Egor Cheshkov
unread,Jan 12, 2006, 6:32:46 PM1/12/06Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to TurboGears
Hello!
Since visit tracking hash is based only on current timestamp, it can be
easyly guessed. We should use something more random to generate visit
cookie hash, for example:
visit_key= sha.new(" ".join(str(time.time
()), str(random.random()), cherrypy.request.remoteAddr)).hexdigest()
Egor.