mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-09-08 10:41:25 +02:00
Session is not initialized by the time we need to use the setting in DB::connect(). Cookie values get initialized automatically for each request. Tightened name format validation to ensure it can only be used for temporary databases, rather than switching the browser session to a different production database. Encrypting token for secure cookie usage. Added dev/generatesecuretoken to generate this token. Not storing in YML config directly because of web access issues.
450 B
450 B
3.0.4
Overview
- Changed
dev/tests/setdb
anddev/tests/startsession
from session to cookie storage.
Upgrading
- If you are using
dev/tests/setdb
anddev/tests/startsession
, you'll need to configure a secure token in order to encrypt the cookie value: Simply runsake dev/generatesecuretoken
and add the resulting code to yourmysite/_config.php
. Note that this functionality now requires the PHPmcrypt
extension.