Major revamp of security. Passwords are first SHA1 hashed and then
that hash is bcrypted. Bcrypted hashes are stored in a new column on users. This separate column is only to allow for rollbacks, eventually the old SHA1 hash column will be removed. Sensitive cookie details are now encrypted to prevent user tampering and more stringent checks on secret_token and session_secret_key are enforced.
This commit is contained in:
@@ -112,11 +112,6 @@ module Danbooru
|
||||
!user.is_privileged?
|
||||
end
|
||||
|
||||
# This is required for Rails 2.0.
|
||||
def session_secret_key
|
||||
"This should be at least 30 characters long"
|
||||
end
|
||||
|
||||
# Users cannot search for more than X regular tags at a time.
|
||||
def base_tag_query_limit
|
||||
6
|
||||
|
||||
Reference in New Issue
Block a user