random_bytes() only for >PHP7 (#1066)

prasathmani · Jun 29, 2023 · eb8f3d8 · ner00 · Jun 29, 2023 · prasathmani
1 parent f380478
commit eb8f3d8
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/tinyfilemanager.php b/tinyfilemanager.php
@@ -245,7 +245,11 @@ function session_error_handling_function($code, $msg, $file, $line) {
 
 //Generating CSRF Token
 if (empty($_SESSION['token'])) {
- $_SESSION['token'] = bin2hex(random_bytes(32));
+ if (function_exists('random_bytes')) {
+ $_SESSION['token'] = bin2hex(random_bytes(32));
+ } else {
+ $_SESSION['token'] = bin2hex(openssl_random_pseudo_bytes(32));
+ }
 }
 
 if (empty($auth_users)) {