{"action":"opened","issue":{"url":"https://api.github.com/repos/RomanAngelovskij/Auslogics/issues/1","labels_url":"https://api.github.com/repos/RomanAngelovskij/Auslogics/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/RomanAngelovskij/Auslogics/issues/1/comments","events_url":"https://api.github.com/repos/RomanAngelovskij/Auslogics/issues/1/events","html_url":"https://github.com/RomanAngelovskij/Auslogics/issues/1","id":86254473,"number":1,"title":"Task_4/common.php is not secure","user":{"login":"paragonie-scott","id":11591518,"avatar_url":"https://avatars.githubusercontent.com/u/11591518?v=3","gravatar_id":"","url":"https://api.github.com/users/paragonie-scott","html_url":"https://github.com/paragonie-scott","followers_url":"https://api.github.com/users/paragonie-scott/followers","following_url":"https://api.github.com/users/paragonie-scott/following{/other_user}","gists_url":"https://api.github.com/users/paragonie-scott/gists{/gist_id}","starred_url":"https://api.github.com/users/paragonie-scott/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paragonie-scott/subscriptions","organizations_url":"https://api.github.com/users/paragonie-scott/orgs","repos_url":"https://api.github.com/users/paragonie-scott/repos","events_url":"https://api.github.com/users/paragonie-scott/events{/privacy}","received_events_url":"https://api.github.com/users/paragonie-scott/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-06-08T16:56:15Z","updated_at":"2015-06-08T16:56:15Z","closed_at":null,"body":"* `MCRYPT_RIJNDAEL_256` is not AES-256.\r\n* `md5($key)` is not a good key expansion strategy\r\n* `md5(md5($key))` is not suitable for IVs; they should be unique and unpredictable\r\n* [PHP developers should avoid mcrypt](https://paragonie.com/blog/2015/05/if-you-re-typing-word-mcrypt-into-your-code-you-re-doing-it-wrong) if they value security\r\n* This encryption does not [provide ciphertext integrity](https://paragonie.com/blog/2015/05/using-encryption-and-authentication-correctly)\r\n\r\nPlease use [defuse/php-encryption](https://github.com/defuse/php-encryption) instead of writing your own."}}