6 May
2013
6 May
'13
9:24 a.m.
Stefan Winter wrote:
If all these are met, a second decoding would be done, and be successful - except the user wouldn't be able to log in because the new decoded content would not match his password any more.
I guess I can live with that small chance, but... clean is something else. How about if you owe me a beer if that unlikely situation becomes true :-)
Arran fixed the "master" branch to use a more robust base64 encoder / decoder. So it won't happen there. There won't be any new development on the v2.2.x branch. We hope to release v3 soon. (As I've been saying for years) Alan DeKok.