[Phpmyadmin-git] [phpmyadmin/phpmyadmin] 206405: Always use phpseclib for cookie encryption

Michal Čihař michal at cihar.com
Thu Jun 12 10:40:33 CEST 2014


  Branch: refs/heads/master
  Home:   https://github.com/phpmyadmin/phpmyadmin
  Commit: 20640592f03239e11053d507c68e6093144f8bbc
      https://github.com/phpmyadmin/phpmyadmin/commit/20640592f03239e11053d507c68e6093144f8bbc
  Author: Michal Čihař <michal at cihar.com>
  Date:   2014-06-12 (Thu, 12 Jun 2014)

  Changed paths:
    M libraries/plugins/auth/AuthenticationCookie.class.php
    M test/classes/plugin/auth/PMA_AuthenticationCookie_test.php

  Log Message:
  -----------
  Always use phpseclib for cookie encryption

- it provides fallback in case mcrypt is not found
- we now use AES in both mcrypt and PHP code case
- cleanup the code by removing mcrypt conditials
- rename some methods and cookies so that they don't refer to
  implementation details
- switching encryption implementations no longer invalidates the
  credentials

Signed-off-by: Michal Čihař <michal at cihar.com>




More information about the Git mailing list