Commits

Anonymous committed a7c50f6

fixes #1180 - added another random number to the get_new_session_key function to prevent early duplicates

Comments (0)

Files changed (1)

django/models/core.py

         # The random module is seeded when this Apache child is created.
         # Use person_id and SECRET_KEY as added salt.
         while 1:
-            session_key = md5.new(str(random.randint(0, sys.maxint - 1)) + SECRET_KEY).hexdigest()
+            session_key = md5.new(str(random.randint(0, sys.maxint - 1)) + str(random.randint(0, sys.maxint - 1)) + SECRET_KEY).hexdigest()
             try:
                 get_object(session_key__exact=session_key)
             except SessionDoesNotExist: