Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | - Patch #169937 by Heine, drumm: user_save should not regenerate the session ↵ | Dries Buytaert | 2008-12-16 | |
| | | | | even when the current user is not the edited user. | |||
* | - Patch #337820 by Dave Reid, Damien Tournoud, et al: rename menu path ↵ | Dries Buytaert | 2008-11-29 | |
| | | | | 'logout' to 'user/logout'. For real now. | |||
* | Reverting #337820 once more, as it causes mysterious test failures. | Angie Byron | 2008-11-27 | |
| | ||||
* | - Patch #337820 by Dave Reid: rename menu path logout to user/logout. | Dries Buytaert | 2008-11-25 | |
| | ||||
* | - Patch #280934 by pwolanin, swentel, et al: harden session regeneration. ↵ | Dries Buytaert | 2008-11-24 | |
| | | | | It took a while, but it comes with tests and extra features now. | |||
* | Reverting #337820 which causes menu tests to fail, unbeknownst to testing ↵ | Angie Byron | 2008-11-24 | |
| | | | | bot. Hrm... | |||
* | #337820 by Dave Reid: Rename menu path 'logout' to 'user/logout' for ↵ | Angie Byron | 2008-11-23 | |
| | | | | consistency. | |||
* | #11077 by mfb, KarenS, macgirvin, and jjkd: Can you say Daylight Savings ↵ | Angie Byron | 2008-11-20 | |
| | | | | Time? I bet you didn't think Drupal ever would! :) | |||
* | #107051 by Dave Reid, gdevlugt, and vladimir.dolgopolov: Remove duplicate ↵ | Angie Byron | 2008-11-19 | |
| | | | | names from Who's Online block. | |||
* | - Rollback of patch #334671 by Steve Dondley: still tests failing. | Dries Buytaert | 2008-11-18 | |
| | ||||
* | - Patch #334671 by Steve Dondley: users cannot be assigned to roles or ↵ | Dries Buytaert | 2008-11-18 | |
| | | | | removed from them -- comes with tests. Yay. | |||
* | - Patch #334030 by justinrandell: replace module_list with module_implements ↵ | Dries Buytaert | 2008-11-15 | |
| | | | | when calling a hook. | |||
* | - Patch #325665 by chx, Damien Tournoud, justinrandell et al: improved the ↵ | Dries Buytaert | 2008-11-11 | |
| | | | | cache registry lookups. | |||
* | #315798 by Rob Loach, mfer, Grugnog2, and sun: Add weighting to drupal_add_js(). | Angie Byron | 2008-11-10 | |
| | ||||
* | - Patch #329646 by Damien Tournoud: properly reset user_access(). | Dries Buytaert | 2008-11-05 | |
| | ||||
* | - Patch #266358 by Rob Loach, mfer: use array in drupal_add_css(). | Dries Buytaert | 2008-10-26 | |
| | ||||
* | - Patch #199870 by alpritt et al: beter password strength checker. Really cool. | Dries Buytaert | 2008-10-19 | |
| | ||||
* | #282405 by Damien Tournoud, lilou, Dave Reid: Enforce coding standard on elseif. | Angie Byron | 2008-10-12 | |
| | ||||
* | #313213 by maartenvg, Gábor Hojtsy: Add a 'title' attribute for permissions ↵ | Angie Byron | 2008-10-09 | |
| | | | | to allow for localization of permission names | |||
* | #142995 by dopry, drewish, quicksketch, jpetso, and flobruit: Adding ↵ | Angie Byron | 2008-10-09 | |
| | | | | hook_file_X(). This is an enabler of lots and lots of goodies. See CHANGELOG.txt for more. Awesome work, guys. :) | |||
* | - Patch #310212 by justinrandell, catch, et all: killed in _user hook, as ↵ | Dries Buytaert | 2008-10-06 | |
| | | | | well as two small kittens. | |||
* | - Patch #305236 by crell: made OpenID work again. We need tests for this. | Dries Buytaert | 2008-09-21 | |
| | ||||
* | #259623 by dopry and Damien Tournoud: Convert includes/requires to use ↵ | Angie Byron | 2008-09-20 | |
| | | | | absolute paths. | |||
* | - Patch #305645 by pwolanin: ['REQUEST_TIME'] -> REQUEST_TIME. Improved ↵ | Dries Buytaert | 2008-09-17 | |
| | | | | developer experience. | |||
* | - Patch #253702 by Damien Tournoud et al: further clean-up of the session ↵ | Dries Buytaert | 2008-09-15 | |
| | | | | handling code. | |||
* | #308434 by drewish, dopry, quicksketch, aaron, jhedstrom, and friends: ↵ | Angie Byron | 2008-09-15 | |
| | | | | Massive file.inc cleanup aaaaaand... tests! Yay! :D | |||
* | #259679 by Damien Tournoud: Fix user/X/edit tab on user tracker page. | Angie Byron | 2008-09-08 | |
| | ||||
* | - Patch #302763 by Dave Reid, Rob Loach: replace time() by ['REQUEST_TIME'] ↵ | Dries Buytaert | 2008-09-06 | |
| | | | | as per Rasmus' suggestion. Removed drupal_referrer() for consistency. | |||
* | - Patch #225450 by Crell, chx, bjaspan, catch, swentel, recidive et al: next ↵ | Dries Buytaert | 2008-08-21 | |
| | | | | generation database layer for Drupal 7. | |||
* | - Patch #265899 by mfb: uri_brief mail token did not support https URLs. | Dries Buytaert | 2008-08-17 | |
| | ||||
* | - Patch #237381 by beeradb, flobruit: renamed () parameter from user_save() to . | Dries Buytaert | 2008-08-14 | |
| | ||||
* | - Patch #165642 by Damien Tournoud et al: fixed SQL error. | Dries Buytaert | 2008-08-08 | |
| | ||||
* | - Patch #218189 by Arancaytar, fago, et al: invoke hook_user before deleting ↵ | Dries Buytaert | 2008-08-02 | |
