random_bytes() only for >PHP7 (prasathmani#1066)

rampageX · Jun 29, 2023 · eb8f3d8 · eb8f3d8
1 parent f380478
commit eb8f3d8
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/tinyfilemanager.php b/tinyfilemanager.php
@@ -245,7 +245,11 @@ function session_error_handling_function($code, $msg, $file, $line) {
 
 //Generating CSRF Token
 if (empty($_SESSION['token'])) {
-    $_SESSION['token'] = bin2hex(random_bytes(32));
+    if (function_exists('random_bytes')) {
+        $_SESSION['token'] = bin2hex(random_bytes(32));
+    } else {
+    	$_SESSION['token'] = bin2hex(openssl_random_pseudo_bytes(32));
+    }
 }
 
 if (empty($auth_users)) {