Generate longer more secure Key for browser extension

This commit is contained in:
johnnyq 2022-12-29 16:59:47 -05:00
parent 13d2429a45
commit 5d6b03141b
1 changed files with 1 additions and 1 deletions

View File

@ -324,7 +324,7 @@ if(isset($_POST['edit_profile'])){
// Enable extension access, only if it isn't already setup (user doesn't have cookie)
if(isset($_POST['extension']) && $_POST['extension'] == 'Yes'){
if(!isset($_COOKIE['user_extension_key'])){
$extension_key = keygen();
$extension_key = bin2hex(random_bytes(78));
mysqli_query($mysqli, "UPDATE users SET user_extension_key = '$extension_key' WHERE user_id = $user_id");
$extended_log_description .= ", extension access enabled";