aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/auth/auth_db.php
Commit message (Collapse)AuthorAgeFilesLines
* [feature/auth-refactor] Remove old auth pluginsJoseph Warner2013-06-251-289/+0
| | | | PHPBB3-9734
* [ticket/8713] Trim password in auth_db to keep compatibility.Andreas Fischer2012-09-081-0/+4
| | | | PHPBB3-8713
* [ticket/9916] Updating header license and removing Version $Id$Unknown2011-12-311-2/+1
| | | | PHPBB3-9916
* Merge branch 'develop-olympus' into developIgor Wiedler2011-10-141-0/+9
|\ | | | | | | | | | | | | | | * develop-olympus: [ticket/10212] Return a CAPTCHA on incorrect username for ip limited users too Conflicts: phpBB/includes/auth/auth_db.php
| * [ticket/10212] Return a CAPTCHA on incorrect username for ip limited users tooNils Adermann2011-10-141-1/+10
| | | | | | | | PHPBB3-10212
* | [ticket/9608] Remove use of references in captcha and other placesIgor Wiedler2011-07-131-1/+1
| | | | | | | | | | | | | | | | | | References are not really needed in PHP due to copy-on-write. Since PHP5, objects are always passed around as identifiers, which means they are mutable. So it is no longer required to pass these by reference either. PHPBB3-9608
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-07-051-1/+1
|\ \ | |/ | | | | | | * develop-olympus: [ticket/10247] Use COUNT(*) instead of COUNT(attempt_id)
| * [ticket/10247] Use COUNT(*) instead of COUNT(attempt_id)Nils Adermann2011-07-041-1/+1
| | | | | | | | | | | | attempt_id column was deleted PHPBB3-10247
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-06-151-1/+1
|\ \ | |/ | | | | | | * develop-olympus: [ticket/10220] Limit user agent value length for storage in login attempt table
| * [ticket/10220] Limit user agent value length for storage in login attempt tableNils Adermann2011-06-151-1/+1
| | | | | | | | PHPBB3-10220
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-06-121-2/+2
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/9892] Correct copyright year [ticket/9892] Remove incorrect use of camel case [ticket/9892] Removing closing php tag from create_schema_files [ticket/9892] Transaction support for database update sql execution function [ticket/9892] count is a keyword in firebird, so renaming this alias [ticket/9892] Q&A CAPTCHA did not work on firebird, so no need to change config [ticket/9892] Shorten login_attempt key names to avoid firebird length problems [ticket/9892] Drop Q&A CAPTCHA tables if left in inconsistent state [ticket/9892] Adding a number of tests for db_tools [ticket/9892] Table prefix lengths influence index lengths in db_tools [ticket/9892] Shorten the index names on the q&a captcha [ticket/9892] column & index name limits, firebird auto increment in db_tools Conflicts: phpBB/develop/create_schema_files.php
| * [ticket/9892] count is a keyword in firebird, so renaming this aliasNils Adermann2011-06-121-2/+2
| | | | | | | | PHPBB3-9892
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-06-111-3/+60
|\ \ | |/ | | | | | | | | | | | | | | * develop-olympus: [ticket/9992] Clarify explanations of ip and account limits on login [ticket/9992] Add a comma to language for IP_LOGIN_LIMIT_MAX_EXPLAIN [ticket/9992] Use sql_fetchfield for single row and single column result [ticket/9992] Adding a limit on login attempts per IP. [ticket/9992] Make sql_create_table and sql_table_exists available in updater
| * [ticket/9992] Use sql_fetchfield for single row and single column resultNils Adermann2011-06-101-2/+1
| | | | | | | | PHPBB3-9992
| * [ticket/9992] Adding a limit on login attempts per IP.Nils Adermann2011-06-101-4/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | A new table was created to save all failed login attempts with corresponding information on username, ip and useragent. By default the limit is 50 login attempts within 6 hours per IP. The limit is relatively high to avoid big problems on sites behind a reverse proxy that don't receive the forwarded-for value as REMOTE_ADDR but see all users as coming from the same IP address. But if these users run into problems a special forwarded-for option is available to limit logins by forwarded-for value instead of ip. PHPBB3-9992
