aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/auth
Commit message (Collapse)AuthorAgeFilesLines
* [feature/class-prefix] Rename auth => phpbb_authIgor Wiedler2012-03-311-0/+1061
| | | | PHPBB3-10609
* [ticket/9916] Updating header license and removing Version $Id$Unknown2011-12-313-6/+3
| | | | PHPBB3-9916
* Merge branch 'develop-olympus' into developIgor Wiedler2011-10-141-0/+9
|\ | | | | | | | | | | | | | | * develop-olympus: [ticket/10212] Return a CAPTCHA on incorrect username for ip limited users too Conflicts: phpBB/includes/auth/auth_db.php
| * [ticket/10212] Return a CAPTCHA on incorrect username for ip limited users tooNils Adermann2011-10-141-1/+10
| | | | | | | | PHPBB3-10212
* | [feature/request-class] Adjust code base to do html decoding manuallyIgor Wiedler2011-08-181-6/+6
| | | | | | | | PHPBB3-9716
* | Merge branch 'develop' into feature/request-classIgor Wiedler2011-08-181-1/+1
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * develop: (157 commits) [ticket/10316] Resolve inconsistent move topic behavior [ticket/9297] Add network to class name of unit tests. [ticket/9297] Fix typo in localhost. [ticket/9297] Rename test class to reflect its contents. [ticket/9297] Adjust comment - IPv6 is needed for IPv6 connections to work. [ticket/9297] Fix markTestSkipped call in setUpBeforeClass. [ticket/9608] Remove use of references in topic_review [ticket/9297] Skip FTP PASV/EPSV test if FTP connection fails. [ticket/9297] Separate ipv4 and ipv6 tests into separate functions. [ticket/9297] Update copyright year of unit test file. [feature/template-engine] Delete _get_locator function. [feature/template-engine] Clean up template locator usage in bbcode. [ticket/9297] Make EPSV unit tests work without IPv6. [ticket/9297] Unit tests for ftp_fsock PASV and EPSV. [ticket/9297] Add support for Extended Passive Mode (EPSV) in ftp_fsock class. [ticket/10312] Un-check the shadow option while moving. [feature/template-engine] Need to call set_template on template. [feature/template-engine] Update installer for template engine changes. [feature/template-engine] Dependency inject locator into template. [feature/template-engine] Delete useless code from set_template. ... Conflicts: phpBB/includes/functions.php
| * | [ticket/9608] Remove use of references in captcha and other placesIgor Wiedler2011-07-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | References are not really needed in PHP due to copy-on-write. Since PHP5, objects are always passed around as identifiers, which means they are mutable. So it is no longer required to pass these by reference either. PHPBB3-9608
* | | [feature/request-class] Add server(), header() and is_ajax() to requestIgor Wiedler2011-07-151-13/+14
|/ / | | | | | | | | | | | | | | | | | | | | | | Extend the request class with helpers for reading server vars (server()) and HTTP request headers (header()). Refactor the existing code base to make use of these helpers, make $_SERVER a deactivated super global. Also introduce an is_ajax() method, which checks the X-Requested-With header for the value 'XMLHttpRequest', which is sent by JavaScript libraries, such as jQuery. PHPBB3-9716
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-07-051-1/+1
|\ \ | |/ | | | | | | * develop-olympus: [ticket/10247] Use COUNT(*) instead of COUNT(attempt_id)
| * [ticket/10247] Use COUNT(*) instead of COUNT(attempt_id)Nils Adermann2011-07-041-1/+1
| | | | | | | | | | | | attempt_id column was deleted PHPBB3-10247
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-06-151-1/+1
|\ \ | |/ | | | | | | * develop-olympus: [ticket/10220] Limit user agent value length for storage in login attempt table
| * [ticket/10220] Limit user agent value length for storage in login attempt tableNils Adermann2011-06-151-1/+1
| | | | | | | | PHPBB3-10220
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-06-121-2/+2
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/9892] Correct copyright year [ticket/9892] Remove incorrect use of camel case [ticket/9892] Removing closing php tag from create_schema_files [ticket/9892] Transaction support for database update sql execution function [ticket/9892] count is a keyword in firebird, so renaming this alias [ticket/9892] Q&A CAPTCHA did not work on firebird, so no need to change config [ticket/9892] Shorten login_attempt key names to avoid firebird length problems [ticket/9892] Drop Q&A CAPTCHA tables if left in inconsistent state [ticket/9892] Adding a number of tests for db_tools [ticket/9892] Table prefix lengths influence index lengths in db_tools [ticket/9892] Shorten the index names on the q&a captcha [ticket/9892] column & index name limits, firebird auto increment in db_tools Conflicts: phpBB/develop/create_schema_files.php
| * [ticket/9892] count is a keyword in firebird, so renaming this aliasNils Adermann2011-06-121-2/+2
| | | | | | | | PHPBB3-9892
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-06-111-3/+60
