Thousands of error messages – Using an empty Initialization Vector
-
We’re using this with multisite to log in for upgrades over SFTP.
We’ve just discovered, thought, that when we update the error logs are receiving about 20,000 error messages a minute. And the text is:
PHP Warning: openssl_encrypt(): Using an empty Initialization Vector (iv) is potentially insecure and not recommended in /var/www/html/abroad/wp-content/plugins/ssh-sftp-updater-support/phpseclib/Crypt/Base.php on line 1294, referer: https://xxxx.xxxxxx.xxxx.uk/wp-admin/network/update.php?action=upgrade-plugin&plugin=buddypress%2Fbp-loader.php&_wpnonce=ce79cf90c3
(Replaced domain with xx etc).
This results in the error logs getting clogged, the file system gets full and, quite soon, everything stops working.
Can anybody help with this, please?
- The topic ‘Thousands of error messages – Using an empty Initialization Vector’ is closed to new replies.