aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/auth
Commit message (Collapse)AuthorAgeFilesLines
* add nils' request and super globals classMeik Sievertsen2008-12-251-3/+3
| | | | | | rename request:: to phpbb_request:: git-svn-id: file:///svn/phpbb/trunk@9230 89ea8834-ac86-4346-8a33-228a782c2dd0
* remove no longer necessary files... hoorayMeik Sievertsen2008-12-241-10/+0
| | | | git-svn-id: file:///svn/phpbb/trunk@9221 89ea8834-ac86-4346-8a33-228a782c2dd0
* - updated all code to use the request class instead of any direct access toNils Adermann2008-11-241-0/+6
| | | | | | | | | super globals - disabled super globals in common.php. See commit r9101 for more information - cleaned up/simplified a few lines along the way. git-svn-id: file:///svn/phpbb/trunk@9102 89ea8834-ac86-4346-8a33-228a782c2dd0
* Okay, that is pretty raw, but better to have it in place than trying to play ↵Henry Sudhof2008-09-191-33/+6
| | | | | | catch-up. Introducing an early stage of CAPTCHA modules. git-svn-id: file:///svn/phpbb/trunk@8889 89ea8834-ac86-4346-8a33-228a782c2dd0
* HTTP Authentication supports UTF-8 usernames now [Bug #21135]Nils Adermann2008-06-041-3/+3
| | | | git-svn-id: file:///svn/phpbb/trunk@8603 89ea8834-ac86-4346-8a33-228a782c2dd0
* ok... i hope i haven't messed too much with the code and everything is still ↵Meik Sievertsen2008-05-292-5/+2
| | | | | | | | | | working. Changes: - Ascraeus now uses constants for the phpbb root path and the php extension. This ensures more security for external applications and modifications (no more overwriting of root path and extension possible through insecure mods and register globals enabled) as well as no more globalizing needed. - A second change implemented here is an additional short-hand-notation for append_sid(). It is allowed to omit the root path and extension now (for example calling append_sid('memberlist')) - in this case the root path and extension get added automatically. The hook is called after these are added. git-svn-id: file:///svn/phpbb/trunk@8572 89ea8834-ac86-4346-8a33-228a782c2dd0
* merging... againMeik Sievertsen2008-03-183-3/+33
| | | | git-svn-id: file:///svn/phpbb/trunk@8452 89ea8834-ac86-4346-8a33-228a782c2dd0
* - make viewforum work againDavid M2008-01-082-2/+2
| | | | | | | | | - remove the lower case functions, they were stupid anyway - added some indexes - added a group_name_clean column git-svn-id: file:///svn/phpbb/trunk@8315 89ea8834-ac86-4346-8a33-228a782c2dd0
* oh boy...David M2008-01-031-2/+3
| | | | | | | - Migrate code base to PHP 5.1+ git-svn-id: file:///svn/phpbb/trunk@8295 89ea8834-ac86-4346-8a33-228a782c2dd0
* *** empty log message ***Meik Sievertsen2007-10-053-8/+32
| | | | git-svn-id: file:///svn/phpbb/trunk@8142 89ea8834-ac86-4346-8a33-228a782c2dd0
* #i42Meik Sievertsen2007-10-043-5/+22
| | | | | | | new password hashing mechanism for storing passwords git-svn-id: file:///svn/phpbb/trunk@8139 89ea8834-ac86-4346-8a33-228a782c2dd0
* necessary changes...Meik Sievertsen2007-08-303-0/+27
| | | | git-svn-id: file:///svn/phpbb/trunk@8072 89ea8834-ac86-4346-8a33-228a782c2dd0
* - added an option to specify a port for the LDAP serverNils Adermann2007-08-231-3/+27
| | | | | | | - restricted access to "Recent searches" to admins who are allowed to configure search [Bug #14085] git-svn-id: file:///svn/phpbb/trunk@8064 89ea8834-ac86-4346-8a33-228a782c2dd0
* - allow multibyte search configurationNils Adermann2007-08-181-11/+34
| | | | | | | | | - added ldap_user_filter to add additional restrictions on the user objects used for authentication [Bug #12627] - improved ldap explanations a bit - display searchable subforums of invisible parents in advanced search forum selection [Bug #11395] git-svn-id: file:///svn/phpbb/trunk@8047 89ea8834-ac86-4346-8a33-228a782c2dd0
* - always use convert error message for unconverted incorrect passwords [Bug ↵Nils Adermann2007-05-141-1/+1
| | | | | | #10893] git-svn-id: file:///svn/phpbb/trunk@7576 89ea8834-ac86-4346-8a33-228a782c2dd0
* timezone box + shortening pm options variable as well as max login attempts fix.Meik Sievertsen2007-04-281-1/+1
