aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/auth.php
Commit message (Collapse)AuthorAgeFilesLines
* [feature/class-prefix] Rename auth => phpbb_authIgor Wiedler2012-03-311-1061/+0
| | | | PHPBB3-10609
* [ticket/9916] Updating header license and removing Version $Id$Unknown2011-12-311-2/+1
| | | | PHPBB3-9916
* Merge branch 'develop-olympus' into developNils Adermann2011-07-161-0/+8
|\ | | | | | | | | * develop-olympus: [ticket/10252] Correctly document behaviour of acl_get_list() for a_ permission
| * [ticket/10252] Correctly document behaviour of acl_get_list() for a_ permissionJoas Schilling2011-07-151-0/+8
| | | | | | | | | | | | Be careful when using this function with permissions a_, m_, u_ and f_ ! It may not work correctly. When a user group grants an a_* permission, e.g. a_foo, but the user's a_foo permission is set to "Never", then the user does not in fact have the a_ permission. But the user will still be listed as having the a_ permission. PHPBB3-10252
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-06-111-1/+1
|\ \ | |/ | | | | | | | | | | | | | | * develop-olympus: [ticket/9992] Clarify explanations of ip and account limits on login [ticket/9992] Add a comma to language for IP_LOGIN_LIMIT_MAX_EXPLAIN [ticket/9992] Use sql_fetchfield for single row and single column result [ticket/9992] Adding a limit on login attempts per IP. [ticket/9992] Make sql_create_table and sql_table_exists available in updater
| * [ticket/9992] Adding a limit on login attempts per IP.Nils Adermann2011-06-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | A new table was created to save all failed login attempts with corresponding information on username, ip and useragent. By default the limit is 50 login attempts within 6 hours per IP. The limit is relatively high to avoid big problems on sites behind a reverse proxy that don't receive the forwarded-for value as REMOTE_ADDR but see all users as coming from the same IP address. But if these users run into problems a special forwarded-for option is available to limit logins by forwarded-for value instead of ip. PHPBB3-9992
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-04-221-1/+11
|\ \ | |/ | | | | | | | | | | * develop-olympus: [ticket/10141] Save a hash lookup when value is not in cache. [ticket/10141] Split double-assignment into conditional and unconditional part. [ticket/10141] Use a cache in $auth->_fill_acl() for better performance.
| * [ticket/10141] Save a hash lookup when value is not in cache.Oleg Pudeyev2011-04-211-3/+7
| | | | | | | | PHPBB3-10141
| * [ticket/10141] Split double-assignment into conditional and unconditional part.Andreas Fischer2011-04-221-7/+5
| | | | | | | | PHPBB3-10141
| * [ticket/10141] Use a cache in $auth->_fill_acl() for better performance.Bart van Bragt2011-04-211-2/+10
| | | | | | | | | | | | | | Many sequences being converted are the same. Use a local cache to convert each sequence once, speeding up the function. PHPBB3-10141
| * Fix Bug #48875 - we compare the bitlength, therefore we indeed do not need ↵Meik Sievertsen2009-07-301-2/+2
| | | | | | | | | | | | to re-cache if we think acl options got changed (which we did) git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9894 89ea8834-ac86-4346-8a33-228a782c2dd0
| * - Display coloured usernames in ACP groups management screensMeik Sievertsen2009-06-191-3/+9
| | | | | | | | | | | | | | | | - Changed behaviour of group_create() function to support specifying additional group columns - New groups option to excempt group leaders from group permissions git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9625 89ea8834-ac86-4346-8a33-228a782c2dd0
| * Implemented strict check for cached user permissions and existing ACL ↵Meik Sievertsen2008-10-091-9/+46
| | | | | | | | | | | | options. This fix makes sure cached permissions are valid, even if they got already cached. git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@8985 89ea8834-ac86-4346-8a33-228a782c2dd0
