Переглянути джерело

[svn r15046] Added security key to hash (to improve security just a little bit)

Yannick Warnier 17 роки тому
батько
коміт
ca4c41ce5a
1 змінених файлів з 1 додано та 1 видалено
  1. 1 1
      main/newscorm/audiorecorder.inc.php

+ 1 - 1
main/newscorm/audiorecorder.inc.php

@@ -13,7 +13,7 @@ $player = $audio_recorder_studentview =='true' ? 'player2.swf' : 'recorder2.swf'
 
 $server = api_get_setting('service_visio','visio_host');
 $web_path = api_get_path(WEB_PATH);
-$post_uri = urlencode($web_path.'conference/audiopost.php?course_code='.api_get_course_id().'&user_id='.api_get_user_id().'&checker='.md5(api_get_course_id().api_get_user_id().date('Ymd')));
+$post_uri = urlencode($web_path.'conference/audiopost.php?course_code='.api_get_course_id().'&user_id='.api_get_user_id().'&checker='.md5(api_get_course_id().api_get_user_id().date('Ymd').$_configuration['security_key']));
 //$filename = str_replace('.','dot',substr($web_path,strpos($web_path,'://')+3,-1)).'-z-'.api_get_course_id().'-z-'.api_get_user_id().'-z-'.gmdate('YmdHis').'.flv';//using -z- as fields splitter
 $filename = gmdate('YmdHis').'-'.api_get_user_id().'.flv';//using -z- as fields splitter
 $path_to_lzx = $web_path.'conference/'.$player.'?server='.urlencode($server).'&postURI='.$post_uri.'&filename='.$filename;