summaryrefslogtreecommitdiff
path: root/inc/auth.php
Commit message (Collapse)AuthorAge
* use DOKU_URL as key for sessions and auth cookie #896 #581 #884Andreas Gohr2006-10-03
| | | | | | | | | | This patch changes the DOKU_COOKIE define to be based on the DOKU_URL define. DOKU_COOKIE is now used as session key as well, making sessions no longer dependend on the title option. This should fix problems with multiple wikis on the same host (using the same title) and wikis accessed through different URLs. darcs-hash:20061003121546-7ad00-aea4c256b7752815ed422ce74a659152a601d267.gz
* minor bugfix and boring error removalchris2006-09-23
| | | | darcs-hash:20060923203609-9b6ab-ecca679faa254a29772868508050fcf3206b0814.gz
* add authname memory cachechris2006-09-23
| | | | | | | | actions which concern multiple pages (e.g. search, backlinks, recents) end up repeatedly encoding the current user's name and groups. This change caches the results of the encoding allowing them to be reused. darcs-hash:20060923161206-9b6ab-a3ec8f1c2ec284d84b9ff85cba1e56165b2967a7.gz
* move AUTH defines higher upAndreas Gohr2006-09-06
| | | | | | | | | This moves the defines for the different AUTH levels higher up in inc/auth.php to set them before including any auth modules. This fixes a problem with the phpBB auth module posted at http://wiki.splitbrain.org/wiki:tips:integrate_with_phpbb#another_phpbb.class.php darcs-hash:20060906184814-7ad00-679bd636730e21dca45b9baaf721fb3b34a8695a.gz
* bug #876, additional data for new user notification emailchris2006-08-22
| | | | | | | This patch updates only the english version of the localised "registermail.txt" file. Other versions need to be updated also. darcs-hash:20060822072444-9b6ab-ff6cb5bc78277c383e82c3986eeb16168e86c27b.gz
* more unit test fixeschris2006-08-09
| | | | | | - move parser.test.php darcs-hash:20060809192115-9b6ab-973fea51fbfdcf5f44a2ac66000f2ccb5fdd43b4.gz
* fixed auth problem introduced in last unittest fixAndreas Gohr2006-08-05
| | | | darcs-hash:20060805163147-7ad00-77e7d9cd88f012cd2ecc6275a574abde30f4a9be.gz
* more unittest updateschris2006-08-05
| | | | darcs-hash:20060805082442-9b6ab-8447755da8c66c5cfc3ee0df0f8bb97375a2a1ff.gz
* unittest fixeschris2006-08-04
| | | | darcs-hash:20060804142243-9b6ab-d208f7f1a67a9958fda05c519c8407ad5e733cea.gz
* two-stage password resetAndreas Gohr2006-07-14
| | | | | | | | | | This patch changes the password reset function to a two-stage process. After requesting a new password a confirmation email is sent first, only if the link contained in this mail is used the password is changed for real. This makes sure malicious people can't reset passwords for other users. darcs-hash:20060714110548-7ad00-c1e23fd51cc2d2f16473914421ebe0f9c3b2ba8c.gz
* disableactions supportAndreas Gohr2006-07-02
| | | | | | | | | | | | This patch adds a config option to disable certain internal action commands of DokuWiki's main dispatcher. The options resendpasswd and openregister were removed because they can now set through this new option. The config plugin needs to be adjusted. darcs-hash:20060702121622-7ad00-1e80e77bcfb0ae561fe7abd79cfbe1bb158be720.gz
* register notify #826Sebastian Harl2006-06-15
| | | | | | | A small patch for dokuwiki which enables dokuwiki to notify the administrator about new user registrations darcs-hash:20060615194419-022eb-51630aff3c6d93abc656742fc0bc723b93f97734.gz
* XSS bugfix #820Andreas Gohr2006-05-31
| | | | darcs-hash:20060531191114-7ad00-ee7498f6a9e047fc9eda5f8754f85d9b8a3317d5.gz
* optionally use HTTP credentials to log inAndreas Gohr2006-05-07
| | | | | | | | | | If no credentials where given (either by form or former cookie) it is checked if credentials from a former HTTP based authentication are available. Those will be tried for login then. This only works with PHP running as Apache module. darcs-hash:20060507161224-7ad00-7ba0a6e871cf5319038e83672a2ff05ef23c124b.gz
* use nameencoding on superuser check in inc/auth.phpAndreas Gohr2006-03-07
| | | | darcs-hash:20060307192928-7ad00-1ec5393d63d536992810fe8f611525d2af4834a2.gz
* nicer error messages for fatal errorsAndreas Gohr2006-03-03
| | | | darcs-hash:20060303180548-7ad00-db294c2c5c10c8df69ebae7596e64e1af4d9bc35.gz
* Allow non-ID names in ACLsAndreas Gohr2006-03-02
