The IV for cookie encryption was generated just once for every browser and kept in a cookie. Generating it for every session is much better to avoid information leaks (eg. that same user has logged in). Signed-off-by: Michal Čihař <michal@cihar.com> |
||
|---|---|---|
| .. | ||
| auth | ||
| export | ||
| import | ||
| transformations | ||
| AuthenticationPlugin.class.php | ||
| ExportPlugin.class.php | ||
| ImportPlugin.class.php | ||
| PluginManager.class.php | ||
| PluginObserver.class.php | ||
| TransformationsInterface.int.php | ||
| TransformationsPlugin.class.php | ||
| UploadInterface.int.php | ||