summaryrefslogtreecommitdiff
path: root/inc/auth.php
Commit message (Collapse)AuthorAge
* fix for recent auth changeAndreas Gohr2007-06-25
| | | | darcs-hash:20070625210929-7ad00-034c5839bbca3e697d360f72dffcf9d927fea755.gz
* degrade to unauthed user when auth backen unavailable FS#1168Andreas Gohr2007-06-25
| | | | | | | Instead of disabling the whole ACL feature when the auth backend is unavailable just degrade the user to an anonymous user. darcs-hash:20070625205228-7ad00-19cfa3c302b4ee63f0a6562823c5d550f9c9755c.gz
* never use full URL in cookie paths FS#1146Andreas Gohr2007-06-03
| | | | | | | Introduces a DOKU_REL constant always pointing to the DokuWiki directory regardless of the used canonical setting. darcs-hash:20070603191451-7ad00-a5227a3632b3337f5da90551d3166d9b5db56638.gz
* Partial Fix FS#1085Chris Smith2007-05-28
| | | | | | | | | | | | | | | | | | | This fix adds a new configuration setting, 'auth_security_timeout', which controls the duration (seconds) before authentication information is rechecked. The default value is set to 900 seconds (15 minutes). Wiki installations particularly concerned about security should set this value to 0. DokuWiki maintains a copy of the most recent authentication details in both a browser cookie and server session. Normally these values are compared on each page visit. If the comparison passes the user is accepted. The same data will be used over and over until either the cookie or the session expires. FS#1085 is concerned with updates to the original authentication data not being able to affect this comparison. The new 'auth_security_timeout' setting will force expiration of the saved data after the specified period has elapsed. Re-authentication may affect page response, especially on systems which use remote authentication systems. This fix is considered partial and should be reviewed after the next release with a view to extending the authentication class to allow those mechanisms which are able to control when DW should revoke authentication. darcs-hash:20070528194747-d26fc-f471004da604eb66f7131c470e446b98c29d801b.gz
* Fix broken if in previous patchGuy Brand2007-03-02
| | | | darcs-hash:20070302100506-19e2d-342a0477340aa6b2c5fb7e08c520053b7dc33608.gz
* Allow @USER@ variable in ACLsGuy Brand2007-03-02
| | | | | | | | | This saves a lot of ACL lines for users namespaces for example: users:* @ALL 1 users:@USER@ @USER@ 8 darcs-hash:20070301230309-19e2d-90a00b70a2af546fd5194ade614c130e9f7864eb.gz
* make sure cachekey is a string in auth_nameencode FS#1000Andreas Gohr2007-01-06
| | | | darcs-hash:20070106122851-7ad00-9b3b2923e2f917107b29c4dacfc1047b2845a5db.gz
* Check cookie auth data silentlyAndreas Gohr2007-01-09
| | | | darcs-hash:20070109213155-7ad00-9594bbf5c0730221b46f31bb40f31997a09ab4b4.gz
* manager user/groupAndreas Gohr2006-12-03
| | | | | | | This patch adds support for a manager option as suggested in http://www.freelists.org/archives/dokuwiki/11-2006/msg00314.html darcs-hash:20061203134104-7ad00-72ff6422bbb4f79be325c7e77255e1eee32d0f6b.gz
* HTML_EDITFORM_INJECTION event addedAndreas Gohr2006-11-14
| | | | | | | A simple event to inject additional HTML into the editform. This probably needs to be improved. darcs-hash:20061114220825-7ad00-ce868b8d8a25f5120c49dc018b8fd1024aff6e12.gz
* add standard username cleaning to resend password (fixes bug#961)chris2006-11-04
| | | | darcs-hash:20061104174349-9b6ab-74e7c5a3e7a14d12253d36a9d09a35866125a7ec.gz
* don't allow commas in full name registration FS#960Andreas Gohr2006-11-03
| | | | darcs-hash:20061103160700-7ad00-01c7039c591ebdffcbe283984b23b2bb4ed4bc74.gz
* use DOKU_URL as key for sessions and auth cookie #896 #581 #884Andreas Gohr2006-10-03
| | | | | | | | | | This patch changes the DOKU_COOKIE define to be based on the DOKU_URL define. DOKU_COOKIE is now used as session key as well, making sessions no longer dependend on the title option. This should fix problems with multiple wikis on the same host (using the same title) and wikis accessed through different URLs. darcs-hash:20061003121546-7ad00-aea4c256b7752815ed422ce74a659152a601d267.gz
* minor bugfix and boring error removalchris2006-09-23
| | | | darcs-hash:20060923203609-9b6ab-ecca679faa254a29772868508050fcf3206b0814.gz
* add authname memory cachechris2006-09-23
| | | | | | | | actions which concern multiple pages (e.g. search, backlinks, recents) end up repeatedly encoding the current user's name and groups. This change caches the results of the encoding allowing them to be reused. darcs-hash:20060923161206-9b6ab-a3ec8f1c2ec284d84b9ff85cba1e56165b2967a7.gz
