Fixes potential for generated password to not meet own validation requirements

This commit is contained in:
Dane Everitt 2016-12-01 19:16:40 -05:00
parent 90460bef43
commit ed5b7559ec
No known key found for this signature in database
GPG key ID: EEA66103B3D71F53
2 changed files with 13 additions and 1 deletions

View file

@ -12,6 +12,9 @@ This project follows [Semantic Versioning](http://semver.org) guidelines.
* File uploads now account for a maximum file size that is assigned for the daemon, and gives cleaner errors when that limit is reached.
* File upload limit can now be controlled from the panel.
### Fixed
* Fixes potential for generated password to not meet own validation requirements.
## v0.5.3 (Bodacious Boreopterus)
### Fixed
* Fixed an error that occurred when viewing a node listing when no nodes were created yet due to a mis-declared variable. Also fixes a bug that would have all nodes trying to connect to the daemon using the same secret token on the node listing, causing only the last node to display properly.

View file

@ -62,7 +62,16 @@ class IndexController extends Controller
public function getPassword(Request $request, $length = 16)
{
$length = ($length < 8) ? 8 : $length;
return str_random($length);
$returnable = false;
while (!$returnable) {
$generated = str_random($length);
if (preg_match('/[A-Z]+[a-z]+[0-9]+/', $generated)) {
$returnable = true;
}
}
return $generated;
}
}