View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
20223 | Bug reports | Encryption | public | 2025-08-19 21:48 | 2025-08-20 19:30 |
Reporter | klevesque | Assigned To | c_schmitz | ||
Priority | none | Severity | partial_block | ||
Status | assigned | Resolution | open | ||
Product Version | 6.4.x | ||||
Summary | 20223: Re-encryption of data when importing responses from a deactivated survey | ||||
Description | When using the 'Import responses from a deactivated survey' tool, Limesurvey re-encrypts values of responses that were already encrypted. As a result, when displaying or exporting the data, only one layer of encryption is removed, leading to partially decrypted values that do not match the original input. | ||||
Steps To Reproduce |
| ||||
Tags | No tags attached. | ||||
Attached Files | limesurvey_survey_851641.lss (20,258 bytes)
<?xml version="1.0" encoding="UTF-8"?> <document> <LimeSurveyDocType>Survey</LimeSurveyDocType> <DBVersion>636</DBVersion> <languages> <language>fr</language> </languages> <groups> <fields> <fieldname>gid</fieldname> <fieldname>sid</fieldname> <fieldname>group_order</fieldname> <fieldname>randomization_group</fieldname> <fieldname>grelevance</fieldname> </fields> <rows> <row> <gid><![CDATA[1]]></gid> <sid><![CDATA[851641]]></sid> <group_order><![CDATA[1]]></group_order> <randomization_group/> <grelevance><![CDATA[1]]></grelevance> </row> </rows> </groups> <group_l10ns> <fields> <fieldname>id</fieldname> <fieldname>gid</fieldname> <fieldname>group_name</fieldname> <fieldname>description</fieldname> <fieldname>language</fieldname> <fieldname>sid</fieldname> <fieldname>group_order</fieldname> <fieldname>randomization_group</fieldname> <fieldname>grelevance</fieldname> </fields> <rows> <row> <id><![CDATA[1]]></id> <gid><![CDATA[1]]></gid> <group_name><![CDATA[Mon premier groupe de question]]></group_name> <description/> <language><![CDATA[fr]]></language> <sid><![CDATA[851641]]></sid> <group_order><![CDATA[1]]></group_order> <randomization_group/> <grelevance><![CDATA[1]]></grelevance> </row> </rows> </group_l10ns> <questions> <fields> <fieldname>qid</fieldname> <fieldname>parent_qid</fieldname> <fieldname>sid</fieldname> <fieldname>gid</fieldname> <fieldname>type</fieldname> <fieldname>title</fieldname> <fieldname>preg</fieldname> <fieldname>other</fieldname> <fieldname>mandatory</fieldname> <fieldname>encrypted</fieldname> <fieldname>question_order</fieldname> <fieldname>scale_id</fieldname> <fieldname>same_default</fieldname> <fieldname>relevance</fieldname> <fieldname>question_theme_name</fieldname> <fieldname>modulename</fieldname> <fieldname>same_script</fieldname> </fields> <rows> <row> <qid><![CDATA[1]]></qid> <parent_qid><![CDATA[0]]></parent_qid> <sid><![CDATA[851641]]></sid> <gid><![CDATA[1]]></gid> <type><![CDATA[T]]></type> <title><![CDATA[Q00]]></title> <other><![CDATA[N]]></other> <mandatory><![CDATA[N]]></mandatory> <encrypted><![CDATA[Y]]></encrypted> <question_order><![CDATA[1]]></question_order> <scale_id><![CDATA[0]]></scale_id> <same_default><![CDATA[0]]></same_default> <relevance><![CDATA[1]]></relevance> <question_theme_name><![CDATA[longfreetext]]></question_theme_name> <same_script><![CDATA[0]]></same_script> </row> </rows> </questions> <question_l10ns> <fields> <fieldname>id</fieldname> <fieldname>qid</fieldname> <fieldname>question</fieldname> <fieldname>help</fieldname> <fieldname>script</fieldname> <fieldname>language</fieldname> </fields> <rows> <row> <id><![CDATA[1]]></id> <qid><![CDATA[1]]></qid> <question><![CDATA[<p>My