Require "mcrypt" extension during install/upgrade [5.3.0-B1]
- Alex
Will be implemented as part of /wiki/spaces/BUG/pages/4358250 to keep related changes grouped.
In the INP-1188 - Getting issue details... STATUS a cookie encryption was introduced, which should have prevented an attacker from tampering with them.
The functionality makes use of functions from "mcrypt" extension of PHP, which by default are not available on every server. Without extension being present any attempt to use it's functions would end up in Fatal Error. Since we're using it for session cookie encryption no session can be established and user won't be able to login to Admin Console or Installation Wizard to fix things.
Solution
Require "mcrypt" extension to be present on the "System Requirements" step during In-Portal installation/upgrade.