fixes #2327 standardize password masking length in emails

This commit is contained in:
Linty 2025-02-24 13:48:38 +01:00
parent 8747128289
commit cc675b712b

View file

@ -242,6 +242,7 @@ SELECT id
{ {
include_once(PHPWG_ROOT_PATH.'include/functions_mail.inc.php'); include_once(PHPWG_ROOT_PATH.'include/functions_mail.inc.php');
$length = rand(10, 15);
$keyargs_content = array( $keyargs_content = array(
get_l10n_args('Hello %s,', stripslashes($login)), get_l10n_args('Hello %s,', stripslashes($login)),
get_l10n_args('Thank you for registering at %s!', $conf['gallery_title']), get_l10n_args('Thank you for registering at %s!', $conf['gallery_title']),
@ -250,7 +251,7 @@ SELECT id
get_l10n_args('', ''), get_l10n_args('', ''),
get_l10n_args('Link: %s', get_absolute_root_url()), get_l10n_args('Link: %s', get_absolute_root_url()),
get_l10n_args('Username: %s', stripslashes($login)), get_l10n_args('Username: %s', stripslashes($login)),
get_l10n_args('Password: %s', str_repeat("*", strlen(stripslashes($password)))), get_l10n_args('Password: %s', str_repeat("*", $length)),
get_l10n_args('Email: %s', $mail_address), get_l10n_args('Email: %s', $mail_address),
get_l10n_args('', ''), get_l10n_args('', ''),
get_l10n_args('If you think you\'ve received this email in error, please contact us at %s', get_webmaster_mail_address()), get_l10n_args('If you think you\'ve received this email in error, please contact us at %s', get_webmaster_mail_address()),