15eca659b9fixed a bug in edit account template moved csrf token to above template in smarty assigns fixed a bug in user class remove small login/fix header to catch up
xisi
2014-01-17 10:26:44 -0500
d24f1050aefixed test harness
xisi
2014-01-17 09:31:39 -0500
3625f5acf0I need to l2markup
xisi
2014-01-17 09:21:25 -0500
f119ff854acmon readme do what I want
xisi
2014-01-17 09:19:36 -0500
eb788ac621updated test readme
xisi
2014-01-17 09:17:39 -0500
bb80fdb337PHPUnit test harness & sample test
xisi
2014-01-17 09:16:11 -0500
a36a0c5b79[UPDATE] CSRF protection + User/IP/Date & time added to login notification * Adds CSRF protection for multiple pages, see bottom * Adds User/IP/Date & time to successful login notification * New config option for sitewide CSRF protection * Fixed a bug in the contact form * Lots of cleanup related to CSRF stuff * Increments config version * CSRF protection: register, contact, account edit, workers, notifications, and invites
xisi
2014-01-17 06:53:19 -0500
8756036646cleaned up account edit csrf slightly added csrf protection to workers under sitewide config added csrf protection to notifications under sitewide config added csrf protection to invitations under sitewide config cleaned up login page csrf cleaned up contactform/contactform page cleaned up register/register page moved config->csrf->forms->register to sitewide added login ip/user/time to notification on login
xisi
2014-01-17 06:37:16 -0500
e5c9720174Finished cleanup of account edit page added csrf protection to account edit page under sitewide config escaped all instances of CTOKEN for csrf in smarty templates
xisi
2014-01-17 03:11:14 -0500
9ccb5e15bcrefactored old token usage in account edit page
xisi
2014-01-17 01:45:08 -0500
d83542e03eAdded method to get description image of csrf token with name moved sitewide into options portion of the config option csrf protection for contact form under sitewide config option changed register to 1 hour token
xisi
2014-01-17 01:15:28 -0500
58529547e0Cleaned up logic of login page csrf protection added csrf protection to register page
xisi
2014-01-16 23:48:38 -0500
6da5510035clean up pages that use csrftokens
xisi
2014-01-16 23:19:25 -0500
42d93f5bebspecific timing for csrf tokens
xisi
2014-01-16 23:04:29 -0500
a56140ca84Moved csrftoken stuff into a class added getCurrentIP method to user class added config option for sitewide csrf protection
xisi
2014-01-16 22:31:04 -0500
19a0945be2no config version inc
xisi
2014-01-16 07:57:52 -0500
6afc876d19Merge changes from TheSerapher's pull/1404 Added re-Captcha to Login Page
xisi
2014-01-16 07:52:52 -0500
225b33af1bUpdate README.md
Sebastian Grewe
2014-01-20 10:08:54 +0100
808f92932dUpdate README.md
Sebastian Grewe
2014-01-20 10:08:13 +0100
954459b897Merge branch 'next' of github.com:MPOS/php-mpos into next
Sebastian Grewe
2014-01-20 09:58:33 +0100
56fbf205b7[ADDED] Comment for DEBUG levels
Sebastian Grewe
2014-01-20 09:58:06 +0100
2dab915d6eMerge pull request #1472 from MPOS/issue-1471
Sebastian Grewe
2014-01-20 00:42:35 -0800
3359ada950Merge pull request #1477 from MPOS/issue-1476
Sebastian Grewe
2014-01-20 00:16:55 -0800
24e24576af[FIX] E-Mail login location
Sebastian Grewe
2014-01-20 09:16:38 +0100
81bf2f784aMerge pull request #1473 from rog1121/patch-3
Sebastian Grewe
2014-01-19 12:30:18 -0800
2d0938b35b[ADDED] Simple CSRF protection tokens * Adds config options for disabling, timeout lead time, and forms * Adds another salt in config that's used in the token * Adds protection for login form by default
xisi
2014-01-15 19:32:33 -0500
9d14902bb5fix nocache in account/edit template
xisi
2014-01-15 16:18:59 -0500
dc984aca63fixed gitignore for eclipse, added templates/compile/mpos folder and a blank file to fix issues with setup guide/chowning compile dir
xisi
2014-01-15 15:21:06 -0500
8ed8338b3efixed my incorrect use of notif settings array
xisi
2014-01-15 14:50:45 -0500
f3a6d65eabsend notifications on successful login when active
xisi
2014-01-15 14:45:10 -0500
741b6464efsuccess_login tpl for new notification
xisi
2014-01-15 14:10:43 -0500
802930cba1save old token to use in case we error out
xisi
2014-01-15 13:58:14 -0500
ed8349ef50works as far as I can tell
xisi
2014-01-15 11:47:44 -0500
40d09a4ee4oops, forgot to make sure we're auth'ed
xisi
2014-01-15 11:10:36 -0500
a598eec924fix sync changes done in edit.inc.php at the end of request
xisi
2014-01-15 11:09:00 -0500