Changeset 7965

Timestamp:

10/18/07 18:20:54 (1 year ago)

Author:

bitsweat

Message:

Increase randomness of TokenGenerator#generate_token by reusing CGI::Session.generate_unique_id. Closes #9622 [rmm5t, Jeremy Kemper]

Files:

• plugins/token_generator/lib/token_generator.rb (modified) (1 diff)

plugins/token_generator/lib/token_generator.rb

@@ -1 +1 @@
-module TokenGenerator
-  def generate_token(size = 12, &validity)
+    constant = "#{self.class.name}#{id}"
+
-    begin
-Digest::MD5.hexdigest("#{inspect}#{Time.now}").first(size
+CGI::Session.generate_unique_id(constant
-    end while !validity.call(token) if block_given?
-
+
-    token
-  end
-
+
-  def set_token
-    self.token = generate_token { |token| self.class.find_by_token(token).nil? }