Django

Code

Changeset 5470

Show
Ignore:
Timestamp:
06/14/07 19:22:16 (2 years ago)
Author:
mtredinnick
Message:

Fixed #4531 -- Added a bit more randomness to session idents. Thanks, Frank
Tegtmeyer.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • django/trunk/AUTHORS

    r5456 r5470  
    222222    Ville Säävuori <http://www.unessa.net/> 
    223223    Tyson Tate <tyson@fallingbullets.com> 
     224    Frank Tegtmeyer <fte@fte.to> 
    224225    thebjorn <bp@datakortet.no> 
    225226    Zach Thompson <zthompson47@gmail.com> 

  • django/trunk/django/contrib/sessions/models.py

    r4771 r5470  
    1 import base64, md5, random, sys, datetime 
     1import base64, md5, random, sys, datetime, os, time 
    22import cPickle as pickle 
    33from django.db import models 
    …… 
    1515        "Returns session key that isn't being used." 
    1616        # The random module is seeded when this Apache child is created. 
    17         # Use person_id and SECRET_KEY as added salt. 
     17        # Use SECRET_KEY as added salt. 
    1818        while 1: 
    19             session_key = md5.new(str(random.randint(0, sys.maxint - 1)) + str(random.randint(0, sys.maxint - 1)) + settings.SECRET_KEY).hexdigest() 
     19            session_key = md5.new("%s%s%s%s" % (random.randint(0, sys.maxint - 1), os.getpid(), time.time(), settings.SECRET_KEY)).hexdigest() 
    2020            try: 
    2121                self.get(session_key=session_key)