| | | | git-svn-id: file:///svn/phpbb/trunk@7419 89ea8834-ac86-4346-8a33-228a782c2dd0
* - acp popup, shouldn't require 700 px widthNils Adermann2007-03-311-6/+9
| | | | | | | | | | - throw an error if an image that's edited into an imageset doesn't exist - convert the password not its hash ;-) - only update user_login_attempts if necessary - make password requirements even clearer git-svn-id: file:///svn/phpbb/trunk@7250 89ea8834-ac86-4346-8a33-228a782c2dd0
* - fix htmlspecialchars handling in search (search backends get specialchared ↵Nils Adermann2007-02-251-11/+36
| | | | | | | | | | | | | | | | | | | | input, and should return specialchared output), current backends strip entities anyway [includes Bug #8156] - allow cancelling search index creation/removal - custom CSS class name input too short [Bug #8328] - give an error message if a password wasn't convertable (special characters in non-standard encoding) - moved still_on_time to functions.php, used by acp_search and converter, might be useful for MODs (or complex cron scripts) - do not allow empty passwords on login - add sids to local URLs in posts (this was a really terrible bug to fix ;-)) [Bug #7892] - ignore invalid HTTP_X_FORWARDED_FOR headers (just use REMOTE_ADDR if invalid) [Bug #8314] - changed forum listing code on search page and acp_attachments [Bug #6658] - search indexing uses still_on_time(), smaller batch size (1000) and meta_refresh() instead of redirect(), this should solve a few problems [Bugs #8034, #8270] - made password requirement language strings clearer - ALPHA is not meant to be alphanumric [Bug #7764] - display bug in firefox on linux making the pagination wrap on search results page (caused by  ) git-svn-id: file:///svn/phpbb/trunk@7076 89ea8834-ac86-4346-8a33-228a782c2dd0
* - Pruning doesn't lower user post counts anymore [Bug #7676]Nils Adermann2007-02-081-2/+2
| | | | | | | | | | | | | - Better resync explanations in ACP - relative link to board shouldn't result in an empty link [Bug #7762] - allow spaces to define multiple classes [Bug #7700] - forgot addslashes for password conversion [Bug #7530] - adjusted get_post_data call in mcp_post to retrieve read tracking info [Bug #7538] - fixed sorting in reports/queue by properly generating the pagination links [Bug #7666] - send UTF-8 charset header in database_update.php [Bug #7564] git-svn-id: file:///svn/phpbb/trunk@6974 89ea8834-ac86-4346-8a33-228a782c2dd0
* - display search type as page title for premade searches [Bug #6508]Nils Adermann2006-12-271-1/+1
| | | | | | | | | | | | | | | - flash enabled on user side by default, so that admins can actually change anything by activating it (still disabled by default) - properly implemented password complexity check [Bug #6584] - do not ldap_escape paramaters for the bind function [Bug #6208] - deleted words in edited post subjects weren't getting there search cache refreshed [Bug #6288] - made common word threshold configurable [Bug #6168] - recreated word match table entries after installation, side effect of bug #6060 - option to only allow ASCII usernames - adjusted search page pagination [Bug #6424] - correctly calculate unformatted search result extract length git-svn-id: file:///svn/phpbb/trunk@6814 89ea8834-ac86-4346-8a33-228a782c2dd0
* - finally correctly calculate current time for birthday calculation [Bug #6030]Nils Adermann2006-12-101-1/+25
| | | | | | | | | | | | | | | | - allow searching forums with unsearchable subforums [Bug #6056] - addition of an optional HTTP_X_FORWARDED_FOR check in sessions, including bans - do not index forums which have indexing disabled on index recreation [Bug #6060] - properly handle html entities in the theme editor [Bug #6048] - anonymous access is no longer required for the LDAP auth plugin [Bug #6046] - corrected mcp_front queue link to point to approve_details [Bug #6134] - added direct (dis)approval to mcp_front queue items [Bug #6134] - proper mysql version test for fulltext-compatibility [Bug #6054] - added note to style/language "used by" column so it's clear that bots are included - correctly update bot last visit time [Bug #6108] git-svn-id: file:///svn/phpbb/trunk@6740 89ea8834-ac86-4346-8a33-228a782c2dd0
* messageNils Adermann2006-11-251-3/+27
| | | | git-svn-id: file:///svn/phpbb/trunk@6655 89ea8834-ac86-4346-8a33-228a782c2dd0
* some style related changes/fixesMeik Sievertsen2006-11-191-2/+2
| | | | git-svn-id: file:///svn/phpbb/trunk@6604 89ea8834-ac86-4346-8a33-228a782c2dd0
* ok, i am an idiot...Meik Sievertsen2006-11-031-3/+3
| | | | git-svn-id: file:///svn/phpbb/trunk@6548 89ea8834-ac86-4346-8a33-228a782c2dd0
* - implemented the suggested html_entity_decode function made by davidMeik Sievertsen2006-11-031-2/+2
| | | | | | | | - fixed string length checking by also decoding entities for the sake of checking - used the new html_entity_decode function git-svn-id: file:///svn/phpbb/trunk@6545 89ea8834-ac86-4346-8a33-228a782c2dd0
* two tiny bugfixesMeik Sievertsen2006-10-271-0/+7
| | | | git-svn-id: file:///svn/phpbb/trunk@6532 89ea8834-ac86-4346-8a33-228a782c2dd0
* - introducing clean usernames, needs to be tested more, I'm not sure I ↵Nils Adermann2006-10-133-5/+5
| | | | | | | | | didn't miss anything - homograph list should probably be extended git-svn-id: file:///svn/phpbb/trunk@6494 89ea8834-ac86-4346-8a33-228a782c2dd0
* - auto sync attachment topic flag [Bug #2949]Nils Adermann2006-08-122-9/+29
| | | | | | | | | - corrected paths for templates stored in the db and filenames displayed in the template editor [Bug #3662] - removed some useless language strings [Bug #3648] - corrected escaping of usernames and passwords in auth modules [Bug #3696], added ldap_escape git-svn-id: file:///svn/phpbb/trunk@6266 89ea8834-ac86-4346-8a33-228a782c2dd0
* - display age in user profile and make it available on viewtopicNils Adermann2006-07-073-49/+164
| | | | | | | | | | | | | | | - various tiny bugfixes including [Bug #2351] [Bug #2549] [Bug #2681] [Bug #3015] - strip first, then change newlines [Bug #2403] - added support for creating user profiles to the login function (makes use of user_add), triggered by LOGIN_SUCCESS_CREATE_PROFILE constant - moved newest user updating from ucp_register to user_add function - renamed the admin_ auth module function to acp_ - added initialisation code to auth_apache which checks whether it will work - added user_add support to both auth_ldap and auth_apache - some auth_ldap tweaks, should work with users deeper in the organisation structure too now - adjusted global topics in mcp_report to work like mcp_queue git-svn-id: file:///svn/phpbb/trunk@6151 89ea8834-ac86-4346-8a33-228a782c2dd0
* - removed db cache (might re-appear, but for now we do not see the need for it)Meik Sievertsen2006-06-163-16/+22
| | | | | | | | | | | - all changes to styles/subsilver/template are purely cosmetic (no functional changes) - cosmetics - bugfixes - add index to modules table - use modules ordering code for forums too git-svn-id: file:///svn/phpbb/trunk@6073 89ea8834-ac86-4346-8a33-228a782c2dd0
* a few changes ;-)David M2006-05-191-9/+9
| | | | git-svn-id: file:///svn/phpbb/trunk@5934 89ea8834-ac86-4346-8a33-228a782c2dd0
* - captcha stuffDavid M2006-05-131-1/+1
| | | | | | | - unique_id git-svn-id: file:///svn/phpbb/trunk@5911 89ea8834-ac86-4346-8a33-228a782c2dd0
* - added login error constant for various external auth failuresNils Adermann2006-04-212-10/+117
| | | | | | | | | - completed auth plugin interface (init_method, login_method, autologin_method, validate_session_method, logout_method) - updated ldap and apache auth plugins to return an info array - added apache autologin git-svn-id: file:///svn/phpbb/trunk@5815 89ea8834-ac86-4346-8a33-228a782c2dd0
* - Added init_{$auth_plugin} function which can be used to test a connection ↵Nils Adermann2006-03-181-0/+42
| | | | | | to the authentication system before actually saving the new configuration. This will hopefully stop people from locking themselves out by using an authentication system that they cannot connect to. git-svn-id: file:///svn/phpbb/trunk@5653 89ea8834-ac86-4346-8a33-228a782c2dd0
* - streamlined reports to consist of the feature set we decided upon (Nils, ↵Meik Sievertsen2006-03-121-5/+97
