{"issue":{"state":"open","pull_request":{"diff_url":"https://github.com/joomla/joomla-platform/pull/450.diff","html_url":"https://github.com/joomla/joomla-platform/pull/450","patch_url":"https://github.com/joomla/joomla-platform/pull/450.patch"},"milestone":null,"user":{"avatar_url":"https://secure.gravatar.com/avatar/7ca69404a950d0759c88c6b188225db5?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"7ca69404a950d0759c88c6b188225db5","url":"https://api.github.com/users/garyamort","login":"garyamort","id":230856},"assignee":null,"labels":[],"updated_at":"2011-11-01T00:42:51Z","closed_at":null,"comments":6,"url":"https://api.github.com/repos/joomla/joomla-platform/issues/450","body":"Formatting the session id for storage should be the responsibility of the underlying storage engine, not the session manager. Applying MD5[or any other form of hashing] has the possibility of creating the same hash for different id's - thus granting one user access to another's account. Maintain uniqueness of id as long as possible by not hashing it, and let engines format them further if they need to and note the security risk,","html_url":"https://github.com/joomla/joomla-platform/issues/450","number":450,"title":"Update to remove MD5 from the session id creation funtion","id":2006858,"created_at":"2011-10-20T16:52:36Z"},"action":"created","comment":{"user":{"avatar_url":"https://secure.gravatar.com/avatar/679908c699f06435eb3c407f0259bab1?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"679908c699f06435eb3c407f0259bab1","url":"https://api.github.com/users/joomla-jenkins","login":"joomla-jenkins","id":929228},"updated_at":"2011-11-01T00:42:51Z","url":"https://api.github.com/repos/joomla/joomla-platform/issues/comments/2585481","body":"Unit testing complete.  There were 0 failures and 1 errors from 1683 tests and 10557 assertions.\nCheckstyle analysis reported 453 warnings and 16 errors.\n","id":2585481,"created_at":"2011-11-01T00:42:51Z"}}