Fix User/CreatePassword page

Author: carlbennett

src/controllers/User/CreatePassword.php

@@ -5,6 +5,7 @@
 use \BNETDocs\Libraries\User;
 use \BNETDocs\Models\User\CreatePassword as UserCreatePasswordModel;
 
+use \CarlBennett\MVC\Libraries\Common;
 use \CarlBennett\MVC\Libraries\Controller;
 use \CarlBennett\MVC\Libraries\Router;
 use \CarlBennett\MVC\Libraries\View;
@@ -31,7 +32,14 @@ private static function transform($input) {
     $hash = null;
     $salt = null;
 
-    User::createPassword( $input, $hash, $salt );
+    $pepper = Common::$config->bnetdocs->user_password_pepper;
+
+    $gmp  = gmp_init(time());
+    $gmp  = gmp_mul($gmp, mt_rand());
+    $gmp  = gmp_mul($gmp, gmp_random_bits(64));
+    $salt = strtoupper(gmp_strval($gmp, 36));
+
+    $hash = strtoupper(hash('sha256', $input.$salt.$pepper));
 
     return [ $hash, $salt ];
   }