Browse Source
Fix microtime() usage
By default, microtime() returns a string :-/ which unsurprisingly causes
a warning when doing math on it.
pull/116/head
Christian Boltz
9 years ago
No known key found for this signature in database
GPG Key ID: C6A682EA63C82F1C
1 changed files with
2 additions and
2 deletions
-
users/password-recover.php
|
|
|
@ -56,7 +56,7 @@ function sendCodebySMS($to, $username, $code) { |
|
|
|
} |
|
|
|
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === "POST") { |
|
|
|
$start_time = microtime(); |
|
|
|
$start_time = microtime(true); |
|
|
|
$tUsername = escape_string (safepost('fUsername')); |
|
|
|
$handler = $context === 'admin' ? new AdminHandler : new MailboxHandler; |
|
|
|
$token = $handler->getPasswordRecoveryCode($tUsername); |
|
|
|
@ -84,7 +84,7 @@ if ($_SERVER['REQUEST_METHOD'] === "POST") { |
|
|
|
} |
|
|
|
|
|
|
|
// throttle password reset requests to prevent brute force attack
|
|
|
|
$elapsed_time = microtime() - $start_time; |
|
|
|
$elapsed_time = microtime(true) - $start_time; |
|
|
|
if ($elapsed_time < 2 * pow(10, 6)) { |
|
|
|
usleep(2 * pow(10, 6) - $elapsed_time); |
|
|
|
} |
|
|
|
|
