From bd067ed85fb21a54e4ffde001e307eef1b81246e Mon Sep 17 00:00:00 2001 From: Pellaeon Lin Date: Sun, 26 Jun 2016 15:27:47 +0800 Subject: [PATCH] Update# 6 chars of uppercase and digits should be enough for verification --- db/pendingregist.php | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/db/pendingregist.php b/db/pendingregist.php index b8ff2c9..8fe6f62 100644 --- a/db/pendingregist.php +++ b/db/pendingregist.php @@ -21,9 +21,7 @@ class PendingRegist { $query = $this->db->prepareQuery( 'INSERT INTO `*PREFIX*registration`' .' ( `email`, `token`, `requested` ) VALUES( ?, ?, NOW() )' ); - do { - $token = $this->random->generate(30); - } while (preg_match('/[\/]++/', $token)); + $token = $this->random->generate(6, ISecureRandom::CHAR_UPPER.ISecureRandom::CHAR_DIGITS); $query->execute(array( $email, $token )); return $token;