question</p>]]></question> <help/> <language><![CDATA[fr]]></language> </row> </rows> </question_l10ns> <question_attributes> <fields> <fieldname>qid</fieldname> <fieldname>attribute</fieldname> <fieldname>value</fieldname> <fieldname>language</fieldname> </fields> <rows> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[cssclass]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[display_rows]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[em_validation_q]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[em_validation_q_tip]]></attribute> <value/> <language><![CDATA[fr]]></language> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[hidden]]></attribute> <value><![CDATA[0]]></value> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[hide_tip]]></attribute> <value><![CDATA[0]]></value> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[image]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[input_size]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[maximum_chars]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[page_break]]></attribute> <value><![CDATA[0]]></value> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[random_group]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[statistics_graphtype]]></attribute> <value><![CDATA[0]]></value> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[statistics_showgraph]]></attribute> <value><![CDATA[1]]></value> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[text_input_width]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_action]]></attribute> <value><![CDATA[1]]></value> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_countdown_message]]></attribute> <value/> <language><![CDATA[fr]]></language> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_disable_next]]></attribute> <value><![CDATA[0]]></value> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_disable_prev]]></attribute> <value><![CDATA[0]]></value> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_message]]></attribute> <value/> <language><![CDATA[fr]]></language> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_message_delay]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_message_style]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_timer_style]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_warning]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_warning_2]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_warning_2_display_time]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_warning_2_message]]></attribute> <value/> <language><![CDATA[fr]]></language> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_warning_2_style]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_warning_display_time]]></attribute> <value/> <language/> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_warning_message]]></attribute> <value/> <language><![CDATA[fr]]></language> </row> <row> <qid><![CDATA[1]]></qid> <attribute><![CDATA[time_limit_warning_style]]></attribute> <value/> <language/> </row> </rows> </question_attributes> <surveys> <fields> <fieldname>sid</fieldname> <fieldname>gsid</fieldname> <fieldname>admin</fieldname> <fieldname>expires</fieldname> <fieldname>startdate</fieldname> <fieldname>adminemail</fieldname> <fieldname>anonymized</fieldname> <fieldname>format</fieldname> <fieldname>savetimings</fieldname> <fieldname>template</fieldname> <fieldname>language</fieldname> <fieldname>additional_languages</fieldname> <fieldname>datestamp</fieldname> <fieldname>usecookie</fieldname> <fieldname>allowregister</fieldname> <fieldname>allowsave</fieldname> <fieldname>autonumber_start</fieldname> <fieldname>autoredirect</fieldname> <fieldname>allowprev</fieldname> <fieldname>printanswers</fieldname> <fieldname>ipaddr</fieldname> <fieldname>ipanonymize</fieldname> <fieldname>refurl</fieldname> <fieldname>showsurveypolicynotice</fieldname> <fieldname>publicstatistics</fieldname> <fieldname>showdatapolicybutton</fieldname> <fieldname>showlegalnoticebutton</fieldname> <fieldname>publicgraphs</fieldname> <fieldname>listpublic</fieldname> <fieldname>htmlemail</fieldname> <fieldname>sendconfirmation</fieldname> <fieldname>tokenanswerspersistence</fieldname> <fieldname>assessments</fieldname> <fieldname>usecaptcha</fieldname> <fieldname>usetokens</fieldname> <fieldname>bounce_email</fieldname> <fieldname>attributedescriptions</fieldname> <fieldname>emailresponseto</fieldname> <fieldname>emailnotificationto</fieldname> <fieldname>tokenlength</fieldname> <fieldname