bivashy/Blitz-Proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(add_user): replace password generation method with secrets module

Browse Source
This commit is contained in:
ReturnFI
2025-12-12 09:15:14 +00:00
parent 142c791b73
commit 889b48e4bd
1 changed files with 4 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
core/scripts/hysteria2/add_user.py
View File

@ -3,8 +3,9 @@
import init_paths import init_paths
import sys import sys
import os import os
import subprocess
import re import re
import secrets
import string
from datetime import datetime from datetime import datetime
from db.database import db from db.database import db
@ -27,15 +28,8 @@ def add_user(username, traffic_gb, expiration_days, password=None, unlimited_use
username_lower = username.lower() username_lower = username.lower()
if not password: if not password:
try: alphabet = string.ascii_letters + string.digits
password_process = subprocess.run(['pwgen', '-s', '32', '1'], capture_output=True, text=True, check=True) password = ''.join(secrets.choice(alphabet) for _ in range(32))
password = password_process.stdout.strip()
except FileNotFoundError:
try:
password = subprocess.check_output(['cat', '/proc/sys/kernel/random/uuid'], text=True).strip()
except Exception:
print("Error: Failed to generate password. Please install 'pwgen' or ensure /proc access.")
return 1
if not re.match(r"^[a-zA-Z0-9_]+$", username): if not re.match(r"^[a-zA-Z0-9_]+$", username):
print("Error: Username can only contain letters, numbers, and underscores.") print("Error: Username can only contain letters, numbers, and underscores.")