| | | | | | | | | | | | | | your turn now) - use getenv instead of $_ENV (with $_ENV the case could be wrong) - permission fixes (there was a bug arising with getting permission flags - re-added them and handled roles deletion differently) - implemented max login attempts - changed the expected return parameters for logins/sessions - added acp page for editing report/denial reasons - other fixes here and there git-svn-id: file:///svn/phpbb/trunk@5622 89ea8834-ac86-4346-8a33-228a782c2dd0
* - ability to change anonymous user settings more easilyMeik Sievertsen2006-02-031-2/+3
| | | | | | | | | - fix serious bugs in permissions (always allowing if permissions explicitly set and getting wrong permission options from bitfield) - added option for returning an array to make_forum_select - again fixing bugs in module system (one for a very query consuming part and one for correctly filling the cache) git-svn-id: file:///svn/phpbb/trunk@5517 89ea8834-ac86-4346-8a33-228a782c2dd0
* - Apache auth plugin is working againNils Adermann2005-12-162-7/+9
| | | | | | | | | - LDAP auth plugin now supports OpenLDAP - fixed Authentication settings in ACP - preparatory ACP changes for the search git-svn-id: file:///svn/phpbb/trunk@5340 89ea8834-ac86-4346-8a33-228a782c2dd0
* - more acp additions and changes...Meik Sievertsen2005-11-201-16/+23
| | | | git-svn-id: file:///svn/phpbb/trunk@5310 89ea8834-ac86-4346-8a33-228a782c2dd0
* - added updated coding guidelinesMeik Sievertsen2005-04-101-1/+1
| | | | | | | | - introduced is_registered and is_bot flags for correct determinition of guest/registered/bot users - changed bot code to act on useragent || ip git-svn-id: file:///svn/phpbb/trunk@5117 89ea8834-ac86-4346-8a33-228a782c2dd0
* - Documentation related changesMeik Sievertsen2005-04-093-40/+75
| | | | | | | | | | - added resend activation email dialog - fixed issue in session code - log failed/successful admin re-authentication/login - fixed simple forum dropdown box (used in mcp and posting) git-svn-id: file:///svn/phpbb/trunk@5114 89ea8834-ac86-4346-8a33-228a782c2dd0
* Remove need for session_ids for "allowed" bots, dump ↵Paul S. Owen2003-10-153-6/+6
| | | | | | user_founder/user_active in favour of user_type, new user_type, USER_IGNORE git-svn-id: file:///svn/phpbb/trunk@4603 89ea8834-ac86-4346-8a33-228a782c2dd0
* Updated the various "users of emailer", fixed issue(!) of jabber using the ↵Paul S. Owen2003-10-123-6/+6
| | | | | | email address as the uid, blah fixes, blah, blah di blah yakety smackety git-svn-id: file:///svn/phpbb/trunk@4583 89ea8834-ac86-4346-8a33-228a782c2dd0
* Add Id tagsPaul S. Owen2003-03-243-0/+9
| | | | git-svn-id: file:///svn/phpbb/trunk@3707 89ea8834-ac86-4346-8a33-228a782c2dd0
* CapitalisationPaul S. Owen2003-03-241-3/+3
| | | | git-svn-id: file:///svn/phpbb/trunk@3706 89ea8834-ac86-4346-8a33-228a782c2dd0
* Some changes to the returned data format + cleanupsPaul S. Owen2003-03-093-31/+45
| | | | git-svn-id: file:///svn/phpbb/trunk@3622 89ea8834-ac86-4346-8a33-228a782c2dd0
* only minor changes, some notes, played around with the code... nothing special.Meik Sievertsen2003-02-261-1/+0
| | | | git-svn-id: file:///svn/phpbb/trunk@3543 89ea8834-ac86-4346-8a33-228a782c2dd0
* Mostly changes to turn userdata into user->data, lang into user->lang + ↵Paul S. Owen2002-10-203-8/+8
| | | | | | bitstring 2nd format + inheritance for permission admin and various other updates/fixes/changes ... note that user->lang & user->theme isn't final git-svn-id: file:///svn/phpbb/trunk@2958 89ea8834-ac86-4346-8a33-228a782c2dd0
* Well, here are all my changes ... don't blame me if things break :DPaul S. Owen2002-10-041-9/+25
| | | | git-svn-id: file:///svn/phpbb/trunk@2923 89ea8834-ac86-4346-8a33-228a782c2dd0
* Return required config fields to board adminPaul S. Owen2002-08-071-0/+5
| | | | git-svn-id: file:///svn/phpbb/trunk@2839 89ea8834-ac86-4346-8a33-228a782c2dd0
* Fix errors, add admin output for ldapPaul S. Owen2002-08-072-4/+25
| | | | git-svn-id: file:///svn/phpbb/trunk@2836 89ea8834-ac86-4346-8a33-228a782c2dd0