>showxquestions</fieldname> <fieldname>showgroupinfo</fieldname> <fieldname>shownoanswer</fieldname> <fieldname>showqnumcode</fieldname> <fieldname>bouncetime</fieldname> <fieldname>bounceprocessing</fieldname> <fieldname>bounceaccounttype</fieldname> <fieldname>bounceaccounthost</fieldname> <fieldname>bounceaccountpass</fieldname> <fieldname>bounceaccountencryption</fieldname> <fieldname>bounceaccountuser</fieldname> <fieldname>showwelcome</fieldname> <fieldname>showprogress</fieldname> <fieldname>questionindex</fieldname> <fieldname>navigationdelay</fieldname> <fieldname>nokeyboard</fieldname> <fieldname>alloweditaftercompletion</fieldname> <fieldname>googleanalyticsstyle</fieldname> <fieldname>googleanalyticsapikey</fieldname> <fieldname>tokenencryptionoptions</fieldname> <fieldname>access_mode</fieldname> </fields> <rows> <row> <sid><![CDATA[851641]]></sid> <gsid><![CDATA[1]]></gsid> <admin><![CDATA[inherit]]></admin> <adminemail><![CDATA[inherit]]></adminemail> <anonymized><![CDATA[N]]></anonymized> <format><![CDATA[I]]></format> <savetimings><![CDATA[N]]></savetimings> <template><![CDATA[inherit]]></template> <language><![CDATA[fr]]></language> <additional_languages/> <datestamp><![CDATA[Y]]></datestamp> <usecookie><![CDATA[I]]></usecookie> <allowregister><![CDATA[I]]></allowregister> <allowsave><![CDATA[I]]></allowsave> <autonumber_start><![CDATA[3]]></autonumber_start> <autoredirect><![CDATA[I]]></autoredirect> <allowprev><![CDATA[I]]></allowprev> <printanswers><![CDATA[I]]></printanswers> <ipaddr><![CDATA[N]]></ipaddr> <ipanonymize><![CDATA[N]]></ipanonymize> <refurl><![CDATA[N]]></refurl> <showsurveypolicynotice><![CDATA[0]]></showsurveypolicynotice> <publicstatistics><![CDATA[I]]></publicstatistics> <showdatapolicybutton><![CDATA[0]]></showdatapolicybutton> <showlegalnoticebutton><![CDATA[0]]></showlegalnoticebutton> <publicgraphs><![CDATA[I]]></publicgraphs> <listpublic><![CDATA[I]]></listpublic> <htmlemail><![CDATA[I]]></htmlemail> <sendconfirmation><![CDATA[I]]></sendconfirmation> <tokenanswerspersistence><![CDATA[I]]></tokenanswerspersistence> <assessments><![CDATA[I]]></assessments> <usecaptcha><![CDATA[E]]></usecaptcha> <usetokens><![CDATA[N]]></usetokens> <bounce_email><![CDATA[inherit]]></bounce_email> <emailresponseto><![CDATA[inherit]]></emailresponseto> <emailnotificationto><![CDATA[inherit]]></emailnotificationto> <tokenlength><![CDATA[-1]]></tokenlength> <showxquestions><![CDATA[I]]></showxquestions> <showgroupinfo><![CDATA[I]]></showgroupinfo> <shownoanswer><![CDATA[I]]></shownoanswer> <showqnumcode><![CDATA[I]]></showqnumcode> <bounceprocessing><![CDATA[N]]></bounceprocessing> <showwelcome><![CDATA[I]]></showwelcome> <showprogress><![CDATA[I]]></showprogress> <questionindex><![CDATA[-1]]></questionindex> <navigationdelay><![CDATA[-1]]></navigationdelay> <nokeyboard><![CDATA[I]]></nokeyboard> <alloweditaftercompletion><![CDATA[I]]></alloweditaftercompletion> <tokenencryptionoptions/> <access_mode><![CDATA[O]]></access_mode> </row> </rows> </surveys> <surveys_languagesettings> <fields> <fieldname>surveyls_survey_id</fieldname> <fieldname>surveyls_policy_error</fieldname> <fieldname>surveyls_legal_notice</fieldname> <fieldname>surveyls_email_invite_subj</fieldname> <fieldname>surveyls_email_invite</fieldname> <fieldname>surveyls_email_remind_subj</fieldname> <fieldname>surveyls_email_remind</fieldname> <fieldname>surveyls_email_register_subj</fieldname> <fieldname>surveyls_email_register</fieldname> <fieldname>surveyls_email_confirm_subj</fieldname> <fieldname>surveyls_email_confirm</fieldname> <fieldname>surveyls_dateformat</fieldname> <fieldname>surveyls_attributecaptions</fieldname> <fieldname>surveyls_alias</fieldname> <fieldname>email_admin_notification_subj</fieldname> <fieldname>email_admin_notification</fieldname> <fieldname>email_admin_responses_subj</fieldname> <fieldname>email_admin_responses</fieldname> <fieldname>surveyls_numberformat</fieldname> <fieldname>attachments</fieldname> <fieldname>surveyls_language</fieldname> <fieldname>surveyls_title</fieldname> <fieldname>surveyls_description</fieldname> <fieldname>surveyls_welcometext</fieldname> <fieldname>surveyls_endtext</fieldname> <fieldname>surveyls_policy_notice</fieldname> <fieldname>surveyls_policy_notice_label</fieldname> <fieldname>surveyls_url</fieldname> <fieldname>surveyls_urldescription</fieldname> </fields> <rows> <row> <surveyls_survey_id><![CDATA[851641]]></surveyls_survey_id> <surveyls_policy_error/> <surveyls_legal_notice/> <surveyls_email_invite_subj><![CDATA[Invitation