Release Date: June 5, 2014

• General Changes
  • Security: The xor_encode() method in the Encrypt Class has been removed. The Encrypt Class now requires the Mcrypt extension to be installed.
  • Security: The Session Library now uses HMAC authentication instead of a simple MD5 checksum.

• Fixed an edge case (#2583) in the Email Library where Suhosin blocked messages sent via mail() due to trailing newspaces in headers.
• Fixed a bug (#696) - make oci_execute() calls inside num_rows() non-committing, since they are only there to reset which row is next in line for oci_fetch calls and thus don't need to be committed.
• Fixed a bug (#2689) - Database Forge Class methods create_table(), drop_table() and rename_table() produced broken SQL for tge 'sqlsrv' driver.
• Fixed a bug (#2427) - PDO Database driver didn't properly check for query failures.
• Fixed a bug in the Session Library where authentication was not performed for encrypted cookies.