8 Commits

Author	SHA1	Message	Date
xisi	76a67cb71a	Changed the config options for CSRF/disabling forms ... * Now an array to disable with granularity * Fixed all CSRF tokens back to 1 min * Added CSRF protection for unlock account * Unified error message for all csrf tokens * Fixed a few issues with last commit	2014-01-20 04:41:13 -05:00
xisi	15eca659b9	fixed a bug in edit account template ... moved csrf token to above template in smarty assigns fixed a bug in user class remove small login/fix header to catch up	2014-01-20 04:30:17 -05:00
xisi	8756036646	cleaned up account edit csrf slightly ... added csrf protection to workers under sitewide config added csrf protection to notifications under sitewide config added csrf protection to invitations under sitewide config cleaned up login page csrf cleaned up contactform/contactform page cleaned up register/register page moved config->csrf->forms->register to sitewide added login ip/user/time to notification on login	2014-01-20 04:29:45 -05:00
xisi	d83542e03e	Added method to get description image of csrf token with name ... moved sitewide into options portion of the config option csrf protection for contact form under sitewide config option changed register to 1 hour token	2014-01-20 04:27:58 -05:00
Sebastian Grewe	4a98724fc5	[FIX] Disallow to post messages for guests ... * Disallow to post messages if guest forms are disabled	2013-12-31 16:17:02 +01:00
nrpatten	f1859d7a8e	Update contactform.inc.php ... [FIX] php error and no message. not sure how this was broken.	2013-10-09 16:11:32 +11:00
nrpatten	8109c17051	Update contactform.inc.php ... [FIX] Recaptcha php error	2013-10-09 16:02:58 +11:00
nrpatten	61f6f5b94b	Create contactform.inc.php	2013-09-12 20:03:58 +10:00