Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

request #9942: Userlog plugin stores session token in clear

Download Browse

The session_hash value is not stored anymore by the userlog plugin Change-Id: I23ab33b0bb34c5136852e929a93a1c3f9e287f93

+62 −25
Thomas Gerbet (tgerbet) 2017-02-08 16:38
Thomas Gerbet (tgerbet) 2017-02-08 16:38
adef03bbc7e39f2bef42988b88b1df36134de108
ec577a93cb02eebc593700be450602a29f8bf929
git #tuleap/stable/adef03bbc7e39f2bef42988b88b1df36134de108

Modified Files

Side by side diff
Inline diff
Name
M plugins/userlog/db/install.sql +0 −1 Go to diff View file
A plugins/userlog/db/mysql/2017/20170208_remove_session_hash_field_userlog_request.php +43 −0 Go to diff View file
M plugins/userlog/include/UserLogDao.class.php +7 −10 Go to diff View file
M plugins/userlog/include/UserLogManager.class.php +8 −7 Go to diff View file
M plugins/userlog/include/userlogPlugin.class.php +4 −7 Go to diff View file