X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=install%2Fcivicrm.php;h=8438e850fa27c9899139fb3332b9f35e68985029;hb=e2ec8bbd52347164d7383b6c11fbd41370467d60;hp=ec423a1938c2e4cb31618f7243d262c105ee148d;hpb=817af9449a6cbf7fc06bf5c4490d62d64cece6f1;p=civicrm-core.git

diff --git a/install/civicrm.php b/install/civicrm.php
index ec423a1938..8438e850fa 100644
--- a/install/civicrm.php
+++ b/install/civicrm.php
@@ -235,7 +235,8 @@ function civicrm_config(&$config) {
     $params['crmRoot'] = addslashes($params['crmRoot']);
   }
 
-  $params['siteKey'] = md5(uniqid('', TRUE) . $params['baseURL']);
+  $params['siteKey'] = md5(rand() . mt_rand() . rand() . uniqid('', TRUE) . $params['baseURL']);
+  // Would prefer openssl_random_pseudo_bytes(), but I don't think it's universally available.
 
   $str = file_get_contents($tplPath . 'civicrm.settings.php.template');
   foreach ($params as $key => $value) {