I receive the following error when using the AES module:

Warning: file_put_contents(login_edit_dump.txt) [function.file-put-contents]: failed to open stream: Permission denied in aes_user_login() (line 402 of <path removed>/sites/all/modules/contrib/aes/aes.module).

This looks like it may be some left-over debugging code since I don't see any place where the generated text file is used. Though if it is needed, this statement should be run after the variable_get() statement to see if encrypting user passwords is enabled. (I have it disabled).

Comments

easyfit’s picture

Status: Active » Patch (to be ported)

Patched. Waiting for Drupal security team to respond and approve the release of 1.5.

easyfit’s picture

Status: Patch (to be ported) » Fixed

SA is out, along with 1.5. Thanks for reporting this Shawn!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.