Use a better random string

diff --git a/plugins/file-upload.php b/plugins/file-upload.php
index af352673139106103d07b15f3ea0581ad0f4eb00..6c40f624dca019da020566286e2ec4699c22811b 100644 (file)
--- a/plugins/file-upload.php
+++ b/plugins/file-upload.php
@@ -36,7 +36,7 @@ class AdminerFileUpload {
                                return false;
                        }
                        //! unlink old
-                       $filename = uniqid() . $regs2[0];
+                       $filename = (function_exists('random_bytes') ? bin2hex(random_bytes(8)) : uniqid("", true)) . $regs2[0];
                        if (!move_uploaded_file($_FILES[$name]["tmp_name"], "$this->uploadPath$table/$regs[1]-$filename")) {
                                return false;
                        }