| | | | | | | | | Some auth backends allow special chars like whitespaces in user and group names. This made problems with the existing ACL checks and ACL manager. This patch makes the ACL system work with these cases by (url)encoding all special chars below 128. darcs-hash:20060302101850-6e07b-14bda9dbdb3528904325419b35bb9eddb0d1dde3.gz
* do not try to init auth object if useaclAndreas Gohr2006-02-17
| | | | darcs-hash:20060217221221-7ad00-56a0595780eaf495cd67567d00e07ef6d90ab38c.gz
* fixed password mailAndreas Gohr2006-02-17
| | | | | | | There was an error which caused the mail aent on registration to contain the crypted password instead of the cleartext one. darcs-hash:20060217180715-7ad00-88b2e8f74ddbad41300ca53bbf79df3d8d8beebc.gz
* updated auth_punbbAndreas Gohr2006-02-11
| | | | darcs-hash:20060211180240-7ad00-c7c589aa6e5e67f2d7ad54f7e41837f116a91c9c.gz
* new way of auth module capability checkingAndreas Gohr2006-02-03
| | | | | | | | | | This changes the way of how the capabilities of the used auth module are checked as suggested as first option in http://www.freelists.org/archives/dokuwiki/01-2006/msg00267.html The MySQL backend WAS NOT TESTED and probably needs some work. darcs-hash:20060203150302-7ad00-c524cafe20499f32e76ad42b4e68d7c635f6a9e9.gz
* resendpasswd option addedAndreas Gohr2006-01-29
| | | | darcs-hash:20060129131054-7ad00-aa633eafdd206cb38c710cc6a6de958c14eecb6d.gz
* oo auth update - remove legacy auth remnants, add auth->canDochris2006-01-25
| | | | darcs-hash:20060125000125-9b6ab-9853f11e04d8ea93235317fa8137cef079eb2641.gz
* external authenticationAndreas Gohr2006-01-10
| | | | | | | | | This patch adds the functionality to override the usual auth_mechanism completely and replace it with your own. This can be used to authenticate against Apache auth mechanisms or third party software cookies. A very basic example for using PunBB's $pun_user variable is included. darcs-hash:20060110092903-6e07b-7c7750da4eb4e9116ddc28c77015488ea500c07d.gz
* OO_auth_fixesMatthias Grimm2005-11-05
| | | | | | | | | | This patch allows the OO auth module to fail. The basic class got a new property $success that is checked in auth.php. Derived classes might change this calue in their constructors. Beautifying the whitespaces in auth.php completes this patch. darcs-hash:20051105124932-4145d-dfcfa6c3b87d0087b4bffe3e5a29db000b10b242.gz
* some fixes for getID and the detail pageAndreas Gohr2005-10-21
| | | | darcs-hash:20051021212304-7ad00-f01b3954b6b71ecc9e0cf899ed62bfb33e0c437e.gz
* auth update, incl. auth object, plain.class.php; resend password & update ↵chris2005-10-20
| | | | | | profile actions darcs-hash:20051020181434-50fdc-44222aa2074bb0e39a1c240c516259579b380740.gz
* DOKU_CONF define for config directory #479Andreas Gohr2005-07-29
| | | | darcs-hash:20050729155457-7ad00-94554865259e4cbd6a1c75bb62a93f37304adbf0.gz
* The authcheck now prints a warning if no ACLs are available.Andreas Gohr2005-07-14
| | | | darcs-hash:20050714201333-7ad00-77d1547bb869b54105f71b49bafb3b1071512747.gz
* bugfix for weird ZendOptimizer bug #377 #378andi2005-07-01
| | | | darcs-hash:20050701112148-9977f-1d4a3a68ec7a1972c34104b3b988d849f412ae70.gz
* small fix for separate cookie patchandi2005-06-26
| | | | darcs-hash:20050626184105-9977f-34d4928d5c8dab19b2cc799ff3b43637303995e8.gz
* separate cookies for multiple wikis on the same siteSameer D. Sahasrabuddhe2005-06-25
| | | | | | | | auth.php now uses an md5 hash of the actual script location as cookie name. This way, multiple wikis on the same site will not smother each other's cookies. darcs-hash:20050625082204-4c533-a9a0a60a10eb20383e93cc76a7db88747dc0db32.gz
* directory cleanupandi2005-06-26
| | | | | | | | This cleans up the directory structure as discussed on the mailning list. Users should delete their previous _cache directories to recover diskspace. darcs-hash:20050626100913-9977f-83c0fdc32047db2090fc52a843ffae50cbf12248.gz
* handle missing users.auth and acl.auth gracefullyandi2005-06-20
| | | | darcs-hash:20050620203400-9977f-515a59d1131ae5dafc6c722f893bf6c308121832.gz
* directory layout cleanup !IMPORTANTandi2005-06-05
| | | | | | | | | | | | | This patch changes the directory structure of dokuwiki as suggested in http://www.freelists.org/archives/dokuwiki/06-2005/msg00045.html As the changes.log is not managed through darcs you need to move it your self to the new location in data/changes.log I think I modified the code at all nessessary places, but I may have forgotten a few things. darcs-hash:20050605103842-9977f-af20f63c1d604888375d175d89ac6bd71566d47d.gz
