8 Commits

Author	SHA1	Message	Date
xisi	76a67cb71a	Changed the config options for CSRF/disabling forms ... * Now an array to disable with granularity * Fixed all CSRF tokens back to 1 min * Added CSRF protection for unlock account * Unified error message for all csrf tokens * Fixed a few issues with last commit	2014-01-20 04:41:13 -05:00
xisi	36f3a16cc3	gave password reset its own csrf token	2014-01-20 04:40:38 -05:00
xisi	bd2999526e	fixed mobile templates, have not tested as they use same methods as main template ... fixed change pw templates; added csrf token added csrf protection for password reset fixed reset and change pass templates; were missing csrf token (form only tpl)	2014-01-20 04:40:38 -05:00
Neozonz	1be228812d	[FIX] Type Success on notifications	2014-01-13 17:27:50 -05:00
Sebastian Grewe	ceadf30a85	[SECURITY] Fixing potential XSS issues ... Will resolve #926 once merged.	2013-12-09 08:02:41 +01:00
Sebastian Grewe	29d5d36a7e	WiP for one time tokens ... * Added token type class * Storing Token Type as ID not varchar * Added new system to user class and fixed issues with it * Started on mail verification process in user class * Updated autoloader * Updated change password template Addresses #330	2013-07-15 12:26:31 +02:00
Sebastian Grewe	787942b6f9	working version of password reset with one time token	2013-05-25 12:08:51 +02:00
Sebastian Grewe	841d986726	initial work on password reset, not working fully yet	2013-05-25 10:58:53 +02:00