mirror of
https://github.com/nextcloud/server.git
synced 2026-06-29 12:24:50 +02:00
93a6ed3dab
instanceid is generated by uniqid() and then used as the session_name. Because session_name requires at least one letter and uniqid() does not guarantee to provide that, in the case that uniqid() generates a string of only digits, the user will be stuck in an infinite login loop because every request will generate a new PHP session.