rog1121
93981f6044
Various Fixes
2014-03-01 17:57:43 -07:00
rog1121
7e3623d659
Various Fixes
2014-03-01 17:56:23 -07:00
xisi
3006cb544f
Reworked csrf tokens, now enabled globally
...
The way this now works is, if csrf is enabled:
* Any new or existing template can have csrf protection by adding the hidden input ctoken that's in this batch to its form, removes any logic in templates
* Page controllers that already exist have been updated, new ones only require checking if csrf is enabled and valid
2014-01-24 13:00:24 -05:00
Sebastian Grewe
a1a3d7e873
[IMPROVED] Added donation minimum and rounding
...
* [ADDED] Config option `$config['donate_threshold']['min'] = 1;`
* [VERSION] Incremented config file version to `0.0.6`
* [CHANGED] Round donations to at least two digits
* [CHANGED] Honor minimum set pool donation percentage
* [UPDATED] Account edit template
Fixes #1475 once merged
2014-01-24 10:06:13 +01:00
Sebastian Grewe
0edd964930
Merge pull request #1507 from xisi/security-js-pwstrength
...
Simple javascript password strength/match
2014-01-21 00:04:18 -08:00
xisi
a20c2324e2
Added pw strength/match to change password form
2014-01-21 00:02:57 -05:00
Sebastian Grewe
eb6692b31c
Merge pull request #1481 from raistlinthewiz/next
...
tx fee's shouldn't be %
2014-01-20 07:46:45 -08:00
Hüseyin Uslu
51d0879f8d
Wording fix for index.php?page=account&action=edit - tx fee's shouldn't be %
2014-01-20 17:44:45 +02:00
xisi
fd49e0eb78
disabled is actually correct to use in cash out form, we want the css props
...
slightly optimization
2014-01-20 04:41:13 -05:00
xisi
a987878c8e
removed extraneous disabling of a field in edit account page, thanks @rog1121
2014-01-20 04:41:13 -05:00
xisi
b0413226b4
removed extraneous disabling of a field in edit account page, thanks @rog1121
2014-01-20 04:41:13 -05:00
xisi
76a67cb71a
Changed the config options for CSRF/disabling forms
...
* Now an array to disable with granularity
* Fixed all CSRF tokens back to 1 min
* Added CSRF protection for unlock account
* Unified error message for all csrf tokens
* Fixed a few issues with last commit
2014-01-20 04:41:13 -05:00
xisi
bd2999526e
fixed mobile templates, have not tested as they use same methods as main template
...
fixed change pw templates; added csrf token
added csrf protection for password reset
fixed reset and change pass templates; were missing csrf token (form only tpl)
2014-01-20 04:40:38 -05:00
xisi
15eca659b9
fixed a bug in edit account template
...
moved csrf token to above template in smarty assigns
fixed a bug in user class
remove small login/fix header to catch up
2014-01-20 04:30:17 -05:00
xisi
e5c9720174
Finished cleanup of account edit page
...
added csrf protection to account edit page under sitewide config
escaped all instances of CTOKEN for csrf in smarty templates
2014-01-20 04:29:13 -05:00
xisi
9d14902bb5
fix nocache in account/edit template
2014-01-16 05:55:57 -05:00
xisi
ed8349ef50
works as far as I can tell
2014-01-16 05:53:36 -05:00
xisi
d9d678be61
retooled most of the email confirmation setup
2014-01-16 05:53:36 -05:00
xisi
ef904858ae
[Addition] E-mail confirmations for user actions
...
* If enabled, sends e-mail to confirm user withdraws, edits and pw changes
* Adds 4 config options, enabled + individual settings
* Adds 3 new token_types
2014-01-16 05:42:43 -05:00
nrpatten
6b8953c048
Update default.tpl
...
[FIX] Alignment of text and image.
2014-01-16 19:54:12 +11:00
nrpatten
43117e555d
Update default.tpl
...
[FIX] Me being an idiot :)
2014-01-16 19:36:30 +11:00
nrpatten
415461fe32
Update default.tpl
...
[FIX] Issue #1423 Add mouse over explanation for TX fee for auto payouts and manual payouts.
2014-01-16 12:28:57 +11:00
nicoschtein
451d57cbce
Changed txfee to txfee_manual in edit account manual payout request
2014-01-14 19:14:11 -02:00
Sebastian Grewe
adf2d4782b
[FIX] Potential caching issue
2014-01-14 17:14:41 +01:00
Sebastian Grewe
f98d08df83
[SECURITY] Fixing XSS in PHP_SELF
...
Fixes #1364 once merged.
2014-01-11 19:01:14 +01:00
Sebastian Grewe
64958782a4
[FIX] Closing nocache tags
...
Fixes #1255 once merged.
2014-01-06 07:25:09 +01:00
Sebastian Grewe
11c417230b
[FIX] Reset pin button
2014-01-02 12:25:22 +01:00
Sebastian Grewe
4c3421cc8a
Merge pull request #1165 from Neozonz/issue-1164
...
Initial commit for pin reset functionality
2014-01-02 02:02:37 -08:00
Sebastian Grewe
020905679a
[FIX] Display TX Fee in account panel
...
Fixes #1196 once merged.
2014-01-01 08:43:53 +01:00
Neozonz
e3db7e0a02
Initial commit for pin reset functionality
2013-12-30 03:29:20 -05:00
Sebastian Grewe
0d6ee6d821
[IMPROVED] Auto/Manual Payout Disabled
...
This will re-add the ability to disable auto or manual payouts. Option
to disable the entire cronjob is left intact.
Fixes #1034 when merged.
2013-12-19 15:17:29 +01:00
Frederick Behrends
a407f964d7
fix autopayment for coins with larger blockreward
2013-12-16 20:01:21 +01:00
Sebastian Grewe
afb5fc6c0d
[CHANGED] Merge payout crons
...
* Merge manual and auto-payout into single cronjob
* Update template/code to reflect single payout cron
* Update monitoring page
* Update disable payouts option in admin panel settings
* Update account payout page to use new option
This will fix #967 once merged.
2013-12-12 11:45:33 +01:00
Sebastian Grewe
02c9be54ed
[MAJOR] Changing project name to MPOS
...
* Adjusted mmcfe-ng occurences in code
* Adjusted Database strucutre to only supply the full structure
* Adjusted default template to MPOS
Addresses #643
2013-10-07 10:10:49 +02:00