\Phalcon\Security\Random:base64Safe() function has problem

[anonymouslab]

Class Phalcon\Security\Random

    public function base64(int len = null) -> string
    {
        return base64_encode(this->bytes(len));
    }

    public function base64Safe(int len = null, boolean padding = false) -> string
    {
        var s;

        let s = preg_replace("#[^a-z0-9_=-]+#i", "", this->base64(len));

        if !padding {
            return trim(s, "=");
        }

        return s;
    }

please look at this ↓↓↓

let s = preg_replace("#[^a-z0-9_=-]+#i", "", this->base64(len));

this->base64(len) is not include -, _ characters.

so base64Safe() is not include _, - characters.

i think ...

this->base64(len) -> change , + to _, -

after

preg_replace("#[^a-z0-9_=-]+#i", "", .....

thank you for reading.

[Green-Cat]

@sergeyklay

[sergeyklay]

Fixed in the 3.0.x branch.