From 51700a4ee4e8c0c513f4dfff55b5817ff57ea76d Mon Sep 17 00:00:00 2001 From: Andrew McMillan Date: Thu, 17 Jun 2010 23:04:52 +1200 Subject: [PATCH] Also remove '/' from potential ticket charset. --- inc/caldav-MKTICKET.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inc/caldav-MKTICKET.php b/inc/caldav-MKTICKET.php index cbcf14f9..ad57c602 100644 --- a/inc/caldav-MKTICKET.php +++ b/inc/caldav-MKTICKET.php @@ -80,7 +80,7 @@ $resource_id = $target->GetProperty('dav_id'); $i = 0; do { - $ticket_id = substr( str_replace('+', '',base64_encode(sha1(date('r') .rand(0,2100000000) . microtime(true),true))), 7, 8); + $ticket_id = substr( str_replace('/', '', str_replace('+', '',base64_encode(sha1(date('r') .rand(0,2100000000) . microtime(true),true)))), 7, 8); $qry = new AwlQuery( 'INSERT INTO access_ticket ( ticket_id, dav_owner_id, privileges, target_collection_id, target_resource_id, expires ) VALUES( :ticket_id, :owner, :privs::INT::BIT(24), :collection, :resource, (current_timestamp + :expires::interval) )',