à participer à un questionnaire]]></surveyls_email_invite_subj> <surveyls_email_invite><![CDATA[Cher(e) {FIRSTNAME},<br /> <br /> Vous avez été invité(e) à participer à un questionnaire.<br /> <br /> Celui-ci est intitulé :<br /> "{SURVEYNAME}"<br /> <br /> "{SURVEYDESCRIPTION}"<br /> <br /> Pour participer, veuillez cliquer sur le lien ci-dessous.<br /> <br /> Cordialement,<br /> <br /> {ADMINNAME} ({ADMINEMAIL})<br /> <br /> ----------------------------------------------<br /> Cliquez ici pour remplir ce questionnaire :<br /> {SURVEYURL}<br /> <br /> Si vous ne souhaitez pas participer à ce questionnaire et ne souhaitez plus recevoir aucune invitation, veuillez cliquer sur le lien suivant :<br /> {OPTOUTURL}<br /> <br /> Si vous êtes sur liste de blocage mais que vous voulez participer à ce questionnaire et recevoir les invitations, merci de cliquer sur le lien suivant :<br /> {OPTINURL}]]></surveyls_email_invite> <surveyls_email_remind_subj><![CDATA[Rappel pour participer à un questionnaire]]></surveyls_email_remind_subj> <surveyls_email_remind><![CDATA[Cher(e) {FIRSTNAME},<br /> <br /> Vous avez été invité(e) à participer à un questionnaire récemment.<br /> <br /> Nous avons pris en compte que vous n’avez pas encore complété le questionnaire, et nous vous rappelons que celui-ci est toujours disponible si vous souhaitez participer.<br /> <br /> Le questionnaire est intitulé :<br /> "{SURVEYNAME}"<br /> <br /> "{SURVEYDESCRIPTION}"<br /> <br /> Pour participer, veuillez cliquer sur le lien ci-dessous.<br /> <br /> Cordialement,<br /> <br /> {ADMINNAME} ({ADMINEMAIL})<br /> <br /> ----------------------------------------------<br /> Cliquez ici pour faire le questionnaire :<br /> {SURVEYURL}<br /> <br /> Si vous ne souhaitez pas participer à ce questionnaire et ne souhaitez plus recevoir aucune invitation, veuillez cliquer sur le lien suivant :<br /> {OPTOUTURL}]]></surveyls_email_remind> <surveyls_email_register_subj><![CDATA[Confirmation d’enregistrement pour le questionnaire]]></surveyls_email_register_subj> <surveyls_email_register><![CDATA[Bonjour {FIRSTNAME},<br /> <br /> Vous (ou quelqu’un utilisant votre adresse électronique) vous êtes enregistré pour participer à un questionnaire en ligne intitulé {SURVEYNAME}.<br /> <br /> Pour compléter ce questionnaire, cliquez sur le lien suivant :<br /> {SURVEYURL}<br /> <br /> Si vous avez des questions à propos de ce questionnaire, ou si vous ne vous êtes pas enregistré pour participer à celui-ci et croyez que ce message est une erreur, veuillez contacter {ADMINNAME} à l’adresse {ADMINEMAIL}]]></surveyls_email_register> <surveyls_email_confirm_subj><![CDATA[Confirmation de votre participation à notre questionnaire]]></surveyls_email_confirm_subj> <surveyls_email_confirm><![CDATA[Bonjour {FIRSTNAME},<br /> <br /> Ce message vous confirme que vous avez complété le questionnaire intitulé {SURVEYNAME} et que votre réponse a été enregistrée. Merci pour votre participation.<br /> <br /> Si vous avez des questions à propos de ce message, veuillez contacter {ADMINNAME} à l’adresse {ADMINEMAIL}.<br /> <br /> Cordialement,<br /> <br /> {ADMINNAME}]]></surveyls_email_confirm> <surveyls_dateformat><![CDATA[5]]></surveyls_dateformat> <surveyls_alias/> <email_admin_notification_subj><![CDATA[Soumission de réponse pour le questionnaire {SURVEYNAME}]]></email_admin_notification_subj> <email_admin_notification><![CDATA[Bonjour,<br /> <br /> Une nouvelle réponse a été soumise pour votre questionnaire '{SURVEYNAME}'.