* | Merge branch 'feature/igorw/request-class' into developAndreas Fischer2010-12-161-2/+14
|\ \ | | | | | | | | | | | | | | | | | | | | | * feature/igorw/request-class: [feature/request-class] Convert some remaining cookies [feature/request-class] Adjust misleading comment [feature/request-class] Remove direct access to _REQUEST in acp_search [feature/request-class] Special case of direct access to _REQUEST
| * | [feature/request-class] Special case of direct access to _REQUESTIgor Wiedler2010-10-141-2/+14
| | | | | | | | | | | | PHPBB3-9716
* | | [ticket/9556] Drop php closing tags, add trailing newlineIgor Wiedler2010-11-111-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Closing tags converted using Oleg's script. remove-php-end-tags.py -a . Trailing newlines added using the following where $ext is file extension. find . -type f -name "*.$ext" -print | xargs printf "e %s\nw\n" | ed -s; Extensions: php, css, html, js, xml. PHPBB3-9556
* | | Merge branch 'develop-olympus' into developIgor Wiedler2010-10-171-2/+4
|\ \ \ | |/ / |/| / | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/7332] Fix post details expand link rendering on Webkit. [ticket/9162] Prevent notice on unset poll title [ticket/7417] Also focus search keywords and username in subsilver2. [ticket/7417] Focus username field when prosilver login page is loaded. [ticket/7417] Focus search keywords field when prosilver search page is loaded. [ticket/9841] Change "Save" to "Save draft", "Load" to "Load draft". [ticket/9664] Resolve conflict with accesskey="t", change addlitsitem to "y". [ticket/7538] Limit user_login_attempts to prevent SQL errors. [ticket/9848] Add avatars, attachments and store files to .gitignore. [ticket/9822] Correct some style related ACP explain statements. [ticket/9698] Add .htaccess to the includes subdirectory. [ticket/9830] Redirect to install directly when config.php does not exist. [ticket/9816] Remove config.php from repository [ticket/9810] Hide "Select All" of code bbcode on print page
| * [ticket/7538] Limit user_login_attempts to prevent SQL errors.Andreas Fischer2010-10-151-2/+4
| | | | | | | | PHPBB3-7538
* | [feature/auto-loading] Added autoloader to common and ensured compatabilityNils Adermann2010-07-051-2/+2
|/ | | | | | | | | | | | | | | The autoloader is registered in install without caching, since caching is set up during installation. This provides the same functionality, performance is not a concern during installation anyway. In common.php the autoloader is instantiated after the cache is initialised and is started with the standard cache backend used for other cached values. A few places in the code using class_exists had to be updated to explicitly avoid autoloading, since they are used to check whether a file needs to be included which does not (yet) follow the naming scheme the autoloader follows. PHPBB3-9682
* Make sure captcha factory is there. Make sure language array is there.Andreas Fischer2010-01-201-0/+5
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10431 89ea8834-ac86-4346-8a33-228a782c2dd0
* spacesHenry Sudhof2010-01-171-1/+1
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10418 89ea8834-ac86-4346-8a33-228a782c2dd0
* spacesHenry Sudhof2010-01-171-4/+4
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10412 89ea8834-ac86-4346-8a33-228a782c2dd0
* Always require a fresh solved captcha, don't accept a stored solution.Henry Sudhof2010-01-171-3/+8
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10411 89ea8834-ac86-4346-8a33-228a782c2dd0
* make userdata availableHenry Sudhof2010-01-141-1/+1
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10406 89ea8834-ac86-4346-8a33-228a782c2dd0
* #51395 - remove legacy captcha code. authorised by: acyd burnHenry Sudhof2009-09-151-18/+6
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10143 89ea8834-ac86-4346-8a33-228a782c2dd0
