aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/session.php
Commit message (Collapse)AuthorAgeFilesLines
* [feature/remove-db-styles] Remove DB theme handling code from session.Chris Smith2011-09-201-49/+2
| | | | PHPBB3-9741
* [feature/remove-db-styles] Removed database storage of style components.Chris Smith2011-09-201-2/+2
| | | | | | | | | | | | The bulk of database storage of templates is removed, rendering template stored in the database as useless. Theme database storage is reduced to a skeleton for full removal soon. This commit was cherry picked from the old feature/ascraeus-experiment branch the old commit hash is 0dbe7e3b6cd450342d3c566eb2caf36ca1b5db8e. PHPBB3-9741
* [feature/remove-imagesets] Adjustments to php filesVjacheslav Trushkin2011-09-041-177/+9
| | | | | | Removing imagesets. Adjustments to php files PHPBB3-10336
* Merge branch 'develop-olympus' into developNils Adermann2011-08-251-0/+33
|\ | | | | | | | | | | * develop-olympus: [ticket/10320] Exclude passworded forums when determining "Most active topic". [ticket/10320] Move phpbb_feed_base::get_passworded_forums() to user class.
| * [ticket/10320] Move phpbb_feed_base::get_passworded_forums() to user class.Andreas Fischer2011-08-251-0/+33
| | | | | | | | PHPBB3-10320
* | [feature/request-class] Adjust code base to do html decoding manuallyIgor Wiedler2011-08-181-8/+8
| | | | | | | | PHPBB3-9716
* | [feature/request-class] Remove useless conditionIgor Wiedler2011-07-161-1/+1
| | | | | | | | PHPBB3-9716
* | [feature/request-class] Add server(), header() and is_ajax() to requestIgor Wiedler2011-07-151-14/+16
| | | | | | | | | | | | | | | | | | | | | | | | Extend the request class with helpers for reading server vars (server()) and HTTP request headers (header()). Refactor the existing code base to make use of these helpers, make $_SERVER a deactivated super global. Also introduce an is_ajax() method, which checks the X-Requested-With header for the value 'XMLHttpRequest', which is sent by JavaScript libraries, such as jQuery. PHPBB3-9716
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-07-071-1/+36
|\ \ | |/ | | | | | | | | | | | | * develop-olympus: [ticket/10250] The site_logo hash is different depending on imageset & language [ticket/10250] Destroy cached md5 hash of site_logo on refreshing an imageset [ticket/10250] Overwrite the site_logo width&height when the phpbb logo is used [ticket/10250] Added the new phpBB Logo with the Registered Trademark Symbol
| * [ticket/10250] The site_logo hash is different depending on imageset & languageNils Adermann2011-07-061-4/+12
| | | | | | | | PHPBB3-10250
| * [ticket/10250] Overwrite the site_logo width&height when the phpbb logo is usedNils Adermann2011-07-051-1/+28
| | | | | | | | | | | | | | | | | | | | The new logo is slightly wider than the old logo. If we changed the size in the imageset.cfg we would cause a conflict for everyone who replaced the logo with their own and modified the size. Instead we overwrite the width and height in the img() function in session.php only if its contents are that of the stock phpbb logo. PHPBB3-10250
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-06-111-0/+4
|\ \ | |/ | | | | | | | | | | | | | | * develop-olympus: [ticket/9992] Clarify explanations of ip and account limits on login [ticket/9992] Add a comma to language for IP_LOGIN_LIMIT_MAX_EXPLAIN [ticket/9992] Use sql_fetchfield for single row and single column result [ticket/9992] Adding a limit on login attempts per IP. [ticket/9992] Make sql_create_table and sql_table_exists available in updater
| * Merge remote-tracking branch 'naderman/ticket/9992' into develop-olympusAndreas Fischer2011-06-111-0/+4
| |\ | | | | | | | | | | | | | | | | | | | | | | | | * naderman/ticket/9992: [ticket/9992] Clarify explanations of ip and account limits on login [ticket/9992] Add a comma to language for IP_LOGIN_LIMIT_MAX_EXPLAIN [ticket/9992] Use sql_fetchfield for single row and single column result [ticket/9992] Adding a limit on login attempts per IP. [ticket/9992] Make sql_create_table and sql_table_exists available in updater
| | * [ticket/9992] Adding a limit on login attempts per IP.Nils Adermann2011-06-101-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A new table was created to save all failed login attempts with corresponding information on username, ip and useragent. By default the limit is 50 login attempts within 6 hours per IP. The limit is relatively high to avoid big problems on sites behind a reverse proxy that don't receive the forwarded-for value as REMOTE_ADDR but see all users as coming from the same IP address. But if these users run into problems a special forwarded-for option is available to limit logins by forwarded-for value instead of ip. PHPBB3-9992
* | | Merge branch 'develop-olympus' into developNils Adermann2011-06-111-0/+1
|\ \ \ | |/ / | | | | | | | | | * develop-olympus: [ticket/9908] Send 301 before stripping SID so bots do (hopefully) not revisit.
