libre-service.eu/paste.libre-service.eu-privatebin
libre-service.eu/paste.libre-service.eu-privatebin
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

switching to SHA256 HMAC of IPs in traffic limiter, resolves #57

Browse source
This commit is contained in:
El RIDO 2015-12-22 20:58:23 +01:00
parent deda8e4783
commit 09dd79dbc7
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
lib/trafficlimiter.php
View file

@ -79,7 +79,7 @@ class trafficlimiter extends persistence
*/
public static function getIp()
{
return md5($_SERVER[self::$_ipKey]);
return $_SERVER[self::$_ipKey];
}
/**
@ -94,11 +94,11 @@ class trafficlimiter extends persistence
*/
public static function canPass()
{
$ip = self::getIp();
// disable limits if set to less then 1
if (self::$_limit < 1) return true;
$ip = hash_hmac('sha256', self::getIp(), serversalt::get());
$file = 'traffic_limiter.php';
if (!self::_exists($file))
{