Dereku/snappymail
1
0
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2026-07-11 00:14:50 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Move APP_VERSION hashing to smctoken encryption key

Browse source
This commit is contained in:
the-djmaze 2023-03-07 15:14:49 +01:00
parent 9dbf7b3bad
commit f5045b9759
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
snappymail/v/0.0.0/app/libraries/RainLoop/Model/Account.php
View file

@ -63,7 +63,7 @@ abstract class Account implements \JsonSerializable
{
return \sha1(\implode(APP_SALT, [
$this->sEmail,
APP_VERSION
$this->sLogin,
// \json_encode($this->Domain()),
// $this->sPassword
]));

2
snappymail/v/0.0.0/app/libraries/snappymail/crypt.php
View file

@ -49,7 +49,7 @@ abstract class Crypt
if (empty($_COOKIE['smctoken'])) {
throw new \RuntimeException('Missing smctoken');
}
$key = $_COOKIE['smctoken'];
$key = $_COOKIE['smctoken'] . APP_VERSION;
}
return \sha1($key . APP_SALT, true);
}