From f08b210916d91afc38f663eeff70c0689e4c9362 Mon Sep 17 00:00:00 2001
From: Moritz Strohm <strohm@data-quest.de>
Date: Fri, 19 Jan 2024 14:17:11 +0000
Subject: [PATCH] UserManagement::deleteUser: use uniqid when generating an md5
hash from the username, fixes #3660
Closes #3660
Merge request studip/studip!2538
---
lib/classes/UserManagement.class.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/lib/classes/UserManagement.class.php b/lib/classes/UserManagement.class.php
index 6bd921067e2..620672c641f 100644
--- a/lib/classes/UserManagement.class.php
+++ b/lib/classes/UserManagement.class.php
@@ -1043,7 +1043,7 @@ class UserManagement
WHERE user_id = ?";
$statement = DBManager::get()->prepare($query);
$statement->execute([
- md5($this->user_data['auth_user_md5.username']),
+ md5($this->user_data['auth_user_md5.username'].uniqid('delete_user')),
$this->user_data['auth_user_md5.user_id']
]);
if ($statement->rowCount() > 0) {
--
GitLab