| * fixing two potential problemsMeik Sievertsen2008-04-111-1/+1
| | | | | | | | | | | | | | - blank style - check for correct role assignment within auth.php (should not happen, but seems like some users are not able to persist from manually messing with the db) git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@8502 89ea8834-ac86-4346-8a33-228a782c2dd0
| * - Remove left join for query used to retrieve already assigned users and ↵Meik Sievertsen2008-02-231-4/+14
| | | | | | | | | | | | | | | | groups within permission panel - #20235 - also test the serialize/unserialize approach for cached roles git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@8390 89ea8834-ac86-4346-8a33-228a782c2dd0
| * revamp how we query permissions. This is half-experimental actually, needs a ↵Meik Sievertsen2008-02-151-180/+244
| | | | | | | | | | | | | | | | bit of testing. Should fix the bug with low max_join_size values, but may give problems for those on very low memory settings. git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@8384 89ea8834-ac86-4346-8a33-228a782c2dd0
* | [ticket/9556] Drop php closing tags, add trailing newlineIgor Wiedler2010-11-111-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | Closing tags converted using Oleg's script. remove-php-end-tags.py -a . Trailing newlines added using the following where $ext is file extension. find . -type f -name "*.$ext" -print | xargs printf "e %s\nw\n" | ed -s; Extensions: php, css, html, js, xml. PHPBB3-9556
* | Copy 3.0.x branch to trunkMeik Sievertsen2009-10-041-0/+1046
| | | | | | | | git-svn-id: file:///svn/phpbb/trunk@10211 89ea8834-ac86-4346-8a33-228a782c2dd0
* | relocate some filesMeik Sievertsen2008-12-241-1041/+0
| | | | | | | | git-svn-id: file:///svn/phpbb/trunk@9225 89ea8834-ac86-4346-8a33-228a782c2dd0
* | Implemented strict check for cached user permissions and existing ACL ↵Meik Sievertsen2008-10-091-9/+46
| | | | | | | | | | | | options. This fix makes sure cached permissions are valid, even if they got already cached. git-svn-id: file:///svn/phpbb/trunk@8986 89ea8834-ac86-4346-8a33-228a782c2dd0
* | tiny typo #34345Chris Smith2008-09-261-1/+1
| | | | | | | | git-svn-id: file:///svn/phpbb/trunk@8948 89ea8834-ac86-4346-8a33-228a782c2dd0
* | ok... i hope i haven't messed too much with the code and everything is still ↵Meik Sievertsen2008-05-291-3/+3
| | | | | | | | | | | | | | | | | | | | working. Changes: - Ascraeus now uses constants for the phpbb root path and the php extension. This ensures more security for external applications and modifications (no more overwriting of root path and extension possible through insecure mods and register globals enabled) as well as no more globalizing needed. - A second change implemented here is an additional short-hand-notation for append_sid(). It is allowed to omit the root path and extension now (for example calling append_sid('memberlist')) - in this case the root path and extension get added automatically. The hook is called after these are added. git-svn-id: file:///svn/phpbb/trunk@8572 89ea8834-ac86-4346-8a33-228a782c2dd0
* | merge some changes/fixesMeik Sievertsen2008-04-111-1/+1
| | | | | | | | | | | | henry: is your viewonline fix/change missing? ;) git-svn-id: file:///svn/phpbb/trunk@8503 89ea8834-ac86-4346-8a33-228a782c2dd0
* | merge revisions #r8384, #r8387, #r8388, #r8389 and #r8390Meik Sievertsen2008-02-231-180/+254
| | | | | | | | git-svn-id: file:///svn/phpbb/trunk@8391 89ea8834-ac86-4346-8a33-228a782c2dd0
* | oh boy...David M2008-01-031-26/+27
|/ | | | | | | - Migrate code base to PHP 5.1+ git-svn-id: file:///svn/phpbb/trunk@8295 89ea8834-ac86-4346-8a33-228a782c2dd0
* dumdidum... sorry. ;)Meik Sievertsen2007-10-051-3/+11
| | | | git-svn-id: file:///svn/phpbb/trunk@8146 89ea8834-ac86-4346-8a33-228a782c2dd0
* space, where art thou?Henry Sudhof2007-07-291-1/+1
| | | | git-svn-id: file:///svn/phpbb/trunk@7979 89ea8834-ac86-4346-8a33-228a782c2dd0
* #13863 (oops)Henry Sudhof2007-07-291-1/+1
