diogo
/
symfony
Archived
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use HMAC construction for remember me cookie hashes

This commit is contained in:
Jon Cave 2013-06-04 16:50:20 +01:00 committed by Fabien Potencier
parent 8b3d8c1bae
commit f7bb5de804
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/Symfony/Component/Security/Http/RememberMe/TokenBasedRememberMeServices.php
View File

@ -147,6 +147,6 @@ class TokenBasedRememberMeServices extends AbstractRememberMeServices
*/
protected function generateCookieHash($class, $username, $expires, $password)
{
return hash('sha256', $class.$username.$expires.$password.$this->getKey());
return hash_hmac('sha256', $class.$username.$expires.$password, $this->getKey());
}
}