{"action":"created","issue":{"url":"https://api.github.com/repos/yiisoft/yii/issues/3694","labels_url":"https://api.github.com/repos/yiisoft/yii/issues/3694/labels{/name}","comments_url":"https://api.github.com/repos/yiisoft/yii/issues/3694/comments","events_url":"https://api.github.com/repos/yiisoft/yii/issues/3694/events","html_url":"https://github.com/yiisoft/yii/issues/3694","id":53383600,"number":3694,"title":"Non-BC change on 1.1.16 (CSecurityManager encrypt/decrypt)","user":{"login":"pmoust","id":2493339,"avatar_url":"https://avatars.githubusercontent.com/u/2493339?v=3","gravatar_id":"","url":"https://api.github.com/users/pmoust","html_url":"https://github.com/pmoust","followers_url":"https://api.github.com/users/pmoust/followers","following_url":"https://api.github.com/users/pmoust/following{/other_user}","gists_url":"https://api.github.com/users/pmoust/gists{/gist_id}","starred_url":"https://api.github.com/users/pmoust/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmoust/subscriptions","organizations_url":"https://api.github.com/users/pmoust/orgs","repos_url":"https://api.github.com/users/pmoust/repos","events_url":"https://api.github.com/users/pmoust/events{/privacy}","received_events_url":"https://api.github.com/users/pmoust/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/yiisoft/yii/labels/severity%3Aimportant","name":"severity:important","color":"eb6420"},{"url":"https://api.github.com/repos/yiisoft/yii/labels/status%3Ato+be+verified","name":"status:to be verified","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/yiisoft/yii/milestones/9","labels_url":"https://api.github.com/repos/yiisoft/yii/milestones/9/labels","id":399649,"number":9,"title":"1.1.17","description":"","creator":{"login":"samdark","id":47294,"avatar_url":"https://avatars.githubusercontent.com/u/47294?v=3","gravatar_id":"","url":"https://api.github.com/users/samdark","html_url":"https://github.com/samdark","followers_url":"https://api.github.com/users/samdark/followers","following_url":"https://api.github.com/users/samdark/following{/other_user}","gists_url":"https://api.github.com/users/samdark/gists{/gist_id}","starred_url":"https://api.github.com/users/samdark/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/samdark/subscriptions","organizations_url":"https://api.github.com/users/samdark/orgs","repos_url":"https://api.github.com/users/samdark/repos","events_url":"https://api.github.com/users/samdark/events{/privacy}","received_events_url":"https://api.github.com/users/samdark/received_events","type":"User","site_admin":false},"open_issues":174,"closed_issues":5,"state":"open","created_at":"2013-08-12T10:14:01Z","updated_at":"2015-01-07T17:27:20Z","due_on":null,"closed_at":null},"comments":6,"created_at":"2015-01-05T10:41:46Z","updated_at":"2015-01-09T15:26:32Z","closed_at":null,"body":"Stated in the UPGRADE instructions;\r\n\r\n```\r\n- The implementation of `CSecurityManager::encrypt()` and `decrypt()`\r\nwere changed to be more secure.\r\n  The old implementations were renamed as `legacyEncrypt()` and\r\n`legacyDecrypt()`. If you use these methods to encrypt\r\n  your data, you should either call legacy versions now to avoid code\r\nbreak or take the following steps to use the new\r\n  version (which we highly recommend):\r\n\r\n  1. Decrypt existing data that were encrypted using `legacyDecrypt()`.\r\n  2. Change key via application config (encryptionKey property of\r\nsecurityManager component) to the one that conforms\r\n     to recommendations.\r\n  3. Encrypt the data using `legacyEncrypt()`.\r\n\r\n  You can disable key validation by setting validateEncryptionKey\r\nproperty of securityManager component to false but\r\n  if it strongly not recommended.\r\n```\r\n\r\n`legacyEncrypt()` is nowhere upstream. "},"comment":{"url":"https://api.github.com/repos/yiisoft/yii/issues/comments/69348469","html_url":"https://github.com/yiisoft/yii/issues/3694#issuecomment-69348469","issue_url":"https://api.github.com/repos/yiisoft/yii/issues/3694","id":69348469,"user":{"login":"pmoust","id":2493339,"avatar_url":"https://avatars.githubusercontent.com/u/2493339?v=3","gravatar_id":"","url":"https://api.github.com/users/pmoust","html_url":"https://github.com/pmoust","followers_url":"https://api.github.com/users/pmoust/followers","following_url":"https://api.github.com/users/pmoust/following{/other_user}","gists_url":"https://api.github.com/users/pmoust/gists{/gist_id}","starred_url":"https://api.github.com/users/pmoust/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmoust/subscriptions","organizations_url":"https://api.github.com/users/pmoust/orgs","repos_url":"https://api.github.com/users/pmoust/repos","events_url":"https://api.github.com/users/pmoust/events{/privacy}","received_events_url":"https://api.github.com/users/pmoust/received_events","type":"User","site_admin":false},"created_at":"2015-01-09T15:26:32Z","updated_at":"2015-01-09T15:26:32Z","body":"@samdark the UPGRADE notes are flawed."}}