add a salt. using user.id since that's handy.

This commit is contained in:
Victor Shnayder
2012-11-19 11:34:31 -05:00
parent 71b585bb61
commit d1eec9bcf4

View File

@@ -201,9 +201,10 @@ def unique_id_for_user(user):
Currently happens to be implemented as a sha1 hash of the username
(and thus assumes that usernames don't change).
"""
return sha1(user.username).hexdigest()
# Using the user id as the salt because it's sort of random, and is already
# in the db.
salt = str(user.id)
return sha1(salt + user.username).hexdigest()
## TODO: Should be renamed to generic UserGroup, and possibly