* move AUTH defines higher upAndreas Gohr2006-09-06
| | | | | | | | | This moves the defines for the different AUTH levels higher up in inc/auth.php to set them before including any auth modules. This fixes a problem with the phpBB auth module posted at http://wiki.splitbrain.org/wiki:tips:integrate_with_phpbb#another_phpbb.class.php darcs-hash:20060906184814-7ad00-679bd636730e21dca45b9baaf721fb3b34a8695a.gz
* bug #876, additional data for new user notification emailchris2006-08-22
| | | | | | | This patch updates only the english version of the localised "registermail.txt" file. Other versions need to be updated also. darcs-hash:20060822072444-9b6ab-ff6cb5bc78277c383e82c3986eeb16168e86c27b.gz
* more unit test fixeschris2006-08-09
| | | | | | - move parser.test.php darcs-hash:20060809192115-9b6ab-973fea51fbfdcf5f44a2ac66000f2ccb5fdd43b4.gz
* fixed auth problem introduced in last unittest fixAndreas Gohr2006-08-05
| | | | darcs-hash:20060805163147-7ad00-77e7d9cd88f012cd2ecc6275a574abde30f4a9be.gz
* more unittest updateschris2006-08-05
| | | | darcs-hash:20060805082442-9b6ab-8447755da8c66c5cfc3ee0df0f8bb97375a2a1ff.gz
* unittest fixeschris2006-08-04
| | | | darcs-hash:20060804142243-9b6ab-d208f7f1a67a9958fda05c519c8407ad5e733cea.gz
* two-stage password resetAndreas Gohr2006-07-14
| | | | | | | | | | This patch changes the password reset function to a two-stage process. After requesting a new password a confirmation email is sent first, only if the link contained in this mail is used the password is changed for real. This makes sure malicious people can't reset passwords for other users. darcs-hash:20060714110548-7ad00-c1e23fd51cc2d2f16473914421ebe0f9c3b2ba8c.gz
* disableactions supportAndreas Gohr2006-07-02
| | | | | | | | | | | | This patch adds a config option to disable certain internal action commands of DokuWiki's main dispatcher. The options resendpasswd and openregister were removed because they can now set through this new option. The config plugin needs to be adjusted. darcs-hash:20060702121622-7ad00-1e80e77bcfb0ae561fe7abd79cfbe1bb158be720.gz
* register notify #826Sebastian Harl2006-06-15
| | | | | | | A small patch for dokuwiki which enables dokuwiki to notify the administrator about new user registrations darcs-hash:20060615194419-022eb-51630aff3c6d93abc656742fc0bc723b93f97734.gz
* XSS bugfix #820Andreas Gohr2006-05-31
| | | | darcs-hash:20060531191114-7ad00-ee7498f6a9e047fc9eda5f8754f85d9b8a3317d5.gz
* optionally use HTTP credentials to log inAndreas Gohr2006-05-07
| | | | | | | | | | If no credentials where given (either by form or former cookie) it is checked if credentials from a former HTTP based authentication are available. Those will be tried for login then. This only works with PHP running as Apache module. darcs-hash:20060507161224-7ad00-7ba0a6e871cf5319038e83672a2ff05ef23c124b.gz
* use nameencoding on superuser check in inc/auth.phpAndreas Gohr2006-03-07
| | | | darcs-hash:20060307192928-7ad00-1ec5393d63d536992810fe8f611525d2af4834a2.gz
* nicer error messages for fatal errorsAndreas Gohr2006-03-03
| | | | darcs-hash:20060303180548-7ad00-db294c2c5c10c8df69ebae7596e64e1af4d9bc35.gz
* Allow non-ID names in ACLsAndreas Gohr2006-03-02
| | | | | | | | | Some auth backends allow special chars like whitespaces in user and group names. This made problems with the existing ACL checks and ACL manager. This patch makes the ACL system work with these cases by (url)encoding all special chars below 128. darcs-hash:20060302101850-6e07b-14bda9dbdb3528904325419b35bb9eddb0d1dde3.gz
* do not try to init auth object if useaclAndreas Gohr2006-02-17
| | | | darcs-hash:20060217221221-7ad00-56a0595780eaf495cd67567d00e07ef6d90ab38c.gz
* fixed password mailAndreas Gohr2006-02-17
| | | | | | | There was an error which caused the mail aent on registration to contain the crypted password instead of the cleartext one. darcs-hash:20060217180715-7ad00-88b2e8f74ddbad41300ca53bbf79df3d8d8beebc.gz
* updated auth_punbbAndreas Gohr2006-02-11
| | | | darcs-hash:20060211180240-7ad00-c7c589aa6e5e67f2d7ad54f7e41837f116a91c9c.gz
* new way of auth module capability checkingAndreas Gohr2006-02-03
| | | | | | | | | | This changes the way of how the capabilities of the used auth module are checked as suggested as first option in http://www.freelists.org/archives/dokuwiki/01-2006/msg00267.html The MySQL backend WAS NOT TESTED and probably needs some work. darcs-hash:20060203150302-7ad00-c524cafe20499f32e76ad42b4e68d7c635f6a9e9.gz
* resendpasswd option addedAndreas Gohr2006-01-29
| | | | darcs-hash:20060129131054-7ad00-aa633eafdd206cb38c710cc6a6de958c14eecb6d.gz
* oo auth update - remove legacy auth remnants, add auth->canDochris2006-01-25
| | | | darcs-hash:20060125000125-9b6ab-9853f11e04d8ea93235317fa8137cef079eb2641.gz
* external authenticationAndreas Gohr2006-01-10
| | | | | | | | | This patch adds the functionality to override the usual auth_mechanism completely and replace it with your own. This can be used to authenticate against Apache auth mechanisms or third party software cookies. A very basic example for using PunBB's $pun_user variable is included. darcs-hash:20060110092903-6e07b-7c7750da4eb4e9116ddc28c77015488ea500c07d.gz
* OO_auth_fixesMatthias Grimm2005-11-05
| | | | | | | | | | This patch allows the OO auth module to fail. The basic class got a new property $success that is checked in auth.php. Derived classes might change this calue in their constructors. Beautifying the whitespaces in auth.php completes this patch. darcs-hash:20051105124932-4145d-dfcfa6c3b87d0087b4bffe3e5a29db000b10b242.gz
* some fixes for getID and the detail pageAndreas Gohr2005-10-21
| | | | darcs-hash:20051021212304-7ad00-f01b3954b6b71ecc9e0cf899ed62bfb33e0c437e.gz
* auth update, incl. auth object, plain.class.php; resend password & update ↵chris2005-10-20
| | | | | | profile actions darcs-hash:20051020181434-50fdc-44222aa2074bb0e39a1c240c516259579b380740.gz
* DOKU_CONF define for config directory #479Andreas Gohr2005-07-29
| | | | darcs-hash:20050729155457-7ad00-94554865259e4cbd6a1c75bb62a93f37304adbf0.gz
* The authcheck now prints a warning if no ACLs are available.Andreas Gohr2005-07-14
| | | | darcs-hash:20050714201333-7ad00-77d1547bb869b54105f71b49bafb3b1071512747.gz
* bugfix for weird ZendOptimizer bug #377 #378andi2005-07-01
| | | | darcs-hash:20050701112148-9977f-1d4a3a68ec7a1972c34104b3b988d849f412ae70.gz
* small fix for separate cookie patchandi2005-06-26
| | | | darcs-hash:20050626184105-9977f-34d4928d5c8dab19b2cc799ff3b43637303995e8.gz
* separate cookies for multiple wikis on the same siteSameer D. Sahasrabuddhe2005-06-25
| | | | | | | | auth.php now uses an md5 hash of the actual script location as cookie name. This way, multiple wikis on the same site will not smother each other's cookies. darcs-hash:20050625082204-4c533-a9a0a60a10eb20383e93cc76a7db88747dc0db32.gz
* directory cleanupandi2005-06-26
| | | | | | | | This cleans up the directory structure as discussed on the mailning list. Users should delete their previous _cache directories to recover diskspace. darcs-hash:20050626100913-9977f-83c0fdc32047db2090fc52a843ffae50cbf12248.gz
* handle missing users.auth and acl.auth gracefullyandi2005-06-20
| | | | darcs-hash:20050620203400-9977f-515a59d1131ae5dafc6c722f893bf6c308121832.gz
* directory layout cleanup !IMPORTANTandi2005-06-05
| | | | | | | | | | | | | This patch changes the directory structure of dokuwiki as suggested in http://www.freelists.org/archives/dokuwiki/06-2005/msg00045.html As the changes.log is not managed through darcs you need to move it your self to the new location in data/changes.log I think I modified the code at all nessessary places, but I may have forgotten a few things. darcs-hash:20050605103842-9977f-af20f63c1d604888375d175d89ac6bd71566d47d.gz
* Mediafile Deletion and Overwrite Handling #200andi2005-06-03
| | | | | | | | | | | | | | This patch enhances the ACL feature by adding another Permission called DELETE - this permission allows a user to delete or overwrite existing mediafiles. Users with UPLOAD permission are no longer allowed to overwrite media files. Users whith DELETE permissions now need to check an additional checkbox to overwrite existing files, this is to prevent accidently deletions. Please note: If no ACL is used UPLOAD rights are assumed for everybody - not DELETE rights. This changes the behaviour from previous versions as UPLOAD does not allow overwriting anymore. darcs-hash:20050603205501-9977f-1d219b23a79bb097ed0e0b8184dc6d5d8aad578b.gz
* Support for MySQL hashed passwords added (old and new style)andi2005-05-14
| | | | darcs-hash:20050514135518-9977f-217e9b111e8d42389e114a530209dbd3fdab3c76.gz
* fix ssha hash algorithmmatthiasgrimm2005-05-13
| | | | | | wrong variable used in ssha hash algorithm - fixed darcs-hash:20050513182341-7ef76-ca2263503c39ed209ca38c86b295ea30cd0b11b1.gz
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-07 22:27:18 +0000