[UPDATE] CSRF protection + User/IP/Date & time added to login notification
* Adds CSRF protection for multiple pages, see bottom * Adds User/IP/Date & time to successful login notification * New config option for sitewide CSRF protection * Fixed a bug in the contact form * Lots of cleanup related to CSRF stuff * Increments config version * CSRF protection: register, contact, account edit, workers, notifications, and invites
This commit is contained in:
parent
8756036646
commit
a36a0c5b79
@ -7,7 +7,7 @@ if (!defined('SECURITY')) die('Hacking attempt');
|
|||||||
* This is used in the version check to ensure you run the latest version of the configuration file.
|
* This is used in the version check to ensure you run the latest version of the configuration file.
|
||||||
* Once you upgraded your config, change the version here too.
|
* Once you upgraded your config, change the version here too.
|
||||||
**/
|
**/
|
||||||
$config['version'] = '0.0.4';
|
$config['version'] = '0.0.5';
|
||||||
|
|
||||||
// Our include directory for additional features
|
// Our include directory for additional features
|
||||||
define('INCLUDE_DIR', BASEPATH . 'include');
|
define('INCLUDE_DIR', BASEPATH . 'include');
|
||||||
|
|||||||
@ -5,7 +5,7 @@ if (!defined('SECURITY')) die('Hacking attempt');
|
|||||||
|
|
||||||
define('MPOS_VERSION', '0.0.2');
|
define('MPOS_VERSION', '0.0.2');
|
||||||
define('DB_VERSION', '0.0.3');
|
define('DB_VERSION', '0.0.3');
|
||||||
define('CONFIG_VERSION', '0.0.4');
|
define('CONFIG_VERSION', '0.0.5');
|
||||||
|
|
||||||
// Fetch installed database version
|
// Fetch installed database version
|
||||||
$db_version = $setting->getValue('DB_VERSION');
|
$db_version = $setting->getValue('DB_VERSION');
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user