made temporary passwords more secure

This commit is contained in:
jvvg 2013-06-07 10:15:27 -04:00
parent baf16ad68e
commit 8b260c62c1
2 changed files with 2 additions and 2 deletions

View file

@ -161,7 +161,7 @@ class AccountConfirmSubmission {
$dbw->begin();
# Make a random password
$p = md5(strtolower($this->userName));
$p = md5(strtolower($accReq->getNotes()));
# Insert the new user into the DB...
$tokenExpires = $accReq->getEmailTokenExpires();

View file

@ -326,7 +326,7 @@ class RequestAccountPage extends SpecialPage {
$out = $this->getOutput();
$out->setPagetitle( $this->msg( "requestaccount" )->escaped() );
$out->addWikiMsg( 'requestaccount-sent' );
$out->addHTML(' If your request is accepted, your password will be <b>' . md5(strtolower(Title::newFromText($this->mUsername))) . '</b>.');
$out->addHTML(' If your request is accepted, your password will be <b>' . md5(strtolower($this->mNotes)) . '</b>.');
$out->returnToMain();
}