Fix an edge-case bug causing the user_encryption_session_key session cookie to not be set due to error output (when display PHP errors in browser is enabled). This means login credentials are still encrypted but cannot be decrypted properly by other users. Prevent users creating new credentials if they do not have the correct cookie set.
18 KiB
18 KiB