4 ms·
This is an excellent write-up. In case anyone is concerned, this bears repeating: This attack broke CodeIgniter 2's poorly designed Encrypt class, but CodeIgni
by CiPHPerCoder 11y ago
This is an excellent write-up.
In case anyone is concerned, this bears repeating: This attack broke CodeIgniter 2's poorly designed Encrypt class, but CodeIgniter 3's Encryption class offers authenticated encryption.
If you're still using CodeIgniter 2, upgrade.
If you're using CodeIgniter 3, make sure you're not using Encrypt.
- woah 11y agoSounds like it might be safest not to use CodeIgniter.
- CiPHPerCoder 11y agoWhat tool to use is a decision that developers and companies have to make for themselves. I can't make it for them, so I usually don't try. Exception: Don't use mcrypt. It's abandonware.