mirror of
https://github.com/nuxsmin/sysPass.git
synced 2026-03-13 03:46:58 +01:00
Enforce session master password encryption
This commit is contained in:
@@ -1235,7 +1235,7 @@ class SP_Users {
|
||||
if ($showPass == TRUE) {
|
||||
return $clearMasterPass;
|
||||
} else {
|
||||
$_SESSION['mPassPwd'] = uniqid();
|
||||
$_SESSION['mPassPwd'] = SHA1(uniqid());
|
||||
|
||||
$sessionMasterPass = $crypt->mkCustomMPassEncrypt($_SESSION["mPassPwd"], $clearMasterPass);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user