Commit Graph

2605 Commits

Author SHA1 Message Date
Sebastian Grewe
06eee145bf [FIX] Validate cold wallet address 2014-02-05 09:31:51 +01:00
Sebastian Grewe
c0618dd598 [VERSION] 0.0.4 MPOS for Payout overhaul 2014-02-05 09:02:36 +01:00
Sebastian Grewe
bc0d340bf3 Merge pull request #1642 from MPOS/payout-overhaul
[IMPROVED] Payout logics
2014-02-04 21:59:22 -08:00
Sebastian Grewe
622f4af1c2 Merge pull request #1679 from PartTimeLegend/patch-1
Added WowMuchPool.com to donors
2014-02-04 21:54:35 -08:00
Antony Bailey
2d960cd0fb Added WowMuchPool.com to donors
Date: 05/02/2014 03:17
To: MPOS D6YtvxFGBmaD8Yq3i8LZsBQVPvCbZwCDzF
Debit: -10,000.00 DOGE
Net amount: -10,000.00 DOGE
Transaction ID: 4471d84cf4db42c9844dd13908358babd558519c2eea23c88abcec3cde139201
2014-02-05 03:18:40 +00:00
Sebastian Grewe
43e1c44def Merge pull request #1646 from xisi/security-logging
[ADDITION] Basic security logging
2014-02-04 08:05:13 -08:00
Sebastian Grewe
c063eba96e Update README.md
Added DOGE address.
2014-02-04 10:39:59 +01:00
Sebastian Grewe
30af8e83c5 Merge pull request #1657 from HerrKauwer/zxcvbn
Used zxcvbn for password strength determination
2014-02-02 23:53:22 -08:00
Sebastian Grewe
c677295447 [FIX] Network hashrate in khash before checks 2014-02-03 08:20:42 +01:00
Sebastian Grewe
9012f480d6 [FIX] Network hashrate in khash before checks 2014-02-03 08:20:10 +01:00
Sebastian Grewe
7d8aaadf6a [FIX] Do no DUPE on empty coin address 2014-02-03 08:16:59 +01:00
Sebastian Grewe
bf0f7527b1 [FIX] Address Validation Script 2014-02-03 08:16:59 +01:00
Sebastian Grewe
e59d3a8e25 [FIX] Address Validation in user class 2014-02-03 08:16:59 +01:00
Sebastian Grewe
c00b6d6757 [IMPROVED] Payout logics
* [ADDED] More methods to our transaction class
 * `createDebitAPRecord` and `createDebitMPRecord`, will handle the
 * entire debit process
  * Adds Debit transaction
  * Adds TXFee transaction
  * mark transactions as archived
  * validate user is fully paid out
  * send notification to user
 * `getMPQueue` was added to unify the process of getting payout queues
* [MOVED] Only one mail template for both payout methods
* [ADDED] Some minor calls to user class
* [ADDED] Full address validation to bitcoin class
* [SQL] New SQL upgrade and Version Increment
 * Adding UNIQUE index to coin_address in accounts table
 * preperation for `sendmany` implementation
2014-02-03 08:16:58 +01:00
Sebastian Grewe
a9b56433cb [ADDED] 51 Percent Script 2014-02-03 08:16:02 +01:00
Sebastian Grewe
ea1dfa73e9 [FIX] Scripts shared library 2014-02-03 08:15:51 +01:00
Sebastian Grewe
d61e6a7243 [FIX] Cron compile folder permission issue 2014-02-03 07:58:06 +01:00
xisi
18c7565e5c cleanup 2014-02-02 13:34:41 -05:00
xisi
ca1ae6ba2c wrapped KLogger 2014-02-02 11:57:06 -05:00
HerrKauwer
70e8b27085 Used zxcvbn for password strength determination 2014-02-02 15:04:55 +01:00
Sebastian Grewe
9da7af8a5e [FIX] 24 Hour Account Graphs 2014-02-02 11:35:08 +01:00
Sebastian Grewe
656a92d286 Merge pull request #1651 from rog1121/patch-4
Locked Account Message
2014-02-01 13:14:22 -08:00
rog1121
07d49b0956 Locked Account Message 2014-02-01 12:35:48 -07:00
Joey
3c7df46f43 Merge pull request #1648 from xisi/unlock-csrf-fix
Fixes #1639
2014-01-31 14:37:21 -08:00
xisi
cf8a8cc4d8 fixes #1639 2014-01-31 17:34:48 -05:00
xisi
e7bace5550 basic logging, adds logs folder to root dir
htaccess to block access to the logs
by default, only log warnings
simple config check to see if that folder is writable