| * | [ticket/9908] Send 301 before stripping SID so bots do (hopefully) not revisit.Andreas Fischer2011-06-101-0/+1
| |/ | | | | | | PHPBB3-9908
* | Merge branch 'develop-olympus' into developNils Adermann2011-06-101-18/+23
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/9802] Remove unnecessary htmlspecialchars() call on REMOTE_ADDR. [ticket/9802] Only check for IPv4-mapped address when address is IPv6. [ticket/9802] Fix tiny logic bug in loop determining REMOTE_ADDR. [ticket/9802] Remove redundant character class definition from preg_replace. [ticket/9802] Fix redundant str_replace call. No need to replace ' ' with ' '. Conflicts: phpBB/includes/session.php
| * Merge branch 'ticket/bantu/9802' into develop-olympusNils Adermann2011-06-101-18/+23
| |\ | | | | | | | | | | | | | | | | | | | | | | | | * ticket/bantu/9802: [ticket/9802] Remove unnecessary htmlspecialchars() call on REMOTE_ADDR. [ticket/9802] Only check for IPv4-mapped address when address is IPv6. [ticket/9802] Fix tiny logic bug in loop determining REMOTE_ADDR. [ticket/9802] Remove redundant character class definition from preg_replace. [ticket/9802] Fix redundant str_replace call. No need to replace ' ' with ' '.
| | * [ticket/9802] Remove unnecessary htmlspecialchars() call on REMOTE_ADDR.Andreas Fischer2011-04-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | The value in $_SERVER['REMOTE_ADDR'] is either validated to be a valid IP address or is replaced by our default value. Valid IP addresses do not contain HTML special characters, thus the htmlspecialchars() call is unnecessary. PHPBB3-9802
| | * [ticket/9802] Only check for IPv4-mapped address when address is IPv6.Andreas Fischer2011-04-191-14/+19
| | | | | | | | | | | | PHPBB3-9802
| | * [ticket/9802] Fix tiny logic bug in loop determining REMOTE_ADDR.Andreas Fischer2011-04-191-2/+2
| | | | | | | | | | | | | | | | | | When $ip is empty() it was assigned to $this->ip. PHPBB3-9802
| | * [ticket/9802] Remove redundant character class definition from preg_replace.Andreas Fischer2011-04-191-2/+2
| | | | | | | | | | | | PHPBB3-9802
| | * [ticket/9802] Fix redundant str_replace call. No need to replace ' ' with ' '.Andreas Fischer2011-04-191-2/+2
| | | | | | | | | | | | PHPBB3-9802
* | | Merge branch 'develop-olympus' into developNils Adermann2011-06-051-0/+6
|\ \ \ | |/ / | | | | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/10158] Remove some code duplication from generating the message. [ticket/10195] Return false in session::check_dnsbl() when IPv6 is passed. [ticket/10158] Only view "Return to" links if they are useful. [ticket/10158] Add return-link to folder, when the user replied from a folder. [ticket/10158] Add "Return to Inbox"-link to "PM send"-message.
