Merge pull request #493 from phpList/phplist4-restapi

Save secret in db for phpList4

Author: Sam Tuke

public_html/lists/admin/initialise.php

@@ -191,6 +191,7 @@ function output($message)
     SaveConfig('message_from_address', $adminemail);
     SaveConfig('message_from_name', strip_tags($_REQUEST['adminname']));
     SaveConfig('message_replyto_address', $adminemail);
+    SaveConfig('secret', bin2hex(random_bytes(20)));
     SaveConfig('lastcheckupdate', date('m/d/Y h:i:s', time()), 0, true);
 
     if (!empty($_REQUEST['orgname'])) {
@@ -248,4 +249,4 @@ function output($message)
             s('Upgrade')).' '.s('instead?').'</li>
     <li>' .PageLinkButton('initialise', s('Force Initialisation'),
             'force=yes').' '.s('(will erase all data!)').' '."</li></ul></div>\n";
-}
+}

public_html/lists/admin/upgrade.php

@@ -369,13 +369,16 @@ function output($message)
     if (version_compare($dbversion, '3.3.3','<')) {
         // add a draft campaign for invite plugin
         addInviteCampaign();
-
     }
 
     if (version_compare($dbversion, '3.3.4','<')) {
         Sql_Query("alter table {$GLOBALS['tables']['bounce']} modify data mediumblob ");
     }
 
+    if (version_compare($dbversion, '3.4.0-RC1','<')) {
+        SaveConfig('secret', bin2hex(random_bytes(20)));
+    }
+
     //# longblobs are better at mixing character encoding. We don't know the encoding of anything we may want to store in cache
     //# before converting, it's quickest to clear the cache
     clearPageCache();