IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

store honeypot challenge in redis for extra security

Browse Source
This commit is contained in:
Sam 2013-08-23 16:19:23 +10:00
parent 011d3cf779
commit 90dddb4395
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
app/controllers/users_controller.rb
View File

@ -415,7 +415,13 @@ class UsersController < ApplicationController
end
def challenge_value
'3019774c067cc2b'
challenge = $redis.get('SECRET_CHALLENGE')
unless challenge && challenge.length == 16*2
challenge = SecureRandom.hex(16)
$redis.set('SECRET_CHALLENGE',challenge)
end
challenge
end
def suspicious?(params)