Sebastian Grewe
8cea4ec3ff
Merge pull request #1494 from nonstopmine/patch-1
...
Update edit.inc.php
2014-01-21 00:18:44 -08:00
Sebastian Grewe
9520795e07
Merge pull request #1506 from nrpatten/next
...
[FIX] input[type=email] in the wrong order and Overlap and Reposition TABS
2014-01-21 00:07:58 -08:00
Sebastian Grewe
0edd964930
Merge pull request #1507 from xisi/security-js-pwstrength
...
Simple javascript password strength/match
2014-01-21 00:04:18 -08:00
Sebastian Grewe
98e6194320
Merge pull request #1485 from Neozonz/issue-1484
...
[Optimize] By default only sample 3 minutes worth of shares
2014-01-21 00:03:25 -08:00
nrpatten
b411f68d64
[FIX] Unknown Pool
...
Remove From: {$GLOBAL.website.name|default:"Unknown Pool"}
Add From: ' . $this->setting->getValue('website_name')
2014-01-21 18:37:19 +11:00
nrpatten
0cfc92bd2b
[FIX] Overlap and Reposition TABS
...
[FIX] "E-mail address for system error" Overlap and realign class="tabs" to fieldset
2014-01-21 17:12:06 +11:00
nrpatten
ce37dc2147
[FIX] input[type=email] in the wrong order
...
[FIX] fieldset input[type=email] was in the wrong order.
2014-01-21 16:35:20 +11:00
xisi
a20c2324e2
Added pw strength/match to change password form
2014-01-21 00:02:57 -05:00
xisi
b0053b65e1
Added basic javascript password strength/match testing
...
Added pw strength/match to registration form
2014-01-20 23:57:07 -05:00
Neozonz
c42a9f55b7
[FIX] Math fart
2014-01-20 12:55:32 -08:00
xisi
d782038d0f
stupid rebase
2014-01-20 15:38:46 -05:00
nonstopmine
bab002d9f8
Update edit.inc.php
...
txfee is old variable, replaced with txfee_manual
2014-01-20 22:32:04 +02:00
Neozonz
f7d9ca2777
[Optimize] By default only sample 3 minutes worth of shares
2014-01-20 12:01:13 -08:00
Sebastian Grewe
6bb9ccb8e7
Merge pull request #1483 from rog1121/patch-4
...
Mail Titles
2014-01-20 08:34:44 -08:00
rog1121
0a6ab8748b
Mail Titles
2014-01-20 09:33:21 -07:00
Sebastian Grewe
eb6692b31c
Merge pull request #1481 from raistlinthewiz/next
...
tx fee's shouldn't be %
2014-01-20 07:46:45 -08:00
Hüseyin Uslu
51d0879f8d
Wording fix for index.php?page=account&action=edit - tx fee's shouldn't be %
2014-01-20 17:44:45 +02:00
Sebastian Grewe
34463d8966
Merge pull request #1479 from xisi/next
...
forgot to move this to the new config setting, oops
2014-01-20 03:30:37 -08:00
xisi
200e115ee6
forgot to move this to the new config setting, oops
2014-01-20 06:21:42 -05:00
Sebastian Grewe
963cb2e628
Merge pull request #1456 from xisi/next
...
[UPDATE] CSRF protection, more info in login notification
2014-01-20 02:23:49 -08:00
xisi
c8d7d67c96
forgot login in csrf protection disable comment
2014-01-20 05:19:32 -05:00
xisi
ffda9dbae1
rebase + fix bug in overview tpl that could throw a notice
2014-01-20 04:53:00 -05:00
xisi
4e1190952a
updated expiration on email confirm tokens to 1 hour rather than 10 min
2014-01-20 04:42:08 -05:00
xisi
11b8b554f1
thanks, eclipse
2014-01-20 04:42:08 -05:00
xisi
befc5b9276
cleanup
2014-01-20 04:42:08 -05:00
xisi
ccc7fa6fe9
accidentally a word
2014-01-20 04:42:08 -05:00
xisi
2e7c461885
fix token_types table because I didn't specify id when inserting
2014-01-20 04:42:08 -05:00
xisi
fd49e0eb78
disabled is actually correct to use in cash out form, we want the css props
...