<br /> <br /> Cliquez sur le lien suivant pour voir la réponse :<br /> {VIEWRESPONSEURL}<br /> <br /> Cliquez sur le lien suivant pour éditer la réponse :<br /> {EDITRESPONSEURL}<br /> <br /> Visualisez les statistiques en cliquant ici :<br /> {STATISTICSURL}]]></email_admin_notification> <email_admin_responses_subj><![CDATA[Soumission de réponse pour le questionnaire {SURVEYNAME} avec résultats]]></email_admin_responses_subj> <email_admin_responses><![CDATA[Bonjour,<br /> <br /> Une nouvelle réponse a été soumise pour votre questionnaire '{SURVEYNAME}'.<br /> <br /> Cliquez sur le lien suivant pour voir cette réponse :<br /> {VIEWRESPONSEURL}<br /> <br /> Cliquez sur le lien suivant pour éditer cette réponse individuelle :<br /> {EDITRESPONSEURL}<br /> <br /> Visualisez les statistiques en cliquant ici :<br /> {STATISTICSURL}<br /> <br /> <br /> Les réponses suivantes ont été données par le participant :<br /> {ANSWERTABLE}]]></email_admin_responses> <surveyls_numberformat><![CDATA[1]]></surveyls_numberformat> <surveyls_language><![CDATA[fr]]></surveyls_language> <surveyls_title><![CDATA[Survey with encrypted fields]]></surveyls_title> <surveyls_description/> <surveyls_welcometext/> <surveyls_endtext/> <surveyls_policy_notice/> <surveyls_policy_notice_label/> <surveyls_url/> <surveyls_urldescription/> </row> </rows> </surveys_languagesettings> <themes> <theme> <sid>851641</sid> <template_name>fruity_twentythree</template_name> <config> <options>inherit</options> </config> </theme> </themes> <themes_inherited> <theme> <sid>851641</sid> <template_name>fruity_twentythree</template_name> <config> <options> <hideprivacyinfo>off</hideprivacyinfo> <showpopups>1</showpopups> <showclearall>off</showclearall> <questionhelptextposition>top</questionhelptextposition> <fixnumauto>enable</fixnumauto> <backgroundimage>off</backgroundimage> <backgroundimagefile>./files/pattern.png</backgroundimagefile> <brandlogo>off</brandlogo> <brandlogofile>image::theme::files/logo.png</brandlogofile> <font>ibm-sans</font> <cssframework>Apple</cssframework> </options> </config> </theme> </themes_inherited> </document> | ||||
Bug heat | 6 | ||||
Complete LimeSurvey version number (& build) | LimeSurvey Community Edition Version 6.4.1+240108 | ||||
I will donate to the project if issue is resolved | No | ||||
Browser | |||||
Database type & version | 8.0.43 - MySQL Community Server | ||||
Server OS (if known) | |||||
Webserver software & version (if known) | |||||
PHP Version | 8.2.29 | ||||
@tibor.pacalat / @c_schmitz, this sounds like a rather serious issue and may lead to data loss due to duplicate encryption. |
|
@klevesque Please update to the latest version and check/please let us know if you can still reproduce the issue. |
|
We’ll update our local instance when possible and will report back once that’s done. However, I’ve already tested the cloud version following the issue we encountered locally, and the problem seems to persist there as well. In the cloud version, I tried both options when reactivating the survey: Keep existing responses: The data appeared intact, and I didn’t notice any anomalies. In our local version (6.4), there is no option to choose between reactivation modes — reactivating a survey is equivalent to the “Start from scratch” behavior in the cloud version. It’s not possible to retain existing responses during reactivation. |
|
Date Modified | Username | Field | Change |
---|---|---|---|
2025-08-19 21:48 | klevesque | New Issue | |
2025-08-19 21:48 | klevesque | File Added: limesurvey_survey_851641.lss | |
2025-08-20 12:59 | Mazi | Note Added: 83250 | |
2025-08-20 12:59 | Mazi | Bug heat | 0 => 2 |
2025-08-20 16:34 | c_schmitz | Assigned To | => c_schmitz |
2025-08-20 16:34 | c_schmitz | Status | new => feedback |
2025-08-20 16:34 | c_schmitz | Note Added: 83262 | |
2025-08-20 16:34 | c_schmitz | Bug heat | 2 => 4 |
2025-08-20 19:30 | klevesque | Note Added: 83267 | |
2025-08-20 19:30 | klevesque | Bug heat | 4 => 6 |
2025-08-20 19:30 | klevesque | Status | feedback => assigned |