diff options
Diffstat (limited to 'user_guide')
| -rw-r--r-- | user_guide/changelog.html | 5 | ||||
| -rw-r--r-- | user_guide/libraries/sessions.html | 3 |
2 files changed, 7 insertions, 1 deletions
diff --git a/user_guide/changelog.html b/user_guide/changelog.html index 48d4309a5..d9c17ab76 100644 --- a/user_guide/changelog.html +++ b/user_guide/changelog.html @@ -98,7 +98,8 @@ Hg Tag: </p> <li>Changed <kbd>do_xss_clean()</kbd> to return FALSE if the uploaded file fails XSS checks.</li> <li>Added stripslashes() and trim()ing of double quotes from $_FILES type value to standardize input in Upload library.</li> <li>Added a second parameter (boolean) to <kbd>$this->zip->read_dir('/path/to/directory', FALSE)</kbd> to remove the preceding trail of empty folders when creating a Zip archive. This example would contain a zip with "directory" and all of its contents.</li> - <li>Added ability in the Image Library to handle PNG transparency for resize operations when using the GD lib.</p> + <li>Added ability in the Image Library to handle PNG transparency for resize operations when using the GD lib.</li> + <li>Modified the Session class to prevent use if no encryption key is set in the config file.</li> </ul> </li> <li>Database @@ -110,6 +111,7 @@ Hg Tag: </p> <li>Semantic change to db->version() function to allow a list of exceptions for databases with functions to return version string instead of specially formed SQL queries. Currently this list only includes Oracle and SQLite.</li> <li>Fixed a bug where driver specific table identifier protection could lead to malformed queries in the <kbd>field_data()</kbd> functions.</li> <li>Fixed a bug where an undefined class variable was referenced in database drivers.</li> + <li>Modified the database errors to show the filename and line number of the problematic query.</li> <li>Removed the following deprecated functions: orwhere, orlike, groupby, orhaving, orderby, getwhere.</li> <li>Removed deprecated _drop_database() and _create_database() functions from the db utility drivers.</li> </ul> @@ -175,6 +177,7 @@ Hg Tag: </p> <li>Fixed a bug where extending the Controller class would result in a fatal PHP error.</li> <li>Fixed a PHP Strict Standards Error in the index.php file.</li> <li>Fixed a bug where getimagesize() was being needlessly checked on non-image files in is_allowed_type().</li> + <li>Fixed a bug in the Encryption library where an empty key was not triggering an error.</li> </ul> <h2>Version 1.7.2</h2> diff --git a/user_guide/libraries/sessions.html b/user_guide/libraries/sessions.html index 9a2ca939c..a8e3b3496 100644 --- a/user_guide/libraries/sessions.html +++ b/user_guide/libraries/sessions.html @@ -68,6 +68,9 @@ use the database option you'll need to create the session table as indicated bel <p class="important"><strong>Note:</strong> The Session class does <strong>not</strong> utilize native PHP sessions. It generates its own session data, offering more flexibility for developers.</p> +<p class="important"><strong>Note:</strong> Even if you are not using encrypted sessions, you must set +an <a href="./encryption.html">encryption key</a> in your config file which is used to aid in preventing session data manipulation.</p> + <h2>Initializing a Session</h2> <p>Sessions will typically run globally with each page load, so the session class must either be |