Use a more random source...

1 files changed, 1 insertions, 1 deletions

diff --git a/lib/setup.php b/lib/setup.php
index 97656fd50f2..e6c52a8266d 100644
--- a/lib/setup.php
+++ b/lib/setup.php
@@ -199,7 +199,7 @@ class OC_Setup {
 					//add prefix to the postgresql user name to prevent collisions
 					$dbusername='oc_'.$username;
 					//create a new password so we don't need to store the admin config in the config file
-					$dbpassword=md5(time());
+					$dbpassword=md5(OC_Util::generate_random_bytes(30));
 
 					self::pg_createDBUser($dbusername, $dbpassword, $connection);