Hello!

Since visit tracking hash is based only on current timestamp, it can be easyly guessed.  We should use something more random to generate visit cookie hash, for example:

visit_key= sha.new(" ".join(str(time.time ()), str(random.random()), cherrypy.request.remoteAddr)).hexdigest()

Egor.

Reply via email to