github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-06-06 13:06:56 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

store honeypot challenge in redis for extra security

Browse Source
This commit is contained in:
Sam
2013-08-23 16:19:23 +10:00
parent 011d3cf779
commit 90dddb4395
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
app/controllers/users_controller.rb
View File

@ -415,7 +415,13 @@ class UsersController < ApplicationController
end end
def challenge_value def challenge_value
'3019774c067cc2b' challenge = $redis.get('SECRET_CHALLENGE')
unless challenge && challenge.length == 16*2
challenge = SecureRandom.hex(16)
$redis.set('SECRET_CHALLENGE',challenge)
end
challenge
end end
def suspicious?(params) def suspicious?(params)