Commit Graph

  • 15eca659b9 fixed a bug in edit account template moved csrf token to above template in smarty assigns fixed a bug in user class remove small login/fix header to catch up xisi 2014-01-17 10:26:44 -0500
  • d24f1050ae fixed test harness xisi 2014-01-17 09:31:39 -0500
  • 3625f5acf0 I need to l2markup xisi 2014-01-17 09:21:25 -0500
  • f119ff854a cmon readme do what I want xisi 2014-01-17 09:19:36 -0500
  • eb788ac621 updated test readme xisi 2014-01-17 09:17:39 -0500
  • bb80fdb337 PHPUnit test harness & sample test xisi 2014-01-17 09:16:11 -0500
  • a36a0c5b79 [UPDATE] CSRF protection + User/IP/Date & time added to login notification * Adds CSRF protection for multiple pages, see bottom * Adds User/IP/Date & time to successful login notification * New config option for sitewide CSRF protection * Fixed a bug in the contact form * Lots of cleanup related to CSRF stuff * Increments config version * CSRF protection: register, contact, account edit, workers, notifications, and invites xisi 2014-01-17 06:53:19 -0500
  • 8756036646 cleaned up account edit csrf slightly added csrf protection to workers under sitewide config added csrf protection to notifications under sitewide config added csrf protection to invitations under sitewide config cleaned up login page csrf cleaned up contactform/contactform page cleaned up register/register page moved config->csrf->forms->register to sitewide added login ip/user/time to notification on login xisi 2014-01-17 06:37:16 -0500
  • e5c9720174 Finished cleanup of account edit page added csrf protection to account edit page under sitewide config escaped all instances of CTOKEN for csrf in smarty templates xisi 2014-01-17 03:11:14 -0500
  • 9ccb5e15bc refactored old token usage in account edit page xisi 2014-01-17 01:45:08 -0500
  • d83542e03e Added method to get description image of csrf token with name moved sitewide into options portion of the config option csrf protection for contact form under sitewide config option changed register to 1 hour token xisi 2014-01-17 01:15:28 -0500
  • 58529547e0 Cleaned up logic of login page csrf protection added csrf protection to register page xisi 2014-01-16 23:48:38 -0500
  • 6da5510035 clean up pages that use csrftokens xisi 2014-01-16 23:19:25 -0500
  • 42d93f5beb specific timing for csrf tokens xisi 2014-01-16 23:04:29 -0500
  • a56140ca84 Moved csrftoken stuff into a class added getCurrentIP method to user class added config option for sitewide csrf protection xisi 2014-01-16 22:31:04 -0500
  • 19a0945be2 no config version inc xisi 2014-01-16 07:57:52 -0500
  • 6afc876d19 Merge changes from TheSerapher's pull/1404 Added re-Captcha to Login Page xisi 2014-01-16 07:52:52 -0500
  • 225b33af1b Update README.md Sebastian Grewe 2014-01-20 10:08:54 +0100
  • 808f92932d Update README.md Sebastian Grewe 2014-01-20 10:08:13 +0100
  • 954459b897 Merge branch 'next' of github.com:MPOS/php-mpos into next Sebastian Grewe 2014-01-20 09:58:33 +0100
  • 56fbf205b7 [ADDED] Comment for DEBUG levels Sebastian Grewe 2014-01-20 09:58:06 +0100
  • 2dab915d6e Merge pull request #1472 from MPOS/issue-1471 Sebastian Grewe 2014-01-20 00:42:35 -0800
  • 3359ada950 Merge pull request #1477 from MPOS/issue-1476 Sebastian Grewe 2014-01-20 00:16:55 -0800
  • 24e24576af [FIX] E-Mail login location Sebastian Grewe 2014-01-20 09:16:38 +0100
  • 81bf2f784a Merge pull request #1473 from rog1121/patch-3 Sebastian Grewe 2014-01-19 12:30:18 -0800
  • 77a0287c7f Update default.tpl rog1121 2014-01-19 12:37:54 -0700
