[buddypress-trac] [BuddyPress] #2455: bb-config creator should use single quotes for salt strings
buddypress-trac at lists.automattic.com
buddypress-trac at lists.automattic.com
Wed Jun 23 00:45:20 UTC 2010
#2455: bb-config creator should use single quotes for salt strings
----------------------------+-----------------------------------------------
Reporter: francescolaffi | Owner:
Type: defect | Status: new
Priority: normal | Milestone: 1.2.5
Component: Forums | Keywords: dev-feedback has-patch
----------------------------+-----------------------------------------------
right now it writes the bb-config file with salts in double quotes, that
is bad because salts are random strings and can have $ in them, so they
should not be interpreted
i.e. from my local testing installation
{{{
define('BB_AUTH_SALT', "^Dola{t1!k,RaEnLXq$h[C?b}.)~6YWl
]#(d|j+99IZZYhLPmQ:M%UGn_V8-8}@");
}}}
and I get a {{{PHP Parse error: syntax error, unexpected '?', expecting
']'}}} because of the {{{$h[C?}}} in the salt
attached diff fix it in 1.2 branch but the same solution is valid in
trunk, it only changes change double quotes to single quotes around not to
be interpreted strings
--
Ticket URL: <http://trac.buddypress.org/ticket/2455>
BuddyPress <http://buddypress.org/>
BuddyPress
More information about the buddypress-trac
mailing list