summaryrefslogtreecommitdiff
path: root/inc/auth.php
Commit message (Expand)AuthorAge
* Change expensive uses of split to the much faster explode.Tom N Harris2009-05-28
* Make more use of clientIP() FS#1668Andreas Gohr2009-04-10
* pass correct event data in AUTH_LOGIN_CHECKAndreas Gohr2009-04-07
* Action Event wrappers around HTTP requests and authentication checksRobin Gareus2009-03-12
* do not close session in auth_logoff FS#1519Andreas Gohr2009-02-10
* fixed logoff cookie problemAndreas Gohr2009-01-30
* keep breadcrumbs for anonymous users FS#1519Andreas Gohr2009-01-16
* fixed corrupt if statement introduced by earlier patchAndreas Gohr2009-01-14
* make HTTP SSO possible for IIS or rewritingAndreas Gohr2009-01-14
* ACL user wildcard changed to %USER% FS#1504 :!:Andreas Gohr2008-12-16
* removed some illogical path setupsAndreas Gohr2008-12-13
* show update profile dialog only when logged inMichael Klier2008-11-17
* fixed missing global scope in auth_setCookie() FS#1530Oliver Geisen2008-11-08
* Ensure 'smd5' password hashing method is only triggered when availableChris Smith2008-10-13
* remove unused/redundant isvalidemail() functionChris Smith2008-10-13
* Fix for FS#1050Chris Smith2008-10-13
* FS#564 FS#1270 new option to disable the rememberme checkboxMichael Klier2008-10-12
* Fail silently if trying to login through supplied HTTP credentials (FS#1228)Gina Haeussge2008-10-12
* Empty breadcrumbs on logout (see FS#979)Guy Brand2008-10-11
* reopen the session in auth_logoff FS#1484Andreas Gohr2008-10-11
* more cookie security FS#1490Andreas Gohr2008-09-13
* Wrap user modifications in eventsGabriel Birke2008-08-17
* Enhancements for password hashing (maybe fixes FS#1440)Andreas Gohr2008-07-28
* check ACLs correctly if only groups but no user is given FS#1415Andreas Gohr2008-06-08
* reopen the session for storing the auth tokenAndreas Gohr2008-06-03
* authentication via session tokensAndreas Gohr2008-06-03
* Fix for password updates FS#1352Andreas Gohr2008-03-15
* Superuser and manager now can be comma separated listsGuy Brand2008-02-27
* fix usage of is_admin in auth_aclcheckAndreas Gohr2008-02-26
* Use auth backend to verify password on profile update FS#1328Andreas Gohr2008-02-15
* Make session reference file check overridable for auth backendsAndreas Gohr2008-02-15
* invalidate all user session cache when userdatabase is changed FS#1085Andreas Gohr2008-02-15
* make sure not supported profile fields are not accepted FS#1329Andreas Gohr2008-02-13
* Have aclcheck use auth_isadminGuy Brand2008-02-12
* fix problems if $USERINFO['grps'] is not setAndreas Gohr2007-11-02
* don't use realpath() anymore (FS#1261 and others)Andreas Gohr2007-09-30
* Part 2 of the SecurityToken patch to avaoid CSRF attacksAndreas Gohr2007-08-30
* quote fix in auth_nameencodeAndreas Gohr2007-08-19
* Protect auth_ismanager() from auth modules that don't always provide group da...Chris Smith2007-08-05
* fix for recent auth changeAndreas Gohr2007-06-25
* degrade to unauthed user when auth backen unavailable FS#1168Andreas Gohr2007-06-25
* never use full URL in cookie paths FS#1146Andreas Gohr2007-06-03
* Partial Fix FS#1085Chris Smith2007-05-28
* Fix broken if in previous patchGuy Brand2007-03-02
* Allow @USER@ variable in ACLsGuy Brand2007-03-02
* make sure cachekey is a string in auth_nameencode FS#1000Andreas Gohr2007-01-06
* Check cookie auth data silentlyAndreas Gohr2007-01-09
* manager user/groupAndreas Gohr2006-12-03
* HTML_EDITFORM_INJECTION event addedAndreas Gohr2006-11-14
* add standard username cleaning to resend password (fixes bug#961)chris2006-11-04