File_mod extends Model {
function hash_password($password)
{
- // TODO: move salt to config
- return sha1('w9yFMeU6ITrkrPBlRJfA'.$password);
+ return sha1($this->config->item('passwordsalt').$password);
}
private function unused_file($hash)