7 Commits

Author	SHA1	Message	Date
xisi	76a67cb71a	Changed the config options for CSRF/disabling forms ... * Now an array to disable with granularity * Fixed all CSRF tokens back to 1 min * Added CSRF protection for unlock account * Unified error message for all csrf tokens * Fixed a few issues with last commit	2014-01-20 04:41:13 -05:00
Jesse Collier	bc833eb40b	[IMPROVED] Adds Email label and removes maxlength ... When logging in from mobile, there currently is not an indicater to use email or username. This labels it correctly. Removed maxlength to allow for lengthier email addresses.	2014-01-16 14:42:05 +01:00
Sebastian Grewe	63f062af9d	[UPDATE] CSRF to Mobile template	2014-01-16 14:33:04 +01:00
Sebastian Grewe	bef4298e1f	[ADDED] Default re-Captcha HTML to mobile	2014-01-16 14:14:29 +01:00
Sebastian Grewe	f98d08df83	[SECURITY] Fixing XSS in PHP_SELF ... Fixes #1364 once merged.	2014-01-11 19:01:14 +01:00
Sebastian Grewe	628dabacb5	[CHANGE] Updated mobile theme	2013-10-09 11:15:11 +02:00
Sebastian Grewe	d4f4b9073f	Working jQuery Mobile frontend for mobile devices ... * Added mobile device detection PHP library * Call PHP library to decide which theme to use * Added theme as a configuration option into global config * Selectable Desktop theme (default: mmcFE) * Selectable Mobile theme (default: mobile) * Disable mobile theme support entirely **NOTE**: This requires updates to the `global.inc.php` so please check the dist file and update your config before filing a new issue! Addresses #25	2013-06-28 13:45:14 +02:00