lainchan.git/inc/mod/auth.php, branch clean_prod_vichan_update Fork of github.com/lainchan/lainchan http://cgit.dandokmang.com/lainchan.git/atom?h=clean_prod_vichan_update 2016-05-06T13:44:26Z Public action logs commit (log.php) 2016-05-06T13:44:26Z 8chan admin@8chan.co 2015-02-26T01:21:49Z urn:sha1:7911c374e86ef8fa69c4545867b9d9d3de12d5c6 Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now. =================================== Also: backports 351375185e5 (early 404) those parts are extraneous 2016-05-05T09:45:29Z czaks marcin@6irc.net 2016-05-05T09:45:29Z urn:sha1:cd01191072abc5dfe07245c768a39e3977d612bd Move login check in inc/mod/auth.php to a function 2016-05-05T09:40:52Z 8chan admin@8chan.co 2015-01-01T06:35:21Z urn:sha1:3eb755ee7e0ec65d91377e13f0faf06657035e5a This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords) Security: capitalization of mods username is significant 2016-05-05T09:39:12Z 8chan Admin admin@8chan.co 2014-02-13T01:04:32Z urn:sha1:93f748e6a83964cf40a22073acd0e2511eb4ca0b ease the migration process for the previous security patch (by introducing another migration); restore php 5.4 compatibility (introducing a polyfill system) 2016-05-05T04:43:22Z czaks marcin@6irc.net 2016-05-05T04:43:22Z urn:sha1:7c3126866cd291d515ab5cc83d4635c3c95c6d85 [SECURITY] keep up with modern password hashing standards 2016-04-22T03:35:43Z czaks marcin@6irc.net 2016-04-22T03:35:43Z urn:sha1:caaf741691c9d44a9a186d6ce924fecb04f4f347 Fix vichan #65 2014-06-12T01:12:27Z Chen-Pang He jdh8@ms63.hinet.net 2014-06-11T04:07:45Z urn:sha1:7933abd271b5bb3578cd80f62302cc6ac8961b91 Conflicts: inc/mod/auth.php inc/mod/pages.php $_SERVER[HTTPS] isn`t being always set; fixes #65 2014-06-11T00:04:59Z czaks marcin@6irc.net 2014-06-11T00:04:59Z urn:sha1:23d6e8203806bba22b6444cd09e53da9fc7c501a Send cookie only via HTTPS if a mod logs in via HTTPS, which is the case on this site 2014-06-10T15:42:18Z Chen-Pang He jdh8@ms63.hinet.net 2014-06-05T10:07:29Z urn:sha1:6716a24b6844ab2ec1ee7588f1cf024070c395ed Cleaner check to make sure inc/ files aren't accessed directly. 2013-09-06T10:12:04Z Michael Foster savetheinternet@tinyboard.org 2013-09-06T10:12:04Z urn:sha1:7f0de936082fb35d4e18fbadfe9849acdfc03ab6