8 Commits

Author	SHA1	Message	Date
rog1121	93981f6044	Various Fixes	2014-03-01 17:57:43 -07:00
rog1121	7e3623d659	Various Fixes	2014-03-01 17:56:23 -07:00
xisi	b728b680ca	blah blah	2014-01-28 07:26:08 -05:00
xisi	3006cb544f	Reworked csrf tokens, now enabled globally ... The way this now works is, if csrf is enabled: * Any new or existing template can have csrf protection by adding the hidden input ctoken that's in this batch to its form, removes any logic in templates * Page controllers that already exist have been updated, new ones only require checking if csrf is enabled and valid	2014-01-24 13:00:24 -05:00
xisi	76a67cb71a	Changed the config options for CSRF/disabling forms ... * Now an array to disable with granularity * Fixed all CSRF tokens back to 1 min * Added CSRF protection for unlock account * Unified error message for all csrf tokens * Fixed a few issues with last commit	2014-01-20 04:41:13 -05:00
xisi	36f3a16cc3	gave password reset its own csrf token	2014-01-20 04:40:38 -05:00
xisi	bd2999526e	fixed mobile templates, have not tested as they use same methods as main template ... fixed change pw templates; added csrf token added csrf protection for password reset fixed reset and change pass templates; were missing csrf token (form only tpl)	2014-01-20 04:40:38 -05:00
Sebastian Grewe	841d986726	initial work on password reset, not working fully yet	2013-05-25 10:58:53 +02:00