Attachment Encryption is broken

Please report bugs here!

Moderator: Thorsten

Post Reply
Posts: 4
Joined: Fri May 27, 2016 12:14 am

Attachment Encryption is broken

Post by atek120 » Fri May 27, 2016 12:51 am

Hi Thorsten,

I'm using phpMyFAQ 2.9.0 running on XAMPP 3.2.2.
I'm not using mcrypt so theoretically the default php AES encryption should be used to encrypt attachments.

You can reproduce the broken functionality by following these steps:
  1. Login to the admin interface
  2. Enable the Attachment Encryption option in the Configuration with an encryption key
  3. Add a FAQ, fill title and try to attach a short txt file to it clicking the "Add new attachment" button.
  4. Browse for the txt file in the popup window
  5. Click the "OK" button
    At this point a new page appears within the popup window with the "Add an attachment to the issue " text and nothing else (no "Back" link to the FAQ).
  6. Close the popup window using [X] or Alt+F4
  7. Save the FAQ using the "Save" button
  8. Wait for the FAQ editing page to appear for the newly added FAQ
  9. Click on the attachment
    At this point a new page appears with an empty frame (almost empty, it shows a header "FAQ") - you don't get a download dialog or anything.
    When examining the attachments/ folder you'll realize the directory structure was created for the attachment but no attachment inside.
    When examining the database you'll realize a record was created for the attachment, no attachment was created physically though ...


Posts: 14793
Joined: Tue Sep 25, 2001 11:14 am
Location: #phpmyfaq

Re: Attachment Encryption is broken

Post by Thorsten » Fri May 27, 2016 7:10 am


we already fixed an attachment issue yesterday for the upcoming 2.9.1 release, I'll add this issue on Github. Thanks for the bug report!

phpMyFAQ Maintainer and Lead Developer Wishlist

Post Reply