github/myvesta
1
0
Fork 0
mirror of https://github.com/myvesta/vesta synced 2025-08-21 05:44:08 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #20 from serghey-rodin/master

Browse source 
update from official vesta
This commit is contained in:
myvesta 2018-10-18 12:04:37 +02:00 • committed by GitHub
commit c04eda5e09
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
40 changed files with 122 additions and 71 deletions
Download patch file Download diff file Expand all files Collapse all files

2
web/reset/index.php
View file

@ -48,7 +48,7 @@ if ((!empty($_POST['user'])) && (!empty($_POST['code'])) && (!empty($_POST['pass
if ( $return_var == 0 ) {
$data = json_decode(implode('', $output), true);
$rkey = $data[$user]['RKEY'];
if ($rkey == $_POST['code']) {
if (hash_equals($rkey, $_POST['code'])) {
$v_password = tempnam("/tmp","vst");
$fp = fopen($v_password, "w");
fwrite($fp, $_POST['password']."\n");