1
0
mirror of https://github.com/phpbb/phpbb.git synced 2025-07-31 22:10:45 +02:00

Merge pull request #4165 from Nicofuma/ticket/14457

[ticket/14457] Uses a random placeholder to inject css and js
This commit is contained in:
Marc Alexander
2016-02-18 21:52:48 +01:00
9 changed files with 84 additions and 46 deletions

View File

@@ -93,25 +93,10 @@ function gen_rand_string_friendly($num_chars = 8)
/**
* Return unique id
* @param string $extra additional entropy
*/
function unique_id($extra = 'c')
function unique_id()
{
static $dss_seeded = false;
global $config;
$val = $config['rand_seed'] . microtime();
$val = md5($val);
$config['rand_seed'] = md5($config['rand_seed'] . $val . $extra);
if ($dss_seeded !== true && ($config['rand_seed_last_update'] < time() - rand(1,10)))
{
$config->set('rand_seed_last_update', time(), false);
$config->set('rand_seed', $config['rand_seed'], false);
$dss_seeded = true;
}
return substr($val, 4, 16);
return bin2hex(random_bytes(6));
}
/**