| * | [ticket/10195] Return false in session::check_dnsbl() when IPv6 is passed.Andreas Fischer2011-05-261-0/+6
| |/ | | | | | | | | | | There is no support for IPv6 addresses in the blacklists we check right now. PHPBB3-10195
* | Merge branch 'develop-olympus' into developOleg Pudeyev2011-02-261-6/+7
|\ \ | |/ | | | | | | * develop-olympus: [ticket/9912] Fix error in logic. Do not strip SID when user is not a bot.
| * [ticket/9912] Fix error in logic. Do not strip SID when user is not a bot.Andreas Fischer2011-02-251-6/+7
| | | | | | | | | | | | | | | | This also moves the code up to the point where we know that the user is a bot. Regression from d07e152ea7e820c5a0e47aeb8004fa0b5621a314 PHPBB3-9912
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-02-071-0/+1
|\ \ | |/ | | | | | | | | * develop-olympus: [ticket/9949] Unit tests for user::lang() [ticket/9949] $user->lang() uses last int-value to get the key not first
| * [ticket/9949] $user->lang() uses last int-value to get the key not firstJoas Schilling2011-01-291-0/+1
| | | | | | | | | | | | | | | | The comment in the code says: "We now get the first number passed and will select the key based upon this number". But the loop over the arguments is not left and therefore it uses the last int-value not the first one. PHPBB3-9949
* | [ticket/9746] Adding calls to phpbb_ip_normalise() from session management.Andreas Fischer2011-01-031-0/+18
| | | | | | | | PHPBB3-9746
* | [feature/update-session-api] Add update_session methodIgor Wiedler2010-12-291-9/+20
| | | | | | | | PHPBB3-9688
* | Merge branch 'feature/igorw/request-class' into developAndreas Fischer2010-12-161-1/+2
|\ \ | | | | | | | | | | | | | | | | | | | | | * feature/igorw/request-class: [feature/request-class] Convert some remaining cookies [feature/request-class] Adjust misleading comment [feature/request-class] Remove direct access to _REQUEST in acp_search [feature/request-class] Special case of direct access to _REQUEST
| * | [feature/request-class] Convert some remaining cookiesIgor Wiedler2010-10-171-1/+2
| | | | | | | | | | | | | | | | | | | | | Convert some remaining accesses to cookie to use the request class instead. Thanks to bantu for the note. PHPBB3-9716
* | | [ticket/9556] Drop php closing tags, add trailing newlineIgor Wiedler2010-11-111-2/+0
|/ / | | | | | | | | | | | | | | | | | | | | | | Closing tags converted using Oleg's script. remove-php-end-tags.py -a . Trailing newlines added using the following where $ext is file extension. find . -type f -name "*.$ext" -print | xargs printf "e %s\nw\n" | ed -s; Extensions: php, css, html, js, xml. PHPBB3-9556
* | [feature/request-class] Replace direct use of GET/REQUEST with request_var.Nils Adermann2010-09-171-4/+5
| | | | | | | | | | | | | | Now with $_VARs causing fatal errors we should really be able to find and delete all of these occurances. PHPBB3-9716
* | Merge branch 'develop-olympus' into developIgor Wiedler2010-09-161-0/+11
|\ \ | |/ | | | | | | * develop-olympus: [ticket/9091] Extract IPv4 address from addresses mapped into IPv6.
| * Merge branch 'ticket/bantu/9091' into develop-olympusIgor Wiedler2010-09-161-0/+11
| |\ | | | | | | | | | | | | * ticket/bantu/9091: [ticket/9091] Extract IPv4 address from addresses mapped into IPv6.