|\ \ | |/ | | | | | | | | | | | | | | * develop-olympus: [ticket/9992] Clarify explanations of ip and account limits on login [ticket/9992] Add a comma to language for IP_LOGIN_LIMIT_MAX_EXPLAIN [ticket/9992] Use sql_fetchfield for single row and single column result [ticket/9992] Adding a limit on login attempts per IP. [ticket/9992] Make sql_create_table and sql_table_exists available in updater
| * [ticket/9992] Use sql_fetchfield for single row and single column resultNils Adermann2011-06-101-2/+1
| | | | | | | | PHPBB3-9992
| * [ticket/9992] Adding a limit on login attempts per IP.Nils Adermann2011-06-101-4/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | A new table was created to save all failed login attempts with corresponding information on username, ip and useragent. By default the limit is 50 login attempts within 6 hours per IP. The limit is relatively high to avoid big problems on sites behind a reverse proxy that don't receive the forwarded-for value as REMOTE_ADDR but see all users as coming from the same IP address. But if these users run into problems a special forwarded-for option is available to limit logins by forwarded-for value instead of ip. PHPBB3-9992
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-06-091-1/+1
|\ \ | |/ | | | | | | | | | | | | | | * develop-olympus: [ticket/8138] Add autocomplete="off" to acp_board and ldap settings [ticket/8138] Add autocomplete="off" to a user and forum ACP. Conflicts: phpBB/adm/index.php
| * [ticket/8138] Add autocomplete="off" to acp_board and ldap settingsNils Adermann2011-06-031-1/+1
| | | | | | | | PHPBB3-8138
* | Merge branch 'feature/igorw/request-class' into developAndreas Fischer2010-12-161-2/+14
|\ \ | | | | | | | | | | | | | | | | | | | | | * feature/igorw/request-class: [feature/request-class] Convert some remaining cookies [feature/request-class] Adjust misleading comment [feature/request-class] Remove direct access to _REQUEST in acp_search [feature/request-class] Special case of direct access to _REQUEST
| * | [feature/request-class] Special case of direct access to _REQUESTIgor Wiedler2010-10-141-2/+14
| | | | | | | | | | | | PHPBB3-9716
* | | [ticket/9556] Drop php closing tags, add trailing newlineIgor Wiedler2010-11-113-6/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Closing tags converted using Oleg's script. remove-php-end-tags.py -a . Trailing newlines added using the following where $ext is file extension. find . -type f -name "*.$ext" -print | xargs printf "e %s\nw\n" | ed -s; Extensions: php, css, html, js, xml. PHPBB3-9556
* | | Merge branch 'develop-olympus' into developIgor Wiedler2010-10-171-2/+4
|\ \ \ | |/ / |/| / | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/7332] Fix post details expand link rendering on Webkit. [ticket/9162] Prevent notice on unset poll title [ticket/7417] Also focus search keywords and username in subsilver2. [ticket/7417] Focus username field when prosilver login page is loaded. [ticket/7417] Focus search keywords field when prosilver search page is loaded. [ticket/9841] Change "Save" to "Save draft", "Load" to "Load draft". [ticket/9664] Resolve conflict with accesskey="t", change addlitsitem to "y". [ticket/7538] Limit user_login_attempts to prevent SQL errors. [ticket/9848] Add avatars, attachments and store files to .gitignore. [ticket/9822] Correct some style related ACP explain statements. [ticket/9698] Add .htaccess to the includes subdirectory. [ticket/9830] Redirect to install directly when config.php does not exist. [ticket/9816] Remove config.php from repository [ticket/9810] Hide "Select All" of code bbcode on print page
| * [ticket/7538] Limit user_login_attempts to prevent SQL errors.Andreas Fischer2010-10-151-2/+4
| | | | | | | | PHPBB3-7538
* | [feature/auto-loading] Added autoloader to common and ensured compatabilityNils Adermann2010-07-051-2/+2
|/ | | | | | | | | | | | | | | The autoloader is registered in install without caching, since caching is set up during installation. This provides the same functionality, performance is not a concern during installation anyway. In common.php the autoloader is instantiated after the cache is initialised and is started with the standard cache backend used for other cached values. A few places in the code using class_exists had to be updated to explicitly avoid autoloading, since they are used to check whether a file needs to be included which does not (yet) follow the naming scheme the autoloader follows. PHPBB3-9682
* [ticket/8792] Add LDAP_SEARCH_FAILED string for when ldap_search() fails.Andreas Fischer2010-05-161-1/+1
| | | | | | | | No longer use LDAP_NO_SERVER_CONNECTION in case ldap_search() fails. Add and use LDAP_SEARCH_FAILED instead, so users can tell the difference between ldap_connect() failing and ldap_search() failing. PHPBB3-8792
* Make sure captcha factory is there. Make sure language array is there.Andreas Fischer2010-01-201-0/+5
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10431 89ea8834-ac86-4346-8a33-228a782c2dd0
* spacesHenry Sudhof2010-01-171-1/+1
