Changeset 3055044

Timestamp:

03/20/2024 08:04:20 AM (2 years ago)

Author:

atomchat

Message:

Make secretkey more secure

File:

• atomchat/trunk/atomchat.php (modified) (1 diff)

atomchat/trunk/atomchat.php

@@ -204 +204 @@
         $data = json_decode(file_get_contents('php://input'));
         $server_secret = $data->secretkey;
-        $get_user_id = $data->UID;
-        $user = get_user_by( 'id', $get_user_id );
         $randomString = $data->randomString;
-        $client_secret = md5(implode(',', [$user->id,$user->user_login,$auth_key,$randomString]));
+        $client_secret = md5($auth_key.$randomString."dcomdemaetand");
         if($client_secret == $server_secret){
             include_once(dirname(__FILE__).DIRECTORY_SEPARATOR.'plugins'.DIRECTORY_SEPARATOR.'mycred'.DIRECTORY_SEPARATOR.'credits.php');