| | | | | user from database. | |||
* | - Patch #252013 by Eaton, pwolanin, Susurrus et al: drupal_render() now ↵ | Dries Buytaert | 2008-07-16 | |
| | | | | printes #markup, not #value. | |||
* | - Patch #266488 by Damien Tournoud: cleanup for user_validate_name(). | Dries Buytaert | 2008-06-27 | |
| | ||||
* | - Patch #270045 by drewish, Susurrus: clean up return values. | Dries Buytaert | 2008-06-18 | |
| | ||||
* | - Patch #101543 by webchick: document all constants. | Dries Buytaert | 2008-05-26 | |
| | ||||
* | - Patch #259463 by dmitrig01: notification e-mail for pending user ↵ | Dries Buytaert | 2008-05-17 | |
| | | | | registrations had blank subject line. | |||
* | - Patch #73874 by pwolanin: normalize the permissions table and wrote ↵ | Dries Buytaert | 2008-05-07 | |
| | | | | simpletests for the (new) permission handling. At last. | |||
* | - Patch #221964 by chx, dopry, webernet, moshe, webchick, justinrandall, ↵ | Dries Buytaert | 2008-05-06 | |
| | | | | | | | | | | | flobruit et al. Can you say 'registry'? Drupal now maintains an internal registry of all functions or classes in the system, allowing it to lazy-load code files as needed (reducing the amount of code that must be parsed on each request). The list of included files is cached per menu callback for subsequent loading by the menu router. This way, a given page request will have all the code it needs but little else, minimizing time spent parsing unneeded code. | |||
* | - Patch #227830 by JohnAlbin: link attributes added to l() incorrectly. | Dries Buytaert | 2008-05-02 | |
| | ||||
* | - Patch #249546 by pwolanin: rip menu access inheritance -- was already ↵ | Dries Buytaert | 2008-04-23 | |
| | | | | committed to D6. | |||
* | - Patch #228594 by catch and flobruit: some code clean-up. | Dries Buytaert | 2008-04-19 | |
| | ||||
* | - Patch #245115 by kkaefer, John Morahan, JohnAlbin et al: after a long ↵ | Dries Buytaert | 2008-04-14 | |
| | | | | discussion we've decided to make the concatenation operator consistent with the other operators. | |||
* | - Patch #216072 by recidive, David Rothstein, ptalindstrom et al: switched ↵ | Dries Buytaert | 2008-04-10 | |
| | | | | | | | | | | | from numeric block IDs to string IDs. The short explanation is that Drupal uses a lot of numeric deltas in the block system; blocks are identified by the 'module' and the 'delta'. In early Drupal, delta was numeric, but somewhere along the line it was changed to be possibly a string. In modern Drupal, block overrides are easily done via block-MODULE-DELTA.tpl.php. The primary motivation to switch to string IDs everywhere is to make these deltas friendlier to themers: block-user-0.tpl.php --> block-user-navigation.tpl.php block-user-1.tpl.php --> block-user-login.tpl.php You get the picture. | |||
* | - Patch #244597 by drumm: remove login form text as this can now be ↵ | Dries Buytaert | 2008-04-10 | |
| | | | | accomplished using hook form_alter. | |||
* | - Patch #228594 by catch et al: removed access rule functionality from core. | Dries Buytaert | 2008-04-08 | |
| | | | | | | | | | | | The access rules capability of user module has been stripped down to a simple method for blocking IP addresses. E-mail and username restrictions are now available in a contributed module. IP address range blocking is no longer supported and should be done at the server level. This patch is partly motiviated by the fact that at the usability testing, it frequently came up that users went to "access rules" when trying to configure their site settings. | |||
* | - Patch #29706 by pwolanin, solardiz, et al: more secure password hashing. | Dries Buytaert | 2008-03-31 | |
| | | | | | | | | | | | | | | | | | | | This is a big and important patch for Drupal's security. We are switching to much stronger password hashes that are also compatible with the Portable PHP password hashing framework. The new password hashes defeat a number of attacks, including: - The ability to try candidate passwords against multiple hashes at once. - The ability to use pre-hashed lists of candidate passwords. - The ability to determine whether two users have the same (or different) password without actually having to guess one of the passwords. Also implemented a pluggable password hashing API (similar to how an alternate cache mechanism can be used) to allow developers to readily substitute an alternative hashing and authentication scheme. Thanks all! | |||
* | - Patch #226501 by webchick: permission descriptions were used incorrectly ↵ | Dries Buytaert | 2008-03-19 | |
| | | | | at admin/user/user. | |||
* | - Patch #30984 by webchick, keith.smith, kkaefer, Crell et al: provide ↵ | Dries Buytaert | 2008-02-20 | |
| | | | | descriptions for permissions on the permission administration page. |