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10418 89ea8834-ac86-4346-8a33-228a782c2dd0
* spacesHenry Sudhof2010-01-171-4/+4
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10412 89ea8834-ac86-4346-8a33-228a782c2dd0
* Always require a fresh solved captcha, don't accept a stored solution.Henry Sudhof2010-01-171-3/+8
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10411 89ea8834-ac86-4346-8a33-228a782c2dd0
* make userdata availableHenry Sudhof2010-01-141-1/+1
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10406 89ea8834-ac86-4346-8a33-228a782c2dd0
* #51395 - remove legacy captcha code. authorised by: acyd burnHenry Sudhof2009-09-151-18/+6
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10143 89ea8834-ac86-4346-8a33-228a782c2dd0
* Fix #45315Chris Smith2009-07-181-1/+2
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9783 89ea8834-ac86-4346-8a33-228a782c2dd0
* Correct escaping/unescaping in the LDAP authentication plugin. #48175Chris Smith2009-07-171-7/+11
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9769 89ea8834-ac86-4346-8a33-228a782c2dd0
* - [Feature] New "Newly Registered Users" group for assigning ↵Meik Sievertsen2009-06-202-0/+2
| | | | | | | | | | | | permissions to newly registered users. They will be removed from this group once they reach a defineable amount of posts. - [Feature] Ability to define if the "Newly Registered Users" group will be assigned as the default group to newly registered users. As a coincidence also Bug #46535 got fixed. Additionally the error message displayed with trigger_error() if accessing the private message tab in the ucp is now displayed inline in addition to a slightly different message for newly registered users to let them know that access permissions may be lifted over time. git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9636 89ea8834-ac86-4346-8a33-228a782c2dd0
* Oh right. PHP4Henry Sudhof2009-06-131-1/+1
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9581 89ea8834-ac86-4346-8a33-228a782c2dd0
* some corrections, only very minor things.Meik Sievertsen2009-06-071-5/+5
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9554 89ea8834-ac86-4346-8a33-228a782c2dd0
* Okay, a first ci of the new captcha plugins. We'll add dynamic template ↵Henry Sudhof2009-06-021-33/+6
| | | | | | includes later, as well as documentation on how to use this. I'm prepared to get yelled at for bugs (oh, I know that there are plenty); but please blame spammers for broken styles and MODs. git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9524 89ea8834-ac86-4346-8a33-228a782c2dd0
* As proposed by marshalrusty: re-hash plain MD5s left in the databaseHenry Sudhof2009-02-061-2/+4
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9312 89ea8834-ac86-4346-8a33-228a782c2dd0
* better fix for bug #41085Meik Sievertsen2009-01-291-13/+8
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9311 89ea8834-ac86-4346-8a33-228a782c2dd0
* Fix guest/bot session problems with apache authentication plugin (Bug #41085)Meik Sievertsen2009-01-271-1/+13
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9306 89ea8834-ac86-4346-8a33-228a782c2dd0
* HTTP Authentication supports UTF-8 usernames now [Bug #21135]Nils Adermann2008-06-041-3/+3
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@8602 89ea8834-ac86-4346-8a33-228a782c2dd0
* #22525Meik Sievertsen2008-03-143-3/+33
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@8432 89ea8834-ac86-4346-8a33-228a782c2dd0
* *** empty log message ***Meik Sievertsen2007-10-053-8/+32
| | | | git-svn-id: file:///svn/phpbb/trunk@8142 89ea8834-ac86-4346-8a33-228a782c2dd0
* #i42Meik Sievertsen2007-10-043-5/+22
| | | | | | | new password hashing mechanism for storing passwords git-svn-id: file:///svn/phpbb/trunk@8139 89ea8834-ac86-4346-8a33-228a782c2dd0
* necessary changes...Meik Sievertsen2007-08-303-0/+27
| | | | git-svn-id: file:///svn/phpbb/trunk@8072 89ea8834-ac86-4346-8a33-228a782c2dd0
* - added an option to specify a port for the LDAP serverNils Adermann2007-08-231-3/+27
| | | | | | | - restricted access to "Recent searches" to admins who are allowed to configure search [Bug #14085] git-svn-id: file:///svn/phpbb/trunk@8064 89ea8834-ac86-4346-8a33-228a782c2dd0
* - allow multibyte search configurationNils Adermann2007-08-181-11/+34
| | | | | | | | | - added ldap_user_filter to add additional restrictions on the user objects used for authentication [Bug #12627] - improved ldap explanations a bit - display searchable subforums of invisible parents in advanced search forum selection [Bug #11395] git-svn-id: file:///svn/phpbb/trunk@8047 89ea8834-ac86-4346-8a33-228a782c2dd0
* - always use convert error message for unconverted incorrect passwords [Bug ↵Nils Adermann2007-05-141-1/+1
| | | | | | #10893] git-svn-id: file:///svn/phpbb/trunk@7576 89ea8834-ac86-4346-8a33-228a782c2dd0
* timezone box + shortening pm options variable as well as max login attempts fix.Meik Sievertsen2007-04-281-1/+1
| | | | git-svn-id: file:///svn/phpbb/trunk@7419 89ea8834-ac86-4346-8a33-228a782c2dd0