[Security] Replace timestamp-based password generation with random generator (#3571)

* Update x-ui.sh

* Update x-ui.sh

* Update x-ui.sh

* Update x-ui.sh
This commit is contained in:
JieXu 2025-10-02 00:37:31 +08:00 committed by GitHub
parent b65ec83c39
commit 90c3529301
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -189,9 +189,9 @@ reset_user() {
fi
read -rp "Please set the login username [default is a random username]: " config_account
[[ -z $config_account ]] && config_account=$(date +%s%N | md5sum | cut -c 1-8)
[[ -z $config_account ]] && config_account=$(gen_random_string 10)
read -rp "Please set the login password [default is a random password]: " config_password
[[ -z $config_password ]] && config_password=$(date +%s%N | md5sum | cut -c 1-8)
[[ -z $config_password ]] && config_password=$(gen_random_string 18)
read -rp "Do you want to disable currently configured two-factor authentication? (y/n): " twoFactorConfirm
if [[ $twoFactorConfirm != "y" && $twoFactorConfirm != "Y" ]]; then