3 ms·

As usual, HN only cares about PHP when there's some FUD to spread. This is an old bug that was made public and fixed over a year ago [0]. [0] http://www.reddi

by adamors 13y ago

As usual, HN only cares about PHP when there's some FUD to spread. This is an old bug that was made public and fixed over a year ago [0]. [0] http://www.reddit.com/r/PHP/comments/2332gq/laravel_cookie_forgery_decryption_and_rce/cgsysne http://www.reddit.com/r/PHP/comments/2332gq/laravel_cookie_f...

krapp 13y ago
I didn't intend to spread FUD when I posted this - I wasn't aware the equality check was also fixed. I use Laravel in a lot of projects and only saw it posted elsewhere today. re the downvotes: fair enough I guess.
- ianhawes 13y ago
  Just curious but where did you see this? This was posted last week on /r/php and the Laravel creator stepped in and pointed out that it was patched awhile ago.
  - krapp 13y ago
    A php group on linkedin. Probably posted from /r/php but I haven't been there in a while.