From 5deaeec6688a2f1813b101b3ac36d3e9ebdf798f Mon Sep 17 00:00:00 2001 From: Erik Fercak Date: Fri, 5 Jun 2015 07:27:31 -0700 Subject: [PATCH] Use a class constant instead of a hardcoded string Test Plan: Submitted a form - saw nothing out of ordinary. Reviewers: #blessed_reviewers Subscribers: epriestley Differential Revision: https://secure.phabricator.com/D13167 --- src/applications/people/storage/PhabricatorUser.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/applications/people/storage/PhabricatorUser.php b/src/applications/people/storage/PhabricatorUser.php index 523a18367d..e60f50650c 100644 --- a/src/applications/people/storage/PhabricatorUser.php +++ b/src/applications/people/storage/PhabricatorUser.php @@ -355,7 +355,8 @@ final class PhabricatorUser // discussion in T3684. $token = $this->getRawCSRFToken(); $hash = PhabricatorHash::digest($token, $salt); - return 'B@'.$salt.substr($hash, 0, self::CSRF_TOKEN_LENGTH); + return self::CSRF_BREACH_PREFIX.$salt.substr( + $hash, 0, self::CSRF_TOKEN_LENGTH); } public function validateCSRFToken($token) {