Home/ Questions/Q 7500945
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-29T20:22:03+00:00

I have two warnings related to cakephp security Please change the value of ‘Security.salt’

  • 0

I have two warnings related to cakephp security

Please change the value of ‘Security.salt’ in app/Config/core.php to
a salt value specific to your application
[CORE\Cake\Utility\Debugger.php, line 717]

Please change the value of ‘Security.cipherSeed’ in
app/Config/core.php to a numeric (digits only) seed value specific to
your application [CORE\Cake\Utility\Debugger.php, line 721]

But I have no idea of what that actually means. Is it just alright to leave them as they are even in really large and important applications ?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Well, reading those two messages, I would say you must edit the app/Config/core.php file, to put values that are specific to you / your application, and cannot be guessed, for the two Security.salt and Security.cipherSeed configuration entries.

    Considering the names of those properties, using specific values (unique to your application, and not common to all Cakephp applications in the world) is probably better for security.

    And, answering your “is it alright to leave them as they are ?” question : if you get security-related warnings, do you really think it’s OK to just ignore them ?

    • 0