Infra-Mirrors/PrivateBin
1
0
Fork 0
mirror of https://github.com/PrivateBin/PrivateBin.git synced 2024-12-24 06:49:29 -05:00
Code Issues Packages Projects Releases Wiki Activity

switching to SHA256 HMAC of IPs in traffic limiter, resolves #57

Browse Source
This commit is contained in:
El RIDO 2015-12-22 20:58:23 +01:00
parent deda8e4783
commit 09dd79dbc7
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/trafficlimiter.php
View File

@ -79,7 +79,7 @@ class trafficlimiter extends persistence
*/ */
public static function getIp() public static function getIp()
{ {
return md5($_SERVER[self::$_ipKey]); return $_SERVER[self::$_ipKey];
} }
/** /**
@ -94,11 +94,11 @@ class trafficlimiter extends persistence
*/ */
public static function canPass() public static function canPass()
{ {
$ip = self::getIp();
// disable limits if set to less then 1 // disable limits if set to less then 1
if (self::$_limit < 1) return true; if (self::$_limit < 1) return true;
$ip = hash_hmac('sha256', self::getIp(), serversalt::get());
$file = 'traffic_limiter.php'; $file = 'traffic_limiter.php';
if (!self::_exists($file)) if (!self::_exists($file))
{ {