7 Commits

Author	SHA1	Message	Date
xisi	76a67cb71a	Changed the config options for CSRF/disabling forms ... * Now an array to disable with granularity * Fixed all CSRF tokens back to 1 min * Added CSRF protection for unlock account * Unified error message for all csrf tokens * Fixed a few issues with last commit	2014-01-20 04:41:13 -05:00
xisi	163e5de1f0	cleaned up & updated config options	2014-01-20 04:40:38 -05:00
xisi	9ccb5e15bc	refactored old token usage in account edit page	2014-01-20 04:27:58 -05:00
xisi	d83542e03e	Added method to get description image of csrf token with name ... moved sitewide into options portion of the config option csrf protection for contact form under sitewide config option changed register to 1 hour token	2014-01-20 04:27:58 -05:00
xisi	6da5510035	clean up pages that use csrftokens	2014-01-20 04:26:04 -05:00
xisi	42d93f5beb	specific timing for csrf tokens	2014-01-20 04:26:04 -05:00
xisi	a56140ca84	Moved csrftoken stuff into a class ... added getCurrentIP method to user class added config option for sitewide csrf protection	2014-01-20 04:26:04 -05:00