2.1.27

Fix for #1919

changelog.md

@@ -9,6 +9,7 @@
  Configuration variables are not set in SESSION anymore. Now read from tp.config.php file.
  Fix: issue on offline export
  Fix: error on deleting a folder at root
+ #1919 Upgrade to release 2.1.27.8 converts encrypted database password back to clear-text
  #1915 Cannot Edit or Delete items in the Personal folder
  #1909 Roles Management - Problem with acess rights "Edit" "Delete"
  #1903 SSH Password Change does not work

install/upgrade_ajax.php

@@ -760,7 +760,7 @@ function tableExists($tablename)
 ### DATABASE connexion parameters ###
 \$server = \"".$server."\";
 \$user = \"".$user."\";
-\$pass = \"". str_replace("$", "\\$", $pass)."\";
+\$pass = \"".cryption($pass, "", "encrypt")['string']."\";
 \$database = \"".$database."\";
 \$port = ".$port.";
 \$pre = \"".$pre."\";

install/upgrade_run_2.1.27.php

@@ -711,21 +711,6 @@ function replace_a_line($data)
 fclose($file_handler);
 
 
-// Encrypt the database password
-if (substr($_SESSION['pass'], 0, 3) !== "def") {
-    $encrypted_text = cryption($pass, "", "encrypt")['string'];
-
-    $result = '';
-    $lines = file('../includes/config/settings.php');
-    foreach ($lines as $line) {
-        if (substr($line, 0, 9) === '$pass = "') {
-            $result .= '$pass = "'.$encrypted_text.'";'."\r\n";
-        } else {
-            $result .= $line;
-        }
-    }
-    file_put_contents('../includes/config/settings.php', $result);
-}
 
 // Finished
 echo '[{"finish":"1" , "next":"", "error":""}]';