slightly optimization
2014-01-20 04:41:13 -05:00
xisi
03e0b2e51d
request fiddling
2014-01-20 04:41:13 -05:00
xisi
1993ff604f
Fixed undefined property in news class found by @neozonz
2014-01-20 04:41:13 -05:00
xisi
97835f33ca
fixed explicit time check for token validity
2014-01-20 04:41:13 -05:00
xisi
a987878c8e
removed extraneous disabling of a field in edit account page, thanks @rog1121
2014-01-20 04:41:13 -05:00
xisi
b0413226b4
removed extraneous disabling of a field in edit account page, thanks @rog1121
2014-01-20 04:41:13 -05:00
xisi
76a67cb71a
Changed the config options for CSRF/disabling forms
...
* Now an array to disable with granularity
* Fixed all CSRF tokens back to 1 min
* Added CSRF protection for unlock account
* Unified error message for all csrf tokens
* Fixed a few issues with last commit
2014-01-20 04:41:13 -05:00
xisi
163e5de1f0
cleaned up & updated config options
2014-01-20 04:40:38 -05:00
xisi
5e5e751271
switched account edit csrf token to 1 min now that saving works on an incorrect entry
2014-01-20 04:40:38 -05:00
xisi
36f3a16cc3
gave password reset its own csrf token
2014-01-20 04:40:38 -05:00
xisi
bd2999526e
fixed mobile templates, have not tested as they use same methods as main template
...
fixed change pw templates; added csrf token
added csrf protection for password reset
fixed reset and change pass templates; were missing csrf token (form only tpl)
2014-01-20 04:40:38 -05:00
xisi
7e3197246a
fixed error response to not leak info to users
2014-01-20 04:40:38 -05:00
xisi
cc6e58084f
Fixed an bug where a notice could be thrown on the edit page under the right conditions
...
Cleaned up login page logic which should fix #1459 & #1461
Fixed a bug in tools class where an incorrect config setting could throw a notice
2014-01-20 04:40:38 -05:00
xisi
dacadd8477
Fixed bug / undefined index when api settings are empty
2014-01-20 04:40:15 -05:00
xisi
62e341b877
finally cleaned up the edit account page to my liking
...
fixed change I made to test a fix for someone who was having issues
2014-01-20 04:38:53 -05:00
xisi
fed3981979
fixed isTokenValid, started work on edit fixes, recaptcha fix test
2014-01-20 04:38:25 -05:00
xisi
3b6a408c3f
forget the check, the crons run
2014-01-20 04:33:28 -05:00
xisi
d3a7d4bdbf
inc db version in version include
2014-01-20 04:32:54 -05:00
xisi
4be9330ca1
typo
2014-01-20 04:32:54 -05:00
xisi
18f808a85b
After messing around for quite awhile now with the SQL NOW() and timestamp comparison, I've come to the conclusion it's much better for my sanity to do the expiration check in php - there seems to be some divergence between the way this is handled between SQL setups I've tested. So there you go.
2014-01-20 04:32:54 -05:00
xisi
bacbb8c36c
after looking into this quite a bit, this is the correct way to do it after all
2014-01-20 04:30:17 -05:00
xisi
13e6c43ba5
add notify_email to accounts table and getUserNotifyEmail() method in user class
2014-01-20 04:30:17 -05:00
xisi
9ecd8d4d3e
added signup_timestamp to accounts table
...
added getSignupTime() method to user class
added 014_accounts_update.sql and updated 000_base_structure.sql
incremented db version
2014-01-20 04:30:17 -05:00