{"action":"created","issue":{"url":"https://api.github.com/repos/yiisoft/yii2/issues/8580","labels_url":"https://api.github.com/repos/yiisoft/yii2/issues/8580/labels{/name}","comments_url":"https://api.github.com/repos/yiisoft/yii2/issues/8580/comments","events_url":"https://api.github.com/repos/yiisoft/yii2/issues/8580/events","html_url":"https://github.com/yiisoft/yii2/pull/8580","id":81567063,"number":8580,"title":"Fixes #8537 - Cookie reuse attack","user":{"login":"kidol","id":440902,"avatar_url":"https://avatars.githubusercontent.com/u/440902?v=3","gravatar_id":"","url":"https://api.github.com/users/kidol","html_url":"https://github.com/kidol","followers_url":"https://api.github.com/users/kidol/followers","following_url":"https://api.github.com/users/kidol/following{/other_user}","gists_url":"https://api.github.com/users/kidol/gists{/gist_id}","starred_url":"https://api.github.com/users/kidol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kidol/subscriptions","organizations_url":"https://api.github.com/users/kidol/orgs","repos_url":"https://api.github.com/users/kidol/repos","events_url":"https://api.github.com/users/kidol/events{/privacy}","received_events_url":"https://api.github.com/users/kidol/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/yiisoft/yii2/labels/type:enhancement","name":"type:enhancement","color":"d7e102"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/yiisoft/yii2/milestones/9","html_url":"https://github.com/yiisoft/yii2/milestones/2.0.x","labels_url":"https://api.github.com/repos/yiisoft/yii2/milestones/9/labels","id":831720,"number":9,"title":"2.0.x","description":"","creator":{"login":"cebe","id":189796,"avatar_url":"https://avatars.githubusercontent.com/u/189796?v=3","gravatar_id":"","url":"https://api.github.com/users/cebe","html_url":"https://github.com/cebe","followers_url":"https://api.github.com/users/cebe/followers","following_url":"https://api.github.com/users/cebe/following{/other_user}","gists_url":"https://api.github.com/users/cebe/gists{/gist_id}","starred_url":"https://api.github.com/users/cebe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cebe/subscriptions","organizations_url":"https://api.github.com/users/cebe/orgs","repos_url":"https://api.github.com/users/cebe/repos","events_url":"https://api.github.com/users/cebe/events{/privacy}","received_events_url":"https://api.github.com/users/cebe/received_events","type":"User","site_admin":false},"open_issues":346,"closed_issues":1,"state":"open","created_at":"2014-10-19T13:49:45Z","updated_at":"2015-05-27T22:11:27Z","due_on":null,"closed_at":null},"comments":2,"created_at":"2015-05-27T18:28:20Z","updated_at":"2015-05-27T22:11:53Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/yiisoft/yii2/pulls/8580","html_url":"https://github.com/yiisoft/yii2/pull/8580","diff_url":"https://github.com/yiisoft/yii2/pull/8580.diff","patch_url":"https://github.com/yiisoft/yii2/pull/8580.patch"},"body":"Added integer support to $autoRenewCookie as well (since we can now check by timestamp). Yii by default sends the cookie on **every** request when $autoRenewCookie is set to true. No need for that. See doc comments for details."},"comment":{"url":"https://api.github.com/repos/yiisoft/yii2/issues/comments/106094519","html_url":"https://github.com/yiisoft/yii2/pull/8580#issuecomment-106094519","issue_url":"https://api.github.com/repos/yiisoft/yii2/issues/8580","id":106094519,"user":{"login":"ali-alamine","id":8051575,"avatar_url":"https://avatars.githubusercontent.com/u/8051575?v=3","gravatar_id":"","url":"https://api.github.com/users/ali-alamine","html_url":"https://github.com/ali-alamine","followers_url":"https://api.github.com/users/ali-alamine/followers","following_url":"https://api.github.com/users/ali-alamine/following{/other_user}","gists_url":"https://api.github.com/users/ali-alamine/gists{/gist_id}","starred_url":"https://api.github.com/users/ali-alamine/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ali-alamine/subscriptions","organizations_url":"https://api.github.com/users/ali-alamine/orgs","repos_url":"https://api.github.com/users/ali-alamine/repos","events_url":"https://api.github.com/users/ali-alamine/events{/privacy}","received_events_url":"https://api.github.com/users/ali-alamine/received_events","type":"User","site_admin":false},"created_at":"2015-05-27T22:11:53Z","updated_at":"2015-05-27T22:11:53Z","body":"Since the timestamp is saved in the cookie, this solution won't work because cookies are saved as plain text, hense they can be easily tampered with."}}