1993ff604fFixed undefined property in news class found by @neozonz
xisi
2014-01-18 23:50:24 -0500
97835f33cafixed explicit time check for token validity
xisi
2014-01-18 22:21:33 -0500
a987878c8eremoved extraneous disabling of a field in edit account page, thanks @rog1121
xisi
2014-01-18 21:36:59 -0500
b0413226b4removed extraneous disabling of a field in edit account page, thanks @rog1121
xisi
2014-01-18 21:29:15 -0500
76a67cb71aChanged the config options for CSRF/disabling forms * Now an array to disable with granularity * Fixed all CSRF tokens back to 1 min * Added CSRF protection for unlock account * Unified error message for all csrf tokens * Fixed a few issues with last commit
xisi
2014-01-18 20:29:12 -0500
163e5de1f0cleaned up & updated config options
xisi
2014-01-18 17:20:36 -0500
5e5e751271switched account edit csrf token to 1 min now that saving works on an incorrect entry
xisi
2014-01-18 17:12:41 -0500
36f3a16cc3gave password reset its own csrf token
xisi
2014-01-18 17:05:13 -0500
bd2999526efixed mobile templates, have not tested as they use same methods as main template fixed change pw templates; added csrf token added csrf protection for password reset fixed reset and change pass templates; were missing csrf token (form only tpl)
xisi
2014-01-18 16:53:28 -0500
7e3197246afixed error response to not leak info to users
xisi
2014-01-18 16:08:02 -0500
cc6e58084fFixed an bug where a notice could be thrown on the edit page under the right conditions Cleaned up login page logic which should fix#1459 & #1461 Fixed a bug in tools class where an incorrect config setting could throw a notice
xisi
2014-01-18 15:25:09 -0500
dacadd8477Fixed bug / undefined index when api settings are empty
xisi
2014-01-18 14:40:50 -0500
62e341b877finally cleaned up the edit account page to my liking fixed change I made to test a fix for someone who was having issues
xisi
2014-01-18 03:21:38 -0500
fed3981979fixed isTokenValid, started work on edit fixes, recaptcha fix test
xisi
2014-01-17 23:43:55 -0500
3b6a408c3fforget the check, the crons run
xisi
2014-01-17 22:46:30 -0500
d3a7d4bdbfinc db version in version include
xisi
2014-01-17 20:48:53 -0500
18f808a85bAfter messing around for quite awhile now with the SQL NOW() and timestamp comparison, I've come to the conclusion it's much better for my sanity to do the expiration check in php - there seems to be some divergence between the way this is handled between SQL setups I've tested. So there you go.
xisi
2014-01-17 18:04:29 -0500
bacbb8c36cafter looking into this quite a bit, this is the correct way to do it after all
xisi
2014-01-17 18:04:29 -0500
13e6c43ba5add notify_email to accounts table and getUserNotifyEmail() method in user class
xisi
2014-01-17 15:35:15 -0500
9ecd8d4d3eadded signup_timestamp to accounts table added getSignupTime() method to user class added 014_accounts_update.sql and updated 000_base_structure.sql incremented db version
xisi
2014-01-17 11:39:06 -0500