* Oh right. PHP4Henry Sudhof2009-06-131-1/+1
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9581 89ea8834-ac86-4346-8a33-228a782c2dd0
* some corrections, only very minor things.Meik Sievertsen2009-06-071-5/+5
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9554 89ea8834-ac86-4346-8a33-228a782c2dd0
* Okay, a first ci of the new captcha plugins. We'll add dynamic template ↵Henry Sudhof2009-06-021-33/+6
| | | | | | includes later, as well as documentation on how to use this. I'm prepared to get yelled at for bugs (oh, I know that there are plenty); but please blame spammers for broken styles and MODs. git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9524 89ea8834-ac86-4346-8a33-228a782c2dd0
* As proposed by marshalrusty: re-hash plain MD5s left in the databaseHenry Sudhof2009-02-061-2/+4
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9312 89ea8834-ac86-4346-8a33-228a782c2dd0
* #22525Meik Sievertsen2008-03-141-1/+11
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@8432 89ea8834-ac86-4346-8a33-228a782c2dd0
* *** empty log message ***Meik Sievertsen2007-10-051-2/+10
| | | | git-svn-id: file:///svn/phpbb/trunk@8142 89ea8834-ac86-4346-8a33-228a782c2dd0
* #i42Meik Sievertsen2007-10-041-3/+20
| | | | | | | new password hashing mechanism for storing passwords git-svn-id: file:///svn/phpbb/trunk@8139 89ea8834-ac86-4346-8a33-228a782c2dd0
* necessary changes...Meik Sievertsen2007-08-301-0/+9
| | | | git-svn-id: file:///svn/phpbb/trunk@8072 89ea8834-ac86-4346-8a33-228a782c2dd0
* - always use convert error message for unconverted incorrect passwords [Bug ↵Nils Adermann2007-05-141-1/+1
| | | | | | #10893] git-svn-id: file:///svn/phpbb/trunk@7576 89ea8834-ac86-4346-8a33-228a782c2dd0
* timezone box + shortening pm options variable as well as max login attempts fix.Meik Sievertsen2007-04-281-1/+1
| | | | git-svn-id: file:///svn/phpbb/trunk@7419 89ea8834-ac86-4346-8a33-228a782c2dd0
* - acp popup, shouldn't require 700 px widthNils Adermann2007-03-311-6/+9
| | | | | | | | | | - throw an error if an image that's edited into an imageset doesn't exist - convert the password not its hash ;-) - only update user_login_attempts if necessary - make password requirements even clearer git-svn-id: file:///svn/phpbb/trunk@7250 89ea8834-ac86-4346-8a33-228a782c2dd0
* - fix htmlspecialchars handling in search (search backends get specialchared ↵Nils Adermann2007-02-251-11/+36
| | | | | | | | | | | | | | | | | | | | input, and should return specialchared output), current backends strip entities anyway [includes Bug #8156] - allow cancelling search index creation/removal - custom CSS class name input too short [Bug #8328] - give an error message if a password wasn't convertable (special characters in non-standard encoding) - moved still_on_time to functions.php, used by acp_search and converter, might be useful for MODs (or complex cron scripts) - do not allow empty passwords on login - add sids to local URLs in posts (this was a really terrible bug to fix ;-)) [Bug #7892] - ignore invalid HTTP_X_FORWARDED_FOR headers (just use REMOTE_ADDR if invalid) [Bug #8314] - changed forum listing code on search page and acp_attachments [Bug #6658] - search indexing uses still_on_time(), smaller batch size (1000) and meta_refresh() instead of redirect(), this should solve a few problems [Bugs #8034, #8270] - made password requirement language strings clearer - ALPHA is not meant to be alphanumric [Bug #7764] - display bug in firefox on linux making the pagination wrap on search results page (caused by  ) git-svn-id: file:///svn/phpbb/trunk@7076 89ea8834-ac86-4346-8a33-228a782c2dd0
* - Pruning doesn't lower user post counts anymore [Bug #7676]Nils Adermann2007-02-081-2/+2
