From 42283dade239e762d90009e8e8d0fec2f9e6fbb3 Mon Sep 17 00:00:00 2001 From: Antonin Date: Fri, 29 Apr 2016 18:46:22 +0200 Subject: [PATCH] Token default lenght --- app/classes/Framadate/Security/Token.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/app/classes/Framadate/Security/Token.php b/app/classes/Framadate/Security/Token.php index b4a4b9b..ec66347 100644 --- a/app/classes/Framadate/Security/Token.php +++ b/app/classes/Framadate/Security/Token.php @@ -3,12 +3,13 @@ namespace Framadate\Security; class Token { + const DEFAULT_LENGTH = 64; private $time; private $value; private $length; private static $codeAlphabet = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ123456789'; - function __construct($length = 64) { + function __construct($length = self::DEFAULT_LENGTH) { $this->length = $length; $this->time = time() + TOKEN_TIME; $this->value = $this->generate(); @@ -41,7 +42,7 @@ class Token { * @param bool $crypto_strong If passed, tells if the token is "cryptographically strong" or not. * @return string */ - public static function getToken($length, &$crypto_strong = false) { + public static function getToken($length = self::DEFAULT_LENGTH, &$crypto_strong = false) { if (function_exists('openssl_random_pseudo_bytes')) { openssl_random_pseudo_bytes(1, $crypto_strong); // Fake use to see if the algorithm used was "cryptographically strong" return self::getSecureToken($length);