xisi
36f3a16cc3
gave password reset its own csrf token
2014-01-20 04:40:38 -05:00
xisi
bd2999526e
fixed mobile templates, have not tested as they use same methods as main template
...
fixed change pw templates; added csrf token
added csrf protection for password reset
fixed reset and change pass templates; were missing csrf token (form only tpl)
2014-01-20 04:40:38 -05:00
Neozonz
1be228812d
[FIX] Type Success on notifications
2014-01-13 17:27:50 -05:00
Sebastian Grewe
ceadf30a85
[SECURITY] Fixing potential XSS issues
...
Will resolve #926 once merged.
2013-12-09 08:02:41 +01:00
Sebastian Grewe
29d5d36a7e
WiP for one time tokens
...
* Added token type class
* Storing Token Type as ID not varchar
* Added new system to user class and fixed issues with it
* Started on mail verification process in user class
* Updated autoloader
* Updated change password template
Addresses #330
2013-07-15 12:26:31 +02:00
Sebastian Grewe
787942b6f9
working version of password reset with one time token
2013-05-25 12:08:51 +02:00
Sebastian Grewe
841d986726
initial work on password reset, not working fully yet
2013-05-25 10:58:53 +02:00