Commit Graph

2323 Commits

Author SHA1 Message Date
Sebastian Grewe
8cea4ec3ff Merge pull request #1494 from nonstopmine/patch-1
Update edit.inc.php
2014-01-21 00:18:44 -08:00
Sebastian Grewe
9520795e07 Merge pull request #1506 from nrpatten/next
[FIX] input[type=email] in the wrong order and Overlap and Reposition TABS
2014-01-21 00:07:58 -08:00
Sebastian Grewe
0edd964930 Merge pull request #1507 from xisi/security-js-pwstrength
Simple javascript password strength/match
2014-01-21 00:04:18 -08:00
Sebastian Grewe
98e6194320 Merge pull request #1485 from Neozonz/issue-1484
[Optimize] By default only sample 3 minutes worth of shares
2014-01-21 00:03:25 -08:00
nrpatten
b411f68d64 [FIX] Unknown Pool
Remove From: {$GLOBAL.website.name|default:"Unknown Pool"}
Add From: ' . $this->setting->getValue('website_name')
2014-01-21 18:37:19 +11:00
nrpatten
0cfc92bd2b [FIX] Overlap and Reposition TABS
[FIX] "E-mail address for system error" Overlap and realign class="tabs" to fieldset
2014-01-21 17:12:06 +11:00
nrpatten
ce37dc2147 [FIX] input[type=email] in the wrong order
[FIX] fieldset input[type=email] was in the wrong order.
2014-01-21 16:35:20 +11:00
xisi
a20c2324e2 Added pw strength/match to change password form 2014-01-21 00:02:57 -05:00
xisi
b0053b65e1 Added basic javascript password strength/match testing
Added pw strength/match to registration form
2014-01-20 23:57:07 -05:00
Neozonz
c42a9f55b7 [FIX] Math fart 2014-01-20 12:55:32 -08:00
xisi
d782038d0f stupid rebase 2014-01-20 15:38:46 -05:00
nonstopmine
bab002d9f8 Update edit.inc.php
txfee is old variable, replaced with txfee_manual
2014-01-20 22:32:04 +02:00
Neozonz
f7d9ca2777 [Optimize] By default only sample 3 minutes worth of shares 2014-01-20 12:01:13 -08:00
Sebastian Grewe
6bb9ccb8e7 Merge pull request #1483 from rog1121/patch-4
Mail Titles
2014-01-20 08:34:44 -08:00
rog1121
0a6ab8748b Mail Titles 2014-01-20 09:33:21 -07:00
Sebastian Grewe
eb6692b31c Merge pull request #1481 from raistlinthewiz/next
tx fee's shouldn't be %
2014-01-20 07:46:45 -08:00
Hüseyin Uslu
51d0879f8d Wording fix for index.php?page=account&action=edit - tx fee's shouldn't be % 2014-01-20 17:44:45 +02:00
Sebastian Grewe
34463d8966 Merge pull request #1479 from xisi/next
forgot to move this to the new config setting, oops
2014-01-20 03:30:37 -08:00
xisi
200e115ee6 forgot to move this to the new config setting, oops 2014-01-20 06:21:42 -05:00
Sebastian Grewe
963cb2e628 Merge pull request #1456 from xisi/next
[UPDATE] CSRF protection, more info in login notification
2014-01-20 02:23:49 -08:00
xisi
c8d7d67c96 forgot login in csrf protection disable comment 2014-01-20 05:19:32 -05:00
xisi
ffda9dbae1 rebase + fix bug in overview tpl that could throw a notice 2014-01-20 04:53:00 -05:00
xisi
4e1190952a updated expiration on email confirm tokens to 1 hour rather than 10 min 2014-01-20 04:42:08 -05:00
xisi
11b8b554f1 thanks, eclipse 2014-01-20 04:42:08 -05:00
xisi
befc5b9276 cleanup 2014-01-20 04:42:08 -05:00
xisi
ccc7fa6fe9 accidentally a word 2014-01-20 04:42:08 -05:00
xisi
2e7c461885 fix token_types table because I didn't specify id when inserting 2014-01-20 04:42:08 -05:00
xisi
fd49e0eb78 disabled is actually correct to use in cash out form, we want the css props
slightly optimization
2014-01-20 04:41:13 -05:00
xisi
03e0b2e51d request fiddling 2014-01-20 04:41:13 -05:00
xisi
1993ff604f Fixed undefined property in news class found by @neozonz 2014-01-20 04:41:13 -05:00
xisi
97835f33ca fixed explicit time check for token validity 2014-01-20 04:41:13 -05:00
xisi
a987878c8e removed extraneous disabling of a field in edit account page, thanks @rog1121 2014-01-20 04:41:13 -05:00
xisi
b0413226b4 removed extraneous disabling of a field in edit account page, thanks @rog1121 2014-01-20 04:41:13 -05:00
xisi
76a67cb71a Changed the config options for CSRF/disabling forms
* Now an array to disable with granularity
 * Fixed all CSRF tokens back to 1 min
 * Added CSRF protection for unlock account
 * Unified error message for all csrf tokens
 * Fixed a few issues with last commit
2014-01-20 04:41:13 -05:00
xisi
163e5de1f0 cleaned up & updated config options 2014-01-20 04:40:38 -05:00
xisi
5e5e751271 switched account edit csrf token to 1 min now that saving works on an incorrect entry 2014-01-20 04:40:38 -05:00
xisi
36f3a16cc3 gave password reset its own csrf token 2014-01-20 04:40:38 -05:00
xisi
bd2999526e fixed mobile templates, have not tested as they use same methods as main template
fixed change pw templates; added csrf token
added csrf protection for password reset
fixed reset and change pass templates; were missing csrf token (form only tpl)
2014-01-20 04:40:38 -05:00
xisi
7e3197246a fixed error response to not leak info to users 2014-01-20 04:40:38 -05:00
xisi
cc6e58084f Fixed an bug where a notice could be thrown on the edit page under the right conditions
Cleaned up login page logic which should fix #1459 & #1461
Fixed a bug in tools class where an incorrect config setting could throw a notice
2014-01-20 04:40:38 -05:00
xisi
dacadd8477 Fixed bug / undefined index when api settings are empty 2014-01-20 04:40:15 -05:00
xisi
62e341b877 finally cleaned up the edit account page to my liking
fixed change I made to test a fix for someone who was having issues
2014-01-20 04:38:53 -05:00
xisi
fed3981979 fixed isTokenValid, started work on edit fixes, recaptcha fix test 2014-01-20 04:38:25 -05:00
xisi
3b6a408c3f forget the check, the crons run 2014-01-20 04:33:28 -05:00
xisi
d3a7d4bdbf inc db version in version include 2014-01-20 04:32:54 -05:00
xisi
4be9330ca1 typo 2014-01-20 04:32:54 -05:00
xisi
18f808a85b After messing around for quite awhile now with the SQL NOW() and timestamp comparison, I've come to the conclusion it's much better for my sanity to do the expiration check in php - there seems to be some divergence between the way this is handled between SQL setups I've tested. So there you go. 2014-01-20 04:32:54 -05:00
xisi
bacbb8c36c after looking into this quite a bit, this is the correct way to do it after all 2014-01-20 04:30:17 -05:00
xisi
13e6c43ba5 add notify_email to accounts table and getUserNotifyEmail() method in user class 2014-01-20 04:30:17 -05:00
xisi
9ecd8d4d3e added signup_timestamp to accounts table
added getSignupTime() method to user class
added 014_accounts_update.sql and updated 000_base_structure.sql
incremented db version
2014-01-20 04:30:17 -05:00