| | | | git-svn-id: file:///svn/phpbb/trunk@7977 89ea8834-ac86-4346-8a33-228a782c2dd0
* do not consider permissions the admin is not able to change, track or see.Meik Sievertsen2007-07-121-0/+31
| | | | git-svn-id: file:///svn/phpbb/trunk@7873 89ea8834-ac86-4346-8a33-228a782c2dd0
* tweak the sql_like_expression feature a little bit to allow correct escapingMeik Sievertsen2007-06-241-2/+2
| | | | git-svn-id: file:///svn/phpbb/trunk@7789 89ea8834-ac86-4346-8a33-228a782c2dd0
* new wrapper for LIKE expressions to streamline the fixes. We actually need ↵Meik Sievertsen2007-06-231-19/+2
| | | | | | to adjust them for different DBMS as well as SQLite2 not supporting escaping characters in LIKE statements (which is a reason why we think about dropping sqlite support completely). git-svn-id: file:///svn/phpbb/trunk@7788 89ea8834-ac86-4346-8a33-228a782c2dd0
* ok, mess around with the templates + fixing some bugs + adjusting headers ↵Meik Sievertsen2007-06-091-4/+4
| | | | | | for those files already modified to circumvent conflicts for those having their editor set to remove trailing spaces (not recommended!) git-svn-id: file:///svn/phpbb/trunk@7736 89ea8834-ac86-4346-8a33-228a782c2dd0
* erm... um... NOBODY SAW THIS :PDavid M2007-05-231-1/+1
| | | | git-svn-id: file:///svn/phpbb/trunk@7665 89ea8834-ac86-4346-8a33-228a782c2dd0
* #11255David M2007-05-221-1/+1
| | | | | | | | | | | | | | | #11259 #11291 #11335 #11457 #11473 #11475 #11511 #11523 #11527 git-svn-id: file:///svn/phpbb/trunk@7663 89ea8834-ac86-4346-8a33-228a782c2dd0
* some tiny changesMeik Sievertsen2007-05-021-6/+6
| | | | git-svn-id: file:///svn/phpbb/trunk@7452 89ea8834-ac86-4346-8a33-228a782c2dd0
* #10255David M2007-04-291-2/+2
| | | | git-svn-id: file:///svn/phpbb/trunk@7427 89ea8834-ac86-4346-8a33-228a782c2dd0
* changed the cache files to save some memory (all global ones are hold in ↵Meik Sievertsen2007-04-221-2/+2
| | | | | | memory, doubling it). git-svn-id: file:///svn/phpbb/trunk@7386 89ea8834-ac86-4346-8a33-228a782c2dd0
* some changes/bugfixesMeik Sievertsen2007-03-301-1/+1
| | | | git-svn-id: file:///svn/phpbb/trunk@7241 89ea8834-ac86-4346-8a33-228a782c2dd0
* - improvements to search indexing performance, espacially tidy() by adding a ↵Nils Adermann2007-03-131-27/+57
| | | | | | | | | | word_count column, the database update from b5 to next version will take quite a while on bigger databases, I also lowered the default common word threshold from 20 to 5 percent, big boards might want to use 3 or 2 percent, 20 was way too high - added some keys to ACL tables, great improvement of auth query performance - we will only add new language strings to install.php language file and won't modify any, if a language file is updated before phpBB is updated, the updater will not overwrite the user's language with english if install.php was modified git-svn-id: file:///svn/phpbb/trunk@7182 89ea8834-ac86-4346-8a33-228a782c2dd0
* a performance improvementNils Adermann2007-03-121-9/+11
| | | | git-svn-id: file:///svn/phpbb/trunk@7177 89ea8834-ac86-4346-8a33-228a782c2dd0
* show dropdown box for choosing the forum in user management screen -> ↵Meik Sievertsen2006-12-251-2/+2
| | | | | | permissions git-svn-id: file:///svn/phpbb/trunk@6808 89ea8834-ac86-4346-8a33-228a782c2dd0
* - Optimize acl_getf_global a bitNils Adermann2006-12-161-10/+11
| | | | | | | | | | | | - a little performance improvement of the IP regular expressions - convert post_text/subject collation to utf8_unicode_ci if a user wants to use mysql_fulltext to allow case insensitivity [Bug #6272] - mysql_fulltext should alter all necessary columns at once to speed up the process - validate URLs against RFC3986 - fixed some weirdness in make_clickable I hope I didn't break any URLs with this commit, if I did then report it to the bugtracker please! git-svn-id: file:///svn/phpbb/trunk@6774 89ea8834-ac86-4346-8a33-228a782c2dd0
* - the same procedure as every... oh. this is taken.Meik Sievertsen2006-11-271-0/+10
