5 Commits

Author	SHA1	Message	Date
xisi	76a67cb71a	Changed the config options for CSRF/disabling forms ... * Now an array to disable with granularity * Fixed all CSRF tokens back to 1 min * Added CSRF protection for unlock account * Unified error message for all csrf tokens * Fixed a few issues with last commit	2014-01-20 04:41:13 -05:00
xisi	8756036646	cleaned up account edit csrf slightly ... added csrf protection to workers under sitewide config added csrf protection to notifications under sitewide config added csrf protection to invitations under sitewide config cleaned up login page csrf cleaned up contactform/contactform page cleaned up register/register page moved config->csrf->forms->register to sitewide added login ip/user/time to notification on login	2014-01-20 04:29:45 -05:00
Sebastian Grewe	f98d08df83	[SECURITY] Fixing XSS in PHP_SELF ... Fixes #1364 once merged.	2014-01-11 19:01:14 +01:00
Sebastian Grewe	ceadf30a85	[SECURITY] Fixing potential XSS issues ... Will resolve #926 once merged.	2013-12-09 08:02:41 +01:00
Sebastian Grewe	02c9be54ed	[MAJOR] Changing project name to MPOS ... * Adjusted mmcfe-ng occurences in code * Adjusted Database strucutre to only supply the full structure * Adjusted default template to MPOS Addresses #643	2013-10-07 10:10:49 +02:00