61 Commits

Author SHA1 Message Date
Marco van 't Wout
b2cd43b19d Remove return type from docblock.
Fixes:
- base/CSecurityManager.php:528 PhanTypeMissingReturn Method \CSecurityManager::validateEncryptionKey is declared to return bool in phpdoc but has no return value
2023-09-27 16:27:51 +02:00
Arhell
6d26fae142 update unicode & others links 2022-08-11 02:23:44 +03:00
Arhell
8518f95605 update yii & php.net links 2022-08-09 00:11:49 +03:00
Arhell
fad0c5be77 update links 2022-08-07 11:54:16 +03:00
Alexander Makarov
ee5e22455c Silenced rest of mcrypt calls 2017-05-22 15:06:56 +03:00
Alexander Makarov
688678d344 Fixes #4155: ignore deprecation warnings for mcrypt under PHP 7.1 2017-05-22 14:56:40 +03:00
Alexander Makarov
7e45fa1a08 Fixes #2819: backported masking of CSRF tokens from Yii 2.0 2017-04-18 13:42:44 +03:00
Carsten Brandt
d6371e3de0 code style / review 2016-01-13 16:37:44 +01:00
Alexander Makarov
e92358fa54 Fixes #3979 2015-10-30 23:17:12 +03:00
Alexander Makarov
3221553481 Fixes #3704: Fixed CSecurityManager to work properly is case cryptAlgorithm specified as array 2015-02-09 10:09:55 +03:00
Dana Luther
c255d39d30 Fixes #3715: 1.1.16 CSecurityManager::legacyDecrypt was not compatible with 1.1.15 method 2015-01-24 20:11:22 +03:00
Carsten Brandt
e1bb8e079c Fixed . usage in Yii:t 2014-12-26 20:18:01 +01:00
Alexander Makarov
7a18f7e5ad Fixed placeholder names 2014-12-11 18:41:44 +03:00
Alexander Makarov
249c2569ef Changed variables usage in CSecurityManager messages to placeholders 2014-12-10 17:01:11 +03:00
Alexander Makarov
784941c8c6 Merge branch '1.1.16-branch'
Conflicts:
	CHANGELOG
	UPGRADE
	framework/YiiBase.php
	framework/yiilite.php
2014-12-10 00:52:08 +03:00
Alexander Makarov
290da9c5a8 Fixed accidental removal 2014-09-23 23:07:54 +04:00
Alexander Makarov
79973b0ce9 Updated changelog, upgrade, added option to disable keys validation, added back automatic key generation 2014-09-23 22:49:07 +04:00
Alexander Makarov
15fd679251 SecurityManager adjustments 2014-09-23 22:07:54 +04:00
Carsten Brandt
1e2fbd7a3b fixed crash when validating non string data
fixes #3087
2014-08-15 04:40:03 +02:00
resurtm
2978531454 Fix indentation for #2697. 2013-07-30 19:46:39 +06:00
tom--
48b0cc952e Nonsense removal 2013-07-28 11:15:39 -04:00
tom--
ddbc45c255 Detailed explanation of $cryptographicallyStrong param in generateRandomBytes(). 2013-07-28 11:05:26 -04:00
tom--
8894ed1509 mcrypt_create_iv() default is MCRYPT_DEV_RANDOM. generateRandomBytes() should use urandom. 2013-07-08 08:08:07 -04:00
tom--
6b35db2a7d Code style. Convert spaces to tabs. 2013-07-08 07:48:25 -04:00
tom--
e2398faa9c Chg #2053 Corrections for more coherent CSecurityManager::generateRandomBytes() see PR 2604 discussion, unit tests. 2013-07-07 16:37:27 -04:00
resurtm
cac8df8177 Fixes:
1. Blowfish salt should have "./0-9A-Za-z" alphabet and should be 21
characters long. Proper format is: $2a$nn$xxxxxxxxxxxxxxxxxxxxx$

See: http://us2.php.net/crypt

2. CS fixes.
2013-07-05 15:37:38 +06:00
resurtm
fbbe9ed72f Docblocks fixes and other minor adjustements made. 2013-07-05 14:46:28 +06:00
resurtm
4cd2d38a71 Minor CS fixes and @throws docblock clause added. 2013-07-05 10:17:49 +06:00
resurtm
683de0131d Non-blocking read from /dev/random is not supported by RedHat 6.*. 2013-07-05 10:14:04 +06:00
resurtm
d662ee84f3 CSecurityManager:
1. Added /dev/urandom usage.
2. A couple of minor code optimizations.
2013-07-05 10:09:04 +06:00
resurtm
9cd40000d9 Fixes #2053:
1. CPasswordHelper has been refactored.

2. CSecurityManager has been enhanced and now able to generate
cryptographically strong random stuff.
2013-07-04 20:39:14 +06:00
Maurizio Domba (mdwork)
ec7c9100ef doc fix 2013-03-25 10:57:33 +01:00
resurtm
f1fbb48897 Reverted change of the deprecated property's PHPDoc (made in PR #2249). 2013-03-25 15:00:55 +06:00
resurtm
99bd5e2d06 PHPDoc of the CSecurityManager::computeHMAC() has been enhanced. 2013-03-23 10:50:42 +06:00
resurtm
9d9d729ef3 Fixes #1142. CSecurityManager::computeHMAC() now has public accessor. 2013-03-22 23:55:53 +06:00
borales
6d19a150d4 Replacing spaces with tabs, removing dots
[ci skip]
2013-03-06 20:59:38 +02:00
borales
2f68a75235 Replacing spaces with tabs
[ci skip]
2013-03-06 08:48:59 +02:00
borales
07975cad64 Fixing spaces
[ci skip]
2013-03-06 01:06:46 +02:00
borales
a7af2c5371 Fixing some typos, PHPDocs
[ci skip]
2013-03-06 00:24:35 +02:00
Abdul Malik Ikhsan
6247adaf26 change copyright symbol 2013-01-15 18:38:02 +07:00
Abdul Malik Ikhsan
46c8ef0d9a update copyright year
from 2011 to 2013
2013-01-15 17:28:17 +07:00
Alexander Makarov
d865a3bab8 Fixes #1057 Removed SVN ids 2012-09-09 22:23:45 +04:00
Leo R. Lundgren
7a194496a5 Fix a bunch of @param and @return phpdoc errors in various files. 2012-08-03 16:17:58 +02:00
mdomba
5398fff916 added docs 2012-02-09 10:29:44 +00:00
keyboard.idol@gmail.com
acf6d62e97 (Fixes issue 3101) 2012-01-22 12:29:18 +00:00
alexander.makarow
646cbb2b9a Documented component accessors with @property for significantly better IDE autocomplete 2011-10-25 00:01:09 +00:00
alexander.makarow
e7b6883ebb PhpDoc corrections 2011-05-05 21:36:32 +00:00
alexander.makarow
2ab981b454 reverted method chaining support 2011-02-24 16:42:44 +00:00
alexander.makarow
75041e8620 Chained calls are now possible for most framework class setters and methods not returning a value 2011-02-23 20:20:28 +00:00
qiang.xue
4be0af6917 changed copyright year. 2011-01-01 19:31:13 +00:00