* Mediafile Deletion and Overwrite Handling #200andi2005-06-03
| | | | | | | | | | | | | | This patch enhances the ACL feature by adding another Permission called DELETE - this permission allows a user to delete or overwrite existing mediafiles. Users with UPLOAD permission are no longer allowed to overwrite media files. Users whith DELETE permissions now need to check an additional checkbox to overwrite existing files, this is to prevent accidently deletions. Please note: If no ACL is used UPLOAD rights are assumed for everybody - not DELETE rights. This changes the behaviour from previous versions as UPLOAD does not allow overwriting anymore. darcs-hash:20050603205501-9977f-1d219b23a79bb097ed0e0b8184dc6d5d8aad578b.gz
* Support for MySQL hashed passwords added (old and new style)andi2005-05-14
| | | | darcs-hash:20050514135518-9977f-217e9b111e8d42389e114a530209dbd3fdab3c76.gz
* fix ssha hash algorithmmatthiasgrimm2005-05-13
| | | | | | wrong variable used in ssha hash algorithm - fixed darcs-hash:20050513182341-7ef76-ca2263503c39ed209ca38c86b295ea30cd0b11b1.gz
* multiple hash methods for passwordsandi2005-05-13
| | | | | | | | | | This patch allows the method for hashing (onewaycrypting) the user passwords to be set with $conf['passcrypt']. Available are MD5, salted MD5, SHA1 salted SHA1 (SSHA) and the old Unix crypt (2 char seed). This change was inspired by a mail from Chris Brotherton (thanks for making me think about this) darcs-hash:20050513152248-9977f-2358b26449ed865a981c8558308a2857ba17c12f.gz
* typos in register functionjan2005-05-13
| | | | darcs-hash:20050513101858-45605-3b95334c8636ebfbbf8db099abda0c2e07095a28.gz
* Turn sensitive files into scripts that exit immediatelyjan2005-05-12
| | | | darcs-hash:20050512204225-45605-bee22b4df3d23374bc4922ede8f48106ea217209.gz
* fixed logout #319andi2005-05-12
| | | | darcs-hash:20050512204107-9977f-94e56edf182e0194f0965052126ee88778d0bbeb.gz
* fix for autopasswdjan2005-05-11
| | | | darcs-hash:20050511103440-45605-012290dd1e9ffc10d2d30a70b38b96eb4d9581f4.gz
* user registration without emailmatthias.grimm2005-05-08
| | | | | | | | | | | | This patch extends the user registration with a more direct way without the need for an valid email address. The user password is queried in the registration form and not automatically generated and sent by email. This mode could be configured with the new option 'autopasswd'. Some new texts were added for translation but only english and german translation databases have been updated yet. darcs-hash:20050508200129-45302-ad4f2cf1d18514c76373cb6d6015e74712638402.gz
* mysql create user functionmatthias.grimm2005-05-08
| | | | | | | | | | This patch adds the missing function createuser in the mysql auth module. Some new SQL statements have to be defined so that it works: $conf['auth']['mysql']['getgroupid'] to get the ID of a given group $conf['auth']['mysql']['adduser'] to add a user to the database $conf['auth']['mysql']['addusergroup'] to let the user join a given group darcs-hash:20050508183140-45302-de96a42fd79801a5e9ab14cb476f56b2c9432d7c.gz
* small fixes to register from admin pageandi2005-05-10
| | | | | | | It's AUTH_ADMIN not AUTH_AUTH ;-), Small formatting changes, removed superfluous perm check in register() darcs-hash:20050510163055-9977f-ca82569166a73bb657e82d3ffa525c1d1978f73e.gz
* open register for admin, secure anything elseandi2005-05-08
| | | | | | | | This adds a little more security to the "add user to admin page" the register function checks for open register or admin rights else returns false darcs-hash:20050508200923-9977f-2826256b5ac72d5b19b3caa0e3fe8029e56ea05a.gz
* add user registration to admin pageMatthias Grimm2005-05-08
| | | | | | | | | | If 'openregister' is not set the menue entry 'Add new user...' will be added to the admin page so that registering of new users is always possible through an GUI. If 'openregister is set the menu entry will be omitted to not to overload the admin page. darcs-hash:20050508101344-4145d-cb3f9e10f4b8d26dec516ce796e54ed12a1e2b53.gz
* optimized count calls in for loopsandi2005-04-27
| | | | darcs-hash:20050427182243-9977f-4c1ec6ce278925147379430540eec723d109444a.gz
* removed closing php tag for includesandi2005-04-13
| | | | darcs-hash:20050413175338-9977f-c969db6f86df5df175db9a39b4fabb9f072f8f67.gz
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-06 21:03:48 +0000