phpgroupware-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Phpgroupware-cvs] [19015] Fix a missing key


From: Caeies
Subject: [Phpgroupware-cvs] [19015] Fix a missing key
Date: Wed, 10 Dec 2008 17:32:14 +0000

Revision: 19015
          
http://svn.sv.gnu.org/viewvc/?view=rev&root=phpgroupware&revision=19015
Author:   Caeies
Date:     2008-12-10 17:32:14 +0000 (Wed, 10 Dec 2008)

Log Message:
-----------
Fix a missing key

Modified Paths:
--------------
    core/trunk/setup/accounts.php

Modified: core/trunk/setup/accounts.php
===================================================================
--- core/trunk/setup/accounts.php       2008-12-10 17:16:02 UTC (rev 19014)
+++ core/trunk/setup/accounts.php       2008-12-10 17:32:14 UTC (rev 19015)
@@ -189,6 +189,7 @@
                                . " WHERE config_name LIKE 'ldap%' OR 
config_name LIKE '%_id'"
                                        . " OR config_name = 
'account_repository'"
                                        . " OR config_name = 'auth_type'"
+                                       . " OR config_name = 'encryptkey'"
                                        . " OR config_name = 'encryption_type'";
 
                $GLOBALS['phpgw_setup']->db->query($sql, __LINE__, __FILE__);
@@ -196,7 +197,7 @@
                {
                        $GLOBALS['phpgw_info']['server'][$db->f('config_name', 
true)] = $db->f('config_value', true);
                }
-               
+
                $GLOBALS['phpgw'] = new phpgw;
                $GLOBALS['phpgw']->db       =& $db;
                $GLOBALS['phpgw']->acl          = CreateObject('phpgwapi.acl');
@@ -208,7 +209,6 @@
                //XXX Dec 08. Caeies : the resulting cached string will not be 
able to be decoded ... hope this don't broke to much thing.
                //XXX Dec 08. Caeies : btw it's potentially risky not to 
encrypt the session files since the admin password is stored in clear in the 
cache file. no idea for shm.
                $GLOBALS['phpgw']->crypto->init(array(md5(session_id() . 
$GLOBALS['phpgw_info']['server']['encryptkey']), 
$GLOBALS['phpgw_info']['server']['mcrypt_iv']));
-               
 
                /* Posted admin data */
                // We need to reverse the entities or the password can be 
mangled






reply via email to

[Prev in Thread] Current Thread [Next in Thread]