warning if changeNoFee is used
warning if setLocked is used
warning if changeAdmin is used
warning if when logging in that IP is different than saved IP
info if a login fails with bad user or password
warning if a user is locked via failed logins
info if an update/etc fails with bad pin
warning if a user is locked via failed pins
info when a pin request is sent
warning when a pin request email doesn't send
warning when trying to request pin reset and incorrect password
info when a twofactor token sent
warning if twofactor email doesn't send
warning when a user tries to request multiple of the same type of token
info when a twofactor token is deleted
warning if a twofactor token fails to delete
warning when an invalid change password token is used
info on successful account update
warning when reset password is called and IP doesn't match saved IP, info otherwise
warning if isAuthenticated falls through and kills a session
2014-01-31 13:11:38 -05:00
Sebastian Grewe
255b9e1f56 [FIX] API Timeout added
Fixes #1643
2014-01-31 16:27:03 +01:00
Sebastian Grewe
319d9439a4 Merge pull request #1621 from xisi/sessions-mclimiter-fixes
[UPDATE] Security updates and fixes
2014-01-31 05:55:09 -08:00
xisi
afdf3abb29 ripped out all the memcache session stuff, not worth it with the side effects of caching things
cleaned up config/checks
2014-01-30 18:41:56 -05:00
xisi
8487a8d462 respect client validation settings for failures 2014-01-30 09:38:41 -05:00
Sebastian Grewe
5716b4e8f7 Merge branch 'next' of github.com:MPOS/php-mpos into next 2014-01-30 14:34:00 +01:00
Sebastian Grewe
78b8bf4c27 [FIX] Prop/PPLNS Double Payout log 2014-01-30 14:33:49 +01:00
Sebastian Grewe
73455c97e9 Update README.md
Added cryptsy Trade Key.
2014-01-30 10:24:57 +01:00
Sebastian Grewe
6f97752131 Merge pull request #1631 from nevrending/patch-2
Fixing "Your Invalid" percentage calculation
2014-01-29 21:54:41 -08:00
xisi
3d414e9ffa I think this is a good midway between hardcoding it in and allowing configurability 2014-01-29 23:35:07 -05:00
xisi
0643cf4b87 fixed crons, tested on 2 boxes 2014-01-29 18:33:34 -05:00
xisi
53a8b4adf1 .htaccess check for @ahmedbodi 2014-01-29 15:43:09 -05:00
xisi
51818421d8 weird problem, strict for isAuthenticated 2014-01-29 14:46:21 -05:00
xisi
5d017f60c3 how this worked before is beyond me 2014-01-29 13:28:38 -05:00
Yefta Sutanto
0bd1606207 Update sidebar_prop.tpl
Fixing "Your Invalid" percentage calculation
2014-01-30 00:17:20 +07:00
Yefta Sutanto
0a9398b99e Update sidebar_pps.tpl 2014-01-30 00:16:45 +07:00
Yefta Sutanto
016da6cd61 Update sidebar_pplns.tpl
Fixing "Your Invalid" percentage calculation
2014-01-30 00:12:34 +07:00
xisi
ae47437ab7 fixed worker delete csrf thing I stubbed earlier
took to field out of the rest of the login forms
2014-01-29 09:41:50 -05:00
xisi
c36413d70c tests not checks 2014-01-29 09:17:58 -05:00
xisi
f298c60260 little more cleanup
put version check/config check after sessions/rate limiter so it works correctly & only uses 1 db hit
2014-01-29 09:16:03 -05:00
xisi
568445845a changes DEBUG SALT and SALTY from defines to variables
switched that in all places used (class loads mostly)
moved all includes at the beginning of index into bootstrap
moves *_PATH defines from config to bootstrap
config now uses defaults first, then user config
2014-01-29 07:34:50 -05:00
xisi
c2b1c68699 added check if we can write config files to admin_checks, we shouldnt be able to 2014-01-29 05:20:06 -05:00
Sebastian Grewe
923795c23b [FIX] Ignore AP for empty/NULL addresses 2014-01-29 09:58:18 +01:00
xisi
56ad9266d3 last login time not this login time 2014-01-29 03:55:51 -05:00
Sebastian Grewe
d84018763d [FIX] Admin Panel Users: Show user shares
Fixes #1624
2014-01-29 09:27:34 +01:00