Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Warning

Will be implemented as part of /wiki/spaces/BUG/pages/4358250 to keep related changes grouped.

In the 

Jira Legacy
serverIn-Portal Issue TrackerSystem Jira
serverId126bf1dc513b375f-b5748291-35223313-8c149d9f-3dd94dfb9de1704c39b1f915
keyINP-1188
 a cookie encryption was introduced, which should have prevented an attacker from tampering with them.

The functionality makes use of functions from "mcrypt" extension of PHP, which by default are not available on every server. Without extension being present any attempt to use it's functions would end up in Fatal Error. Since we're using it for session cookie encryption no session can be established and user won't be able to login to Admin Console or Installation Wizard to fix things.

Solution

Require "mcrypt" extension to be present on the "System Requirements" step during In-Portal installation/upgrade.

Related Discussions

Related Tasks