Page MenuHomePhabricator

D19812.diff
No OneTemporary

D19812.diff

diff --git a/src/applications/auth/engine/PhabricatorAuthSessionEngine.php b/src/applications/auth/engine/PhabricatorAuthSessionEngine.php
--- a/src/applications/auth/engine/PhabricatorAuthSessionEngine.php
+++ b/src/applications/auth/engine/PhabricatorAuthSessionEngine.php
@@ -127,12 +127,12 @@
u.*
%Q
FROM %T u JOIN %T s ON u.phid = s.userPHID
- AND s.type = %s AND s.sessionKey = %s %Q',
+ AND s.type = %s AND s.sessionKey = %P %Q',
$cache_selects,
$user_table->getTableName(),
$session_table->getTableName(),
$session_type,
- $session_key,
+ new PhutilOpaqueEnvelope($session_key),
$cache_joins);
if (!$info) {

File Metadata

Mime Type
text/plain
Expires
Sat, Mar 15, 9:13 AM (3 d, 22 h ago)
Storage Engine
blob
Storage Format
Encrypted (AES-256-CBC)
Storage Handle
7595173
Default Alt Text
D19812.diff (714 B)

Event Timeline