| | | | | | | | | | | | | - Better resync explanations in ACP - relative link to board shouldn't result in an empty link [Bug #7762] - allow spaces to define multiple classes [Bug #7700] - forgot addslashes for password conversion [Bug #7530] - adjusted get_post_data call in mcp_post to retrieve read tracking info [Bug #7538] - fixed sorting in reports/queue by properly generating the pagination links [Bug #7666] - send UTF-8 charset header in database_update.php [Bug #7564] git-svn-id: file:///svn/phpbb/trunk@6974 89ea8834-ac86-4346-8a33-228a782c2dd0
* messageNils Adermann2006-11-251-3/+27
| | | | git-svn-id: file:///svn/phpbb/trunk@6655 89ea8834-ac86-4346-8a33-228a782c2dd0
* - introducing clean usernames, needs to be tested more, I'm not sure I ↵Nils Adermann2006-10-131-1/+1
| | | | | | | | | didn't miss anything - homograph list should probably be extended git-svn-id: file:///svn/phpbb/trunk@6494 89ea8834-ac86-4346-8a33-228a782c2dd0
* - display age in user profile and make it available on viewtopicNils Adermann2006-07-071-4/+0
| | | | | | | | | | | | | | | - various tiny bugfixes including [Bug #2351] [Bug #2549] [Bug #2681] [Bug #3015] - strip first, then change newlines [Bug #2403] - added support for creating user profiles to the login function (makes use of user_add), triggered by LOGIN_SUCCESS_CREATE_PROFILE constant - moved newest user updating from ucp_register to user_add function - renamed the admin_ auth module function to acp_ - added initialisation code to auth_apache which checks whether it will work - added user_add support to both auth_ldap and auth_apache - some auth_ldap tweaks, should work with users deeper in the organisation structure too now - adjusted global topics in mcp_report to work like mcp_queue git-svn-id: file:///svn/phpbb/trunk@6151 89ea8834-ac86-4346-8a33-228a782c2dd0
* - removed db cache (might re-appear, but for now we do not see the need for it)Meik Sievertsen2006-06-161-3/+9
| | | | | | | | | | | - all changes to styles/subsilver/template are purely cosmetic (no functional changes) - cosmetics - bugfixes - add index to modules table - use modules ordering code for forums too git-svn-id: file:///svn/phpbb/trunk@6073 89ea8834-ac86-4346-8a33-228a782c2dd0
* a few changes ;-)David M2006-05-191-9/+9
| | | | git-svn-id: file:///svn/phpbb/trunk@5934 89ea8834-ac86-4346-8a33-228a782c2dd0
* - captcha stuffDavid M2006-05-131-1/+1
| | | | | | | - unique_id git-svn-id: file:///svn/phpbb/trunk@5911 89ea8834-ac86-4346-8a33-228a782c2dd0
* - streamlined reports to consist of the feature set we decided upon (Nils, ↵Meik Sievertsen2006-03-121-5/+97
| | | | | | | | | | | | | | your turn now) - use getenv instead of $_ENV (with $_ENV the case could be wrong) - permission fixes (there was a bug arising with getting permission flags - re-added them and handled roles deletion differently) - implemented max login attempts - changed the expected return parameters for logins/sessions - added acp page for editing report/denial reasons - other fixes here and there git-svn-id: file:///svn/phpbb/trunk@5622 89ea8834-ac86-4346-8a33-228a782c2dd0
* - ability to change anonymous user settings more easilyMeik Sievertsen2006-02-031-2/+3
| | | | | | | | | - fix serious bugs in permissions (always allowing if permissions explicitly set and getting wrong permission options from bitfield) - added option for returning an array to make_forum_select - again fixing bugs in module system (one for a very query consuming part and one for correctly filling the cache) git-svn-id: file:///svn/phpbb/trunk@5517 89ea8834-ac86-4346-8a33-228a782c2dd0
* - Documentation related changesMeik Sievertsen2005-04-091-10/+20
| | | | | | | | | | - added resend activation email dialog - fixed issue in session code - log failed/successful admin re-authentication/login - fixed simple forum dropdown box (used in mcp and posting) git-svn-id: file:///svn/phpbb/trunk@5114 89ea8834-ac86-4346-8a33-228a782c2dd0
* Remove need for session_ids for "allowed" bots, dump ↵Paul S. Owen2003-10-151-2/+2
| | | | | | user_founder/user_active in favour of user_type, new user_type, USER_IGNORE git-svn-id: file:///svn/phpbb/trunk@4603 89ea8834-ac86-4346-8a33-228a782c2dd0
generated by cgit v1.2.1 (git 2.21.0) at 2025-12-25 05:03:17 +0000