This is a feature request but also a bug on some systems.

On a fancy nginx infrastructure Bakery's cookies were getting lost after some requests. Lost or just unvalidated, unfortunately the exact fault was never found. But, base64 encoding the cookie value before it was sent and decoding before decrypting has fixed the problem.

Based on PHP comments about mcrypt it seems a good idea that this get into Bakery.

I'll provide this for 6.x-2.x and 7.x-2.x.

Comments

coltrane’s picture

Status: Active » Needs review
StatusFileSize
new586 bytes
new586 bytes
greggles’s picture

Instead of "fault protection" how about "Base64 encode the encrypted text because the result may contain characters that are not stored consistently in cookies."

greggles’s picture

Otherwise, looks great to me.

coltrane’s picture

coltrane’s picture

Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

Anonymous’s picture

Issue summary: View changes

tomato/tomato