| | * [ticket/9091] Extract IPv4 address from addresses mapped into IPv6.Andreas Fischer2010-07-231-0/+11
| | | | | | | | | | | | PHPBB3-9091
* | | Merge branch 'develop-olympus' into developIgor Wiedler2010-09-161-3/+3
|\ \ \ | |/ / | | | | | | | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/9609] Change header() calls setting HTTP status to send_status_line(). [ticket/9613] Slightly update language strings. [ticket/9613] Fix missing database part for unread posts search load switch. [ticket/9613] Implement a load switch for unread posts search feature. [ticket/9785] Allow users to request new passwords when board is disabled. [ticket/9644] Check $mode before calling user_notification() from submit_post()
| * | [ticket/9609] Change header() calls setting HTTP status to send_status_line().Andreas Fischer2010-09-111-3/+3
| | | | | | | | | | | | PHPBB3-9609
* | | Merge branch 'develop-olympus' into developNils Adermann2010-08-211-1/+1
|\ \ \ | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * develop-olympus: (57 commits) Revert "[ticket/7716] Data too long for column 'message_subject'" [ticket/7716] Data too long for column 'message_subject' [ticket/9780] Adding unit tests for gen_rand_string(). [ticket/9780] Add length check back to gen_rand_string(). [ticket/7972] Copying topics in the MCP now indexes the new topic. [ticket/9782] Board disable radio set on when server load high [ticket/9635] Useless parameter $data['post_time'] in function submit_post. [ticket/9104] Safari does not display box headers correctly in the ACP. [ticket/9777] Print error message in pre-commit hook when php is not installed. [ticket/7716] Data too long for column 'message_subject' [task/git-tools] Ignore git commit message comments [task/git-tools] Adjust the hook to enforce that a ticket is always mentioned [task/git-tools] Vastly expanded commit-msg hook. [task/git-tools] Beginnings of a syntax checking hook. [task/git-tools] Append ticket identifier to commit message prior to editing. [ticket/7332] Redirect users back to post details when performing actions. [ticket/7332] Collapse post details content down to a maximum of 300px heigh [ticket/9771] Remove query string parameters that have no name. [ticket/9760] Remove unrestricted wildcards from search terms. [ticket/9599] Reimplement phpbb_checkdnsrr() function. ... Conflicts: tests/template/template.php
| * | [ticket/9782] Board disable radio set on when server load highJoas Schilling2010-08-201-1/+1
| |/ | | | | | | PHPBB3-9782
* | Merge branch 'develop-olympus' into developAndreas Fischer2010-07-081-2/+2
|\ \ | |/ | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/9712] Future dates can be formatted as 'less than one minute ago' [ticket/9659] Signature options in set_user_options [ticket/9703] Correct database leak where deleting user did not rm some PM data [ticket/9697] Backlink broken when the select parent forum does not exist. [ticket/9695] Correct the improper display of user input in mcp_ban.php [ticket/9628] _add_module 'after'-parameter does not work correctly. [ticket/9578] ACP Posting tab is missing "Post settings" module.
| * [ticket/9712] Future dates can be formatted as 'less than one minute ago'Chris Smith2010-07-071-2/+2
| | | | | | | | PHPBB3-9712
* | [feature/auto-loading] Added autoloader to common and ensured compatabilityNils Adermann2010-07-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The autoloader is registered in install without caching, since caching is set up during installation. This provides the same functionality, performance is not a concern during installation anyway. In common.php the autoloader is instantiated after the cache is initialised and is started with the standard cache backend used for other cached values. A few places in the code using class_exists had to be updated to explicitly avoid autoloading, since they are used to check whether a file needs to be included which does not (yet) follow the naming scheme the autoloader follows. PHPBB3-9682
* | Merge branch 'develop-olympus' into developNils Adermann2010-04-041-1/+1
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * develop-olympus: (26 commits) [git-tools] add note about PHP_BIN using env [git-tools] do not display stderr [git-tools] Prepend the branch to the commit message for all branches. [git-tools] Use env to find the correct paths to binaries. [git-tools] Display what parse errors were found. [git-tools] This script requires bash to run, so point directly to bash. [feature/dbal-tests] Remove hardcoded 'mysql' from PDO DSN in DