Yii framework 1.1.3. If a user has some cookie in their browser with an array-like name “foo[bar]”, then the СSecurityManager generates PHP error. I should mention, that I have HMAC cookie protection enabled, and, as far as I can see, this is the cause of the problem. In my opinion, it is unacceptable that the framework crushes when a user posts such kind of data. The framework should either catch this error, or ignore it, but it definitely should not result in a PHP error. Let’s not discuss for now how a user could receive array-like cookies.
Error text: http://paste.ubuntu.com/466511/
