5 Commits

Author	SHA1	Message	Date
xisi	3006cb544f	Reworked csrf tokens, now enabled globally ... The way this now works is, if csrf is enabled: * Any new or existing template can have csrf protection by adding the hidden input ctoken that's in this batch to its form, removes any logic in templates * Page controllers that already exist have been updated, new ones only require checking if csrf is enabled and valid	2014-01-24 13:00:24 -05:00
xisi	1fd0adf038	Removed unused config setting	2014-01-23 11:01:30 -05:00
xisi	bd2999526e	fixed mobile templates, have not tested as they use same methods as main template ... fixed change pw templates; added csrf token added csrf protection for password reset fixed reset and change pass templates; were missing csrf token (form only tpl)	2014-01-20 04:40:38 -05:00
Sebastian Grewe	f98d08df83	[SECURITY] Fixing XSS in PHP_SELF ... Fixes #1364 once merged.	2014-01-11 19:01:14 +01:00
Sebastian Grewe	02c9be54ed	[MAJOR] Changing project name to MPOS ... * Adjusted mmcfe-ng occurences in code * Adjusted Database strucutre to only supply the full structure * Adjusted default template to MPOS Addresses #643	2013-10-07 10:10:49 +02:00