Security issue with only generating link using only signed user pk#32

Open

dat-boris wants to merge 3 commits intobrutasse:masterfrom

dat-boris:master

Commits on Apr 15, 2015

Generating link both from user.pk and user.password to mitigate issue with permanent link exposed to gain access
dat-boris
committed
Tidy up password hashing call
dat-boris
committed
Use django hasher to avoid handling hashlib different across py27 and py33
dat-boris
committed