  • 5b7cf6ab93 [FIX] SQL again, sigh Sebastian Grewe 2014-01-19 17:28:34 +0100
  • 8a983835c6 [FIX] Whoopsie SQL Sebastian Grewe 2014-01-19 17:25:55 +0100
  • fbea334121 [REMOVED] Unused stats update Sebastian Grewe 2014-01-19 17:22:40 +0100
  • d4db477c2d [FIX] Also honor diff for share difficulties if unset Sebastian Grewe 2014-01-19 17:22:00 +0100
  • b905089a01 [FIX] Removed debug output Sebastian Grewe 2014-01-19 17:18:09 +0100
  • 0fb543c3ed [FIX] Honor target_bits for hashrate Sebastian Grewe 2014-01-19 17:17:24 +0100
  • cf49db4535 [IMPROVED] Cronbased global Hash-/Sharerate cache Sebastian Grewe 2014-01-19 17:05:27 +0100
  • 10e3fcab7e Merge pull request #1468 from Neozonz/issue-1467 Sebastian Grewe 2014-01-19 06:39:13 -0800
  • 44e0fa6745 Reverted Neozonz 2014-01-19 09:35:39 -0500
  • 97ac3c29e5 Merge pull request #1469 from Metice/patch-1 Sebastian Grewe 2014-01-19 06:19:25 -0800
  • e665552c05 Update default.tpl Metice 2014-01-19 15:01:11 +0100
  • 73e3bb2284 Removed ORDER BY for single queries Neozonz 2014-01-19 06:05:55 -0500
  • 773286bd06 ORDER BY for Updates/Deletes Neozonz 2014-01-19 06:00:29 -0500
  • 38f5daba6b Search blocks by desc and order by for deletes Neozonz 2014-01-19 06:00:14 -0500
  • 47eb9f7fa0 Allow getWorkerHashRate to set invervals Neozonz 2014-01-19 05:56:31 -0500
  • 1bf9c1027a Merge pull request #1458 from TheSerapher/drop-small-login Sebastian Grewe 2014-01-17 06:45:55 -0800
  • 48a344ed25 [SECURITY] Dropped small login form Sebastian Grewe 2014-01-17 15:43:58 +0100
  • ba67814d6c Update README.md Sebastian Grewe 2014-01-17 14:26:22 +0100
  • b1f8d14c18 Update README.md Sebastian Grewe 2014-01-17 14:23:31 +0100
  • 832d43bd6b Update README.md Sebastian Grewe 2014-01-17 14:13:45 +0100
  • 0309886645 What a stupid thing of me to miss Joey 2014-01-17 03:53:09 -0500
  • a572d0cea0 Merge pull request #1351 from TheSerapher/issue-1345 Sebastian Grewe 2014-01-16 23:46:40 -0800
  • 1dfbeea5f7 Merge pull request #1420 from TheSerapher/issue-1343 Sebastian Grewe 2014-01-16 06:15:42 -0800
  • 12399a9c43 [REMOVED] Old code Sebastian Grewe 2014-01-16 15:01:25 +0100
  • 75729c6592 pplns payouts speed improvements / reworked insert method obigal 2014-01-12 15:07:22 -0500
  • bc833eb40b [IMPROVED] Adds Email label and removes maxlength Jesse Collier 2014-01-11 18:02:23 -0800
  • d9f591e7c8 [UPDATE] MPOS version due to major change Sebastian Grewe 2014-01-11 20:58:52 +0100
  • 2829f6a746 [IMPROVED] Dropped username from login Sebastian Grewe 2014-01-10 20:27:18 +0100
  • 63960e2e62 [IMPROVED] Allow e-mails only for login Sebastian Grewe 2014-01-10 20:04:57 +0100
  • 6b9583e867 Merge pull request #1404 from TheSerapher/issue-1400 Sebastian Grewe 2014-01-16 05:38:54 -0800
  • 63f062af9d [UPDATE] CSRF to Mobile template Sebastian Grewe 2014-01-16 14:33:04 +0100
  • bef4298e1f [ADDED] Default re-Captcha HTML to mobile Sebastian Grewe 2014-01-16 13:53:36 +0100
  • d5bff56f6f [ADDED] re-Captha admin options Sebastian Grewe 2014-01-16 11:09:25 +0100
  • b9d36bcfc9 [IMPROVED] Added re-Captcha to Login Page Sebastian Grewe 2014-01-14 13:28:15 +0100
  • a418d8c880 Merge pull request #1436 from xisi/next Sebastian Grewe 2014-01-16 04:16:30 -0800
  • 050a068d05 fix versioning xisi 2014-01-16 06:05:29 -0500
  • b613182dfb what fix, nothing to see here xisi 2014-01-16 04:46:46 -0500
  • e7725399c2 change function name for sending 2f emails xisi 2014-01-16 04:07:57 -0500
  • 8736123df2 improved bad csrf token error message cleaned up wording of config improved leadtime defaults in getCSRFToken xisi 2014-01-16 00:57:02 -0500
  • 764be9f0b7 fixed verbiage xisi 2014-01-15 19:54:38 -0500
  • 2d0938b35b [ADDED] Simple CSRF protection tokens * Adds config options for disabling, timeout lead time, and forms * Adds another salt in config that's used in the token * Adds protection for login form by default xisi 2014-01-15 19:32:33 -0500
  • bae30b2e4f fixed success_login tpl verbiage xisi 2014-01-15 16:29:32 -0500
  • 9d14902bb5 fix nocache in account/edit template xisi 2014-01-15 16:18:59 -0500
  • dc984aca63 fixed gitignore for eclipse, added templates/compile/mpos folder and a blank file to fix issues with setup guide/chowning compile dir xisi 2014-01-15 15:21:06 -0500
  • 8ed8338b3e fixed my incorrect use of notif settings array xisi 2014-01-15 14:50:45 -0500
  • f3a6d65eab send notifications on successful login when active xisi 2014-01-15 14:45:10 -0500
  • 741b6464ef success_login tpl for new notification xisi 2014-01-15 14:10:43 -0500
  • 802930cba1 save old token to use in case we error out xisi 2014-01-15 13:58:14 -0500
  • ed8349ef50 works as far as I can tell xisi 2014-01-15 11:47:44 -0500
  • 40d09a4ee4 oops, forgot to make sure we're auth'ed xisi 2014-01-15 11:10:36 -0500
  • a598eec924 fix sync changes done in edit.inc.php at the end of request xisi 2014-01-15 11:09:00 -0500
  • 1b1f552567 fix cosmetic issue #2 xisi 2014-01-15 11:04:40 -0500
  • a0ecbd0294 fix cosmetic issue xisi 2014-01-15 10:52:54 -0500
  • 96b734edaa fix how late we delete tokens for 2fa xisi 2014-01-15 10:35:24 -0500
  • d9d678be61 retooled most of the email confirmation setup xisi 2014-01-15 09:58:00 -0500
  • 69eec05cb7 simplified notifications with index, updated the settings method, and fixed up template, sql fixes xisi 2014-01-15 04:33:17 -0500
  • bfd803ec28 Incremented version, moved config options, return vals fixed in 2f checks xisi 2014-01-15 03:07:43 -0500
  • ef904858ae [Addition] E-mail confirmations for user actions * If enabled, sends e-mail to confirm user withdraws, edits and pw changes * Adds 4 config options, enabled + individual settings * Adds 3 new token_types xisi 2014-01-15 02:49:58 -0500
  • 409f41bc35 Merge pull request #1437 from nrpatten/next Sebastian Grewe 2014-01-16 02:42:05 -0800
  • 24a7085519 Merge pull request #1428 from nicoschtein/patch-16 Sebastian Grewe 2014-01-16 01:01:21 -0800
  • 956e8228d8 Merge pull request #1434 from rog1121/patch-1 Sebastian Grewe 2014-01-16 00:57:15 -0800
  • 6b8953c048 Update default.tpl nrpatten 2014-01-16 19:54:12 +1100
  • 43117e555d Update default.tpl nrpatten 2014-01-16 19:36:30 +1100
  • a90cda63d0 Merge pull request #1435 from rog1121/patch-2 Sebastian Grewe 2014-01-15 21:35:58 -0800
  • 415461fe32 Update default.tpl nrpatten 2014-01-16 12:28:57 +1100
  • 33763e12a6 Fix Dashboard rog1121 2014-01-15 18:01:51 -0700
  • 944550cf27 Update README.md rog1121 2014-01-15 17:23:29 -0700
  • ced8a16a66 [Fix] Wrong var name and Align nicoschtein 2014-01-15 18:04:22 -0200
  • 5c0decee41 Added date formatting to Last Login column nicoschtein 2014-01-15 17:57:57 -0200
  • 14ad54a8ed Added last_login table column to getAllUserStats nicoschtein 2014-01-15 17:51:10 -0200
  • a55da151a0 Added Last Login column to User Info section nicoschtein 2014-01-15 17:43:28 -0200
  • b767d88347 Merge pull request #1427 from nicoschtein/patch-15 Sebastian Grewe 2014-01-15 11:25:09 -0800
  • 618c50c49f Deduct fee to payout amount value on email notification nicoschtein 2014-01-15 15:57:22 -0200
  • 1c8a8034d4 Merge pull request #1425 from WKNiGHT-/patch-2 Sebastian Grewe 2014-01-15 09:54:15 -0800