| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2022-09-25 | PHP8.1 fixes from Rector | Appleman1234 | |
| 2022-09-25 | Initial attempt a switch to composer and PHP-8.1 compatibility | Appleman1234 | |
| 2019-02-26 | Handle mcrypt_create_iv deprectation by using randombytes in newer PHP versions | Benjamin Southall | |
| 2017-05-03 | Use random_bytes() to generate IV where available (PHP 7.x) | Kitty Cat | |
| 2016-05-06 | Public action logs commit (log.php) | 8chan | |
| Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now. =================================== Also: backports 351375185e5 (early 404) | |||
| 2016-05-05 | those parts are extraneous | czaks | |
| 2016-05-05 | Move login check in inc/mod/auth.php to a function | 8chan | |
| This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords) | |||
| 2016-05-05 | Security: capitalization of mods username is significant | 8chan Admin | |
| 2016-05-05 | ease the migration process for the previous security patch (by introducing ↵ | czaks | |
| another migration); restore php 5.4 compatibility (introducing a polyfill system) | |||
| 2016-04-22 | [SECURITY] keep up with modern password hashing standards | czaks | |
| 2014-06-12 | Fix vichan #65 | Chen-Pang He | |
| Conflicts: inc/mod/auth.php inc/mod/pages.php | |||
| 2014-06-11 | $_SERVER[HTTPS] isn`t being always set; fixes #65 | czaks | |
| 2014-06-10 | Send cookie only via HTTPS if a mod logs in via HTTPS, which is the case on ↵ | Chen-Pang He | |
| this site | |||
| 2013-09-06 | Cleaner check to make sure inc/ files aren't accessed directly. | Michael Foster | |
| 2013-08-19 | Better setting name | ctrlcctrlv | |
| 2013-08-19 | Optionally access mod cookie in JavaScript | ctrlcctrlv | |
| 2013-07-31 | Add optional database table prefix (issue #118; see issue comments for details) | Michael Foster | |
| 2013-07-31 | SQL cleanup | Michael Foster | |
| 2013-07-24 | Long overdue: Salted password hashes | Michael Foster | |
| 2013-06-18 | Merge pull request #115 from Macil/miscfixes | Michael | |
| Miscellaneous fixes | |||
| 2013-06-18 | Fix PM count caching. | Macil Tech | |
| cache::get() returns null if the key wasn't found (at least when using the Redis cache backend). | |||
| 2013-01-30 | ... | Michael Save | |
| 2013-01-30 | Instead of showing $config['error']['malformed'] on corrupt session, just go ↵ | Michael Save | |
| straight to the login form | |||
| 2013-01-29 | Use === operator in authentication. | Michael Save | |
| 2013-01-20 | Copyright and license update for 2013. | Michael Save | |
| 2012-08-27 | minor consistency cleanup | Michael Save | |
| 2012-08-27 | properly tie auth cookies to private salt | Michael Save | |
| 2012-08-27 | CSRF protection | Michael Save | |
| 2012-05-20 | Cache unread PM notices | Michael Save | |
| 2012-04-13 | new PM | Michael Save | |
| 2012-04-13 | start on mod interface rewrite | Michael Save | |
