Post by ADD Creative » Mon May 06, 2019 3:44 am

The pull request on GitHub will work and remove the PHP Warning about the Initialization Vector. However, it should be noted that in does not have any message authentication. So would more be susceptible to some types attacks.

Also the Initialization Vector could be used more than once.
Last edited by ADD Creative on Mon May 06, 2019 6:51 am, edited 1 time in total.

www.add-creative.co.uk


Expert Member

Posts

Joined
Sat Jan 14, 2012 1:02 am
Location - United Kingdom

Post by straightlight » Mon May 06, 2019 3:54 am

"It is obvious that this contest cannot be decided by our knowledge of the Force… but by our skills with a ... light-sodium!"

https://github.com/opencart/opencart/pu ... -489457948

Post addressed due to authentication method missing to return an event message.

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by ADD Creative » Mon May 06, 2019 6:50 am

I've also noticed the pull request on GitHub could use the IV multiple times. An IV should only be used once.

www.add-creative.co.uk


Expert Member

Posts

Joined
Sat Jan 14, 2012 1:02 am
Location - United Kingdom

Post by straightlight » Mon May 06, 2019 9:04 am

Correct, I've noticed it as well. With the sodium solution, let's see if that reduces the indicent requests.

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by alexmorco » Thu Sep 03, 2020 5:12 am

Best is using Opencart on managed hosting where they support PHP 7.0 and above versions, I am using OpenCart on Cloudways and Its currently running on PHP 7.

Newbie

Posts

Joined
Wed Jan 31, 2018 6:43 pm

Post by IP_CAM » Thu Sep 03, 2020 7:14 am

On some Servers, the PHP v.7.x version can be selected in the .htaccess File,
by adding one of the Lines, shown below, atop of the .htaccess file,
to then be 'linked' with the PHP (Sub-)Version, the Hoster has chosen for that Version: ;)

Code: Select all

AddHandler application/x-httpd-php71 .php

Code: Select all

AddHandler application/x-httpd-php72 .php

Code: Select all

AddHandler application/x-httpd-php73 .php

Code: Select all

AddHandler application/x-httpd-php74 .php

Code: Select all

#@__HCP_END__@#

This above is my .htaccess Line Number 2 after the one selected above.
Ask your Hoster, if and how this is beeing 'handled' for your Site(s) :D
Ernie

My Github OC Site: https://github.com/IP-CAM
5'200 + FREE OC Extensions, on the World's largest private Github OC Repository Archive Site.


User avatar
Legendary Member

Posts

Joined
Tue Mar 04, 2014 1:37 am
Location - Switzerland
Who is online

Users browsing this forum: No registered users and 62 guests