Commit Graph

176 Commits

Author SHA1 Message Date
Marc Delisle
c221da970d remove version info on cookie login screen 2008-07-15 14:14:09 +00:00
Marc Delisle
5da6e4cc36 protection against XSS when register_globals is on and .htaccess has no effect 2008-06-21 14:01:54 +00:00
Marc Delisle
b09facaff8 bug #1935652 [auth] Access denied (show warning about mcrypt on login page) 2008-04-06 11:11:56 +00:00
Marc Delisle
7895e09178 patch #1930057 [auth] colon in password prevents HTTP login on CGI/IIS 2008-04-03 12:42:33 +00:00
Marc Delisle
82e7384223 bug #1813508 [login] Missing parameter: field after re-login 2007-12-18 18:13:24 +00:00
Marc Delisle
960064b55f bug #1835123 [security] fixed XSS vulnerability on login page, thanks to Tim Brown (Nth Dimension) for the advisory and to Sebastian for the fix 2007-11-20 12:55:14 +00:00
Marc Delisle
d12c01fd59 patch #1821154, HTTP authentication: fix auth working with php/mod_fastcgi 2007-11-01 20:59:48 +00:00
Marc Delisle
c0017d0f42 patch #1817529 [auth] Incorrect login via URL when AllowArbitraryServer is true, thanks to Juergen Wind 2007-10-22 16:47:52 +00:00
Marc Delisle
34f61bb2fa patch #1791576 HTTP auth: support REDIRECT_REMOTE_USER, thanks to Allard 2007-09-17 16:39:25 +00:00
Marc Delisle
609d38a9cd start QA_11 2007-07-18 15:55:11 +00:00
Marc Delisle
e2599e32c5 start QA_2_11 2007-07-18 15:54:09 +00:00
Marc Delisle
5b6c3d7867 this comment is no longer true 2007-07-03 00:28:32 +00:00
Marc Delisle
93bbd8b148 use session_destroy() instead of session_cleanup.lib.php 2007-06-25 11:41:58 +00:00
Marc Delisle
244b62f61d cleanup of user's choices stored in session 2007-06-23 22:18:15 +00:00
Marc Delisle
c5399453a8 patch #1712514 specify host for single signon, thanks to Thierry 2007-06-07 17:14:21 +00:00
Sebastian Mendel
573a6161bd fixed code indention 2007-05-09 12:18:57 +00:00
Sebastian Mendel
cfeb306526 coding standard: no spaces inside braces 2007-04-01 11:02:46 +00:00
Sebastian Mendel
adb39168cc coding standard: no braces around include 2007-04-01 09:51:41 +00:00
Sebastian Mendel
008734f8b0 do NEVER unset $table or $db;
no need to test for isset() on $db and $table;
always test with strlen() for valid $table or $db;
2007-03-30 09:12:05 +00:00
Marc Delisle
b949c7459a bug #1676012 [auth] strip non-US-ASCII characters (RFC2616) 2007-03-21 13:16:31 +00:00
Sebastian Mendel
817e790762 synced/fixed vim line 2007-03-19 17:55:39 +00:00
Sebastian Mendel
3ab281b786 fixed display of timeout message 2007-03-19 13:06:23 +00:00
Marc Delisle
b61b210703 with the "set" command vim no longer complains 2007-03-16 17:12:25 +00:00
Sebastian Mendel
c29b8627f9 hopefully cookie login is now working again as expected ... 2007-03-16 16:55:45 +00:00
Marc Delisle
e190478d01 vim complains with a */ at the end of options 2007-03-16 16:38:42 +00:00
Sebastian Mendel
319947b3fb fixed last fix of fix 2007-03-15 17:38:51 +00:00
Sebastian Mendel
82a014ca7a fixed Notice: Undefined index (thanks to Marc Delisle) 2007-03-15 15:19:58 +00:00
Sebastian Mendel
d2b12f612c bug #1666657 Cookie password delete on timeout / inactivity 2007-03-15 11:49:12 +00:00
Sebastian Mendel
3e9a417afa bug #1668724 JavaScript focus login Opera 2007-03-15 10:16:15 +00:00
Marc Delisle
911316238b bug 1658160, warning about mcrypt 2007-02-14 21:09:18 +00:00
Marc Delisle
42ac66ad74 get rid of propicon 2007-02-10 15:58:46 +00:00
Michal Čihař
6b128566f3 Make server switching honour more server settings (patch #1630104). 2007-01-18 11:11:15 +00:00
Michal Čihař
fb9a3a598e Check before commit! 2006-11-17 08:49:30 +00:00
Michal Čihař
0e48825a46 Finalise SVN migration. 2006-10-12 16:27:13 +00:00
Michal Čihař
91c7b9a8d3 Sync token name. 2006-10-03 13:12:35 +00:00
Sebastian Mendel
1eadc0a41a use @todo tag for todo items, to show up in generated documentation 2006-09-21 14:28:46 +00:00
Michal Čihař
1b77a0c4d9 Fix typo. 2006-08-25 07:46:52 +00:00
Michal Čihař
554b4a00e4 Add support for LogoutURL. 2006-08-24 12:39:16 +00:00
Michal Čihař
862bc35be7 Add single signon authentication method (patch #1545366, patch #1541379, patch #1531302 and RFE #1031391). 2006-08-24 12:38:29 +00:00
Marc Delisle
efad3a52d2 bug #1542875 Cookie auth on IIS 2006-08-21 11:59:24 +00:00
Marc Delisle
8642016a3a bug #1536112, config not loaded on MySQL error 2002 or 2003 2006-08-12 15:33:55 +00:00
Marc Delisle
37a5d112d9 bug #1477402, if default server fails you cannot switch in config auth 2006-07-06 15:59:32 +00:00
Marc Delisle
1948d9b030 improvement suggested by Sebastian 2006-06-21 16:08:59 +00:00
Marc Delisle
4af5042b1a bug #1504662, server message for http auth_type 2006-06-21 12:33:08 +00:00
Marc Delisle
8c3380e1ba unnecessary disc access 2006-06-09 20:58:16 +00:00
Marc Delisle
e32dceaa78 unnecessary disc access 2006-06-09 20:55:08 +00:00
Marc Delisle
110277793a patch #1502453, unnecessary disc access 2006-06-09 20:45:17 +00:00
Marc Delisle
6ed8175b45 only show the Cookies message if we detect that cookies are disabled 2006-06-02 12:39:53 +00:00
Michal Čihař
c542c2ee09 custom headers are not part of container 2006-05-15 13:58:50 +00:00
Michal Čihař
e7a09aad1a Not so wide login form (RFE #1445541). 2006-05-15 13:38:11 +00:00