[UPDATE] CSRF protection + User/IP/Date & time added to login notification
* Adds CSRF protection for multiple pages, see bottom * Adds User/IP/Date & time to successful login notification * New config option for sitewide CSRF protection * Fixed a bug in the contact form * Lots of cleanup related to CSRF stuff * Increments config version * CSRF protection: register, contact, account edit, workers, notifications, and invites
This commit is contained in:
parent
8756036646
commit
a36a0c5b79
@ -7,7 +7,7 @@ if (!defined('SECURITY')) die('Hacking attempt');
|
||||
* This is used in the version check to ensure you run the latest version of the configuration file.
|
||||
* Once you upgraded your config, change the version here too.
|
||||
**/
|
||||
$config['version'] = '0.0.4';
|
||||
$config['version'] = '0.0.5';
|
||||
|
||||
// Our include directory for additional features
|
||||
define('INCLUDE_DIR', BASEPATH . 'include');
|
||||
|
||||
@ -5,7 +5,7 @@ if (!defined('SECURITY')) die('Hacking attempt');
|
||||
|
||||
define('MPOS_VERSION', '0.0.2');
|
||||
define('DB_VERSION', '0.0.3');
|
||||
define('CONFIG_VERSION', '0.0.4');
|
||||
define('CONFIG_VERSION', '0.0.5');
|
||||
|
||||
// Fetch installed database version
|
||||
$db_version = $setting->getValue('DB_VERSION');
|
||||
|
||||
Loading…
Reference in New Issue
Block a user