md5 in form-maker.php

  • rillig

    (@rillig)


    1 week, 3 days ago

    The code in form-maker.php computes the MD5 hash of the constant string ‘uniqid(rand(), TRUE)’, always resulting in bd736efb144d599cf463541431fbf5c4. This looks unintended to me, especially since that string without the quotes would be a valid PHP expression. What is the purpose of that piece of code, as it is right now?

    (Posting it here, as the 10web AI agent didn’t tell me an email address where to submit possible security issues, and it stopped talking to me after referring me to a human agent. That human agent didn’t show up, though.)

You must be logged in to reply to this topic.