Branch: refs/heads/QA_4_2 Home: https://github.com/phpmyadmin/phpmyadmin Commit: b252cb99812f33f76a27e596fa559a14c5a4b6e6 https://github.com/phpmyadmin/phpmyadmin/commit/b252cb99812f33f76a27e596fa55... Author: Michal Čihař <michal@cihar.com> Date: 2014-06-12 (Thu, 12 Jun 2014) Changed paths: M libraries/plugins/auth/AuthenticationCookie.class.php Log Message: ----------- Use better source of entropy for mcrypt IV Signed-off-by: Michal Čihař <michal@cihar.com> Commit: 7cba81de271d62bdf93ded7598709702a96f92d7 https://github.com/phpmyadmin/phpmyadmin/commit/7cba81de271d62bdf93ded759870... Author: Michal Čihař <michal@cihar.com> Date: 2014-06-12 (Thu, 12 Jun 2014) Changed paths: M ChangeLog M libraries/plugins/auth/AuthenticationCookie.class.php Log Message: ----------- Regenerate cookie encryption IV for every session The IV for cookie encryption was generated just once for every browser and kept in a cookie. Generating it for every session is much better to avoid information leaks (eg. that same user has logged in). Signed-off-by: Michal Čihař <michal@cihar.com> Compare: https://github.com/phpmyadmin/phpmyadmin/compare/59bb241cf13f...7cba81de271d