Skip to content

FIX / User update imports failing due to cookie_token overflow#619

Open
Mary-Clb wants to merge 2 commits into10.0/bugfixesfrom
fix/user-injection-cookie-token-overflow
Open

FIX / User update imports failing due to cookie_token overflow#619
Mary-Clb wants to merge 2 commits into10.0/bugfixesfrom
fix/user-injection-cookie-token-overflow

Conversation

@Mary-Clb
Copy link
Copy Markdown
Contributor

@Mary-Clb Mary-Clb commented May 7, 2026

  • I have performed a self-review of my code.
  • I have added tests (when available) that prove my fix is effective or that my feature works.
  • I have updated the CHANGELOG with a short functional description of the fix or new feature.
  • This change requires a documentation update.

Description

  • It fixes !43800
  • When importing updates for User records multiple times, the second run could fail with:
    Data too long for column cookie_token.During update, token fields already stored in DB were included again in the update payload.
    GLPI encrypts those token fields during update, so already-encrypted values were encrypted again, increasing size until cookie_token exceeded column capacity.
    This issue is already fixed in the GLPI 11 compatible line via PR Fix - User field updates and email import #566 , included in the 2.15.x series.
    This PR brings the same protection to the GLPI 10 compatible branch.

@Mary-Clb Mary-Clb self-assigned this May 7, 2026
@Mary-Clb Mary-Clb requested review from Lainow, Rom1-B and stonebuzz May 7, 2026 09:09
@Mary-Clb Mary-Clb added the bug label May 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants