[Phpmyadmin-git] [phpmyadmin/phpmyadmin] 206405: Always use phpseclib for cookie encryption
Michal Čihař
michal at cihar.com
Thu Jun 12 10:40:33 CEST 2014
Branch: refs/heads/master
Home: https://github.com/phpmyadmin/phpmyadmin
Commit: 20640592f03239e11053d507c68e6093144f8bbc
https://github.com/phpmyadmin/phpmyadmin/commit/20640592f03239e11053d507c68e6093144f8bbc
Author: Michal Čihař <michal at cihar.com>
Date: 2014-06-12 (Thu, 12 Jun 2014)
Changed paths:
M libraries/plugins/auth/AuthenticationCookie.class.php
M test/classes/plugin/auth/PMA_AuthenticationCookie_test.php
Log Message:
-----------
Always use phpseclib for cookie encryption
- it provides fallback in case mcrypt is not found
- we now use AES in both mcrypt and PHP code case
- cleanup the code by removing mcrypt conditials
- rename some methods and cookies so that they don't refer to
implementation details
- switching encryption implementations no longer invalidates the
credentials
Signed-off-by: Michal Čihař <michal at cihar.com>
More information about the Git
mailing list