| | | | | | | - also including the first bugfix within beta4, just noticed at area51 that quicktools are not working in global announcements. :D git-svn-id: file:///svn/phpbb/trunk@6681 89ea8834-ac86-4346-8a33-228a782c2dd0
* - a handful of mcp fixed, the most important one is the change for ↵Meik Sievertsen2006-11-181-23/+29
| | | | | | | | | | | check_ids() - it is now supporting ids from more than one forum too, making it possible to use some mcp features as designed initially. We really need to get our moderator team testing the mcp extensively. - fixed some other tiny glitches - if a forum category with subforums get changed to a link type forum give options of what to do with the subforums (#5334) - other bugfixes git-svn-id: file:///svn/phpbb/trunk@6601 89ea8834-ac86-4346-8a33-228a782c2dd0
* - now username changes should work as desiredMeik Sievertsen2006-10-221-1/+1
| | | | | | | - removed some extract() calls git-svn-id: file:///svn/phpbb/trunk@6517 89ea8834-ac86-4346-8a33-228a782c2dd0
* - store sql_layer directly within the layer itselfMeik Sievertsen2006-10-141-2/+2
| | | | | | | | - new method sql_multi_insert to circumvent db-specific hacks (hopefully not introduced any parsing errors) git-svn-id: file:///svn/phpbb/trunk@6497 89ea8834-ac86-4346-8a33-228a782c2dd0
* - introducing clean usernames, needs to be tested more, I'm not sure I ↵Nils Adermann2006-10-131-1/+1
| | | | | | | | | didn't miss anything - homograph list should probably be extended git-svn-id: file:///svn/phpbb/trunk@6494 89ea8834-ac86-4346-8a33-228a782c2dd0
* tried to begin adjusting all string functions where applicable - still a ↵Meik Sievertsen2006-10-071-2/+2
| | | | | | | | | *lot* to do. i hope i catched all relevant sections and did not mess something up. git-svn-id: file:///svn/phpbb/trunk@6452 89ea8834-ac86-4346-8a33-228a782c2dd0
* - extend config checking to include check for writeable pathMeik Sievertsen2006-10-031-1/+26
| | | | | | | | | | | | | | | | | | | | | - removed not utilized user_allow_email column from schema - removed inactive groups (they had no use at all, since inactive users are not able to login) The only benefit those brought are distinguish users - but this is no longer needed too due to the inactive code present. This also allows us to retain group memberships as well as default settings for users being set inactive due to profile changes. - rewrote user_active_flip to support multiple users and a mode, as well as coping with the aforementioned changes - implemented updated jabber class to support SRV server records and for better jabberd2 support. - jabber errors now logged to the error log with a full transaction - fixed user_delete calls to include usernames where possible and also update last post information correctly - implemented additioal checks to user management to cope with common mistakes - On installation, guess the required mysql schema as best as possible. Users now only need to decide if they want to use the mysqli extension or not (mysqli selected by default) and no longer need to know their mysql version. - founders do not need to re-activate their account on profile changes - remove older session if re-authentication was successful (re-authentication always assigns a new session id) - set the cookie directly instead of using php's function - added inactive_remind to see which users got deactivated because of reminders (or re-activation) sent out hopefully not introduced too many bugs - those testing with CVS releases, please concentrate on user registration, activation, profile changes (email/password)... git-svn-id: file:///svn/phpbb/trunk@6436 89ea8834-ac86-4346-8a33-228a782c2dd0
* - Fix some bugsMeik Sievertsen2006-09-141-29/+76
| | | | | | | - fixed retrieving of permissions if the LIKE statement is used as well as proper supporting (needs testing on mssql) git-svn-id: file:///svn/phpbb/trunk@6366 89ea8834-ac86-4346-8a33-228a782c2dd0
generated by cgit v1.2.1 (git 2.21.0) at 2025-02-28 08:14:51 +0000