ae47437ab7fixed worker delete csrf thing I stubbed earlier took to field out of the rest of the login forms
xisi
2014-01-29 09:41:50 -0500
c36413d70ctests not checks
xisi
2014-01-29 09:17:58 -0500
f298c60260little more cleanup put version check/config check after sessions/rate limiter so it works correctly & only uses 1 db hit
xisi
2014-01-29 09:16:03 -0500
568445845achanges DEBUG SALT and SALTY from defines to variables switched that in all places used (class loads mostly) moved all includes at the beginning of index into bootstrap moves *_PATH defines from config to bootstrap config now uses defaults first, then user config
xisi
2014-01-29 07:34:50 -0500
c2b1c68699added check if we can write config files to admin_checks, we shouldnt be able to
xisi
2014-01-29 05:20:06 -0500
923795c23b[FIX] Ignore AP for empty/NULL addresses
Sebastian Grewe
2014-01-29 09:58:18 +0100
56ad9266d3last login time not this login time
xisi
2014-01-29 03:55:51 -0500
d84018763d[FIX] Admin Panel Users: Show user shares
Sebastian Grewe
2014-01-29 09:27:34 +0100
6e23480434[FIX] Use proper variable for error report
Sebastian Grewe
2014-01-29 08:58:35 +0100
d3aa7ad1d5Merge branch 'next' of github.com:MPOS/php-mpos into next
Sebastian Grewe
2014-01-29 08:52:39 +0100
d007358710[FIX] Ignore missing HTTP_REFERRER
Sebastian Grewe
2014-01-29 08:52:12 +0100
74dec2796dAdded last login time/ip address popup on login w/ close button Info/blue if your ip matches, warning/yellow if not
xisi
2014-01-28 15:45:24 -0500
3efe979ae3Switch config over to wiki, yay
xisi
2014-01-28 14:24:48 -0500
a180c733c2Merge pull request #1622 from Zen00/The-Holy-Branch
Sebastian Grewe
2014-01-28 07:38:43 -0800
c373fc7192removed exploits/added to gitignore for later
xisi
2014-01-26 11:42:14 -0500
63c3b96a29now enforce client & server validity on login with strict on fixed csrf token check for a few pages where it mightve been broken session manager now can be bound to base user class and used, like in login logout now pushes you to login regardless, no longer has param to push to custom url fixed validate client, hijacking sessions no longer works
Joey
2014-01-26 11:18:31 -0500
795e019d0dcleaned up config options a bit
Joey
2014-01-26 09:25:46 -0500
493c43e0edupdated check in autoloader so default needs to be changed if SECHASH_CHECK is enabled
Joey
2014-01-26 09:00:49 -0500
d5f1c97f82fixed check against define like it used to even if SECHASH_CHECK is disabled fixed ajax calls in memcache limiter to use REQUEST page/action rather than QUERY_STRING
Joey
2014-01-26 08:08:20 -0500