summaryrefslogtreecommitdiff
path: root/inc/mod/auth.php
AgeCommit message (Collapse)Author
2016-05-06Public action logs commit (log.php)8chan
Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now. =================================== Also: backports 351375185e5 (early 404)
2016-05-05those parts are extraneousczaks
2016-05-05Move login check in inc/mod/auth.php to a function8chan
This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords)
2016-05-05Security: capitalization of mods username is significant8chan Admin
2016-05-05ease the migration process for the previous security patch (by introducing ↵czaks
another migration); restore php 5.4 compatibility (introducing a polyfill system)
2016-04-22[SECURITY] keep up with modern password hashing standardsczaks
2014-06-12Fix vichan #65Chen-Pang He
Conflicts: inc/mod/auth.php inc/mod/pages.php
2014-06-11$_SERVER[HTTPS] isn`t being always set; fixes #65czaks
2014-06-10Send cookie only via HTTPS if a mod logs in via HTTPS, which is the case on ↵Chen-Pang He
this site
2013-09-06Cleaner check to make sure inc/ files aren't accessed directly.Michael Foster
2013-08-19Better setting namectrlcctrlv
2013-08-19Optionally access mod cookie in JavaScriptctrlcctrlv
2013-07-31Add optional database table prefix (issue #118; see issue comments for details)Michael Foster
2013-07-31SQL cleanupMichael Foster
2013-07-24Long overdue: Salted password hashesMichael Foster
2013-06-18Merge pull request #115 from Macil/miscfixesMichael
Miscellaneous fixes
2013-06-18Fix PM count caching.Macil Tech
cache::get() returns null if the key wasn't found (at least when using the Redis cache backend).
2013-01-30...Michael Save
2013-01-30Instead of showing $config['error']['malformed'] on corrupt session, just go ↵Michael Save
straight to the login form
2013-01-29Use === operator in authentication.Michael Save
2013-01-20Copyright and license update for 2013.Michael Save
2012-08-27minor consistency cleanupMichael Save
2012-08-27properly tie auth cookies to private saltMichael Save
2012-08-27CSRF protectionMichael Save
2012-05-20Cache unread PM noticesMichael Save
2012-04-13new PMMichael Save
2012-04-13start on mod interface rewriteMichael Save