only use digits and letters as hash

1 files changed, 5 insertions, 1 deletions

diff --git a/controller/pagecontroller.php b/controller/pagecontroller.php
index 70866624..4f9ed762 100644
--- a/controller/pagecontroller.php
+++ b/controller/pagecontroller.php
@@ -31,6 +31,7 @@ use \OCP\IAvatarManager;
 use \OCP\ILogger;
 use \OCP\IRequest;
 use \OCP\IURLGenerator;
+use OCP\Security\ISecureRandom;
 use \OCP\AppFramework\Http\TemplateResponse;
 use \OCP\AppFramework\Http\RedirectResponse;
 use \OCP\AppFramework\Controller;
@@ -264,7 +265,10 @@ class PageController extends Controller {
         $event->setDescription(htmlspecialchars($pollDesc));
         $event->setOwner($userId);
         $event->setCreated(date('Y-m-d H:i:s'));
-        $event->setHash(\OC::$server->getSecureRandom()->getMediumStrengthGenerator()->generate(16));
+        $event->setHash(\OC::$server->getSecureRandom()->getMediumStrengthGenerator()->generate(16,
+			ISecureRandom::CHAR_DIGITS.
+			ISecureRandom::CHAR_LOWER.
+			ISecureRandom::CHAR_UPPER));
 
         $accessValues = json_decode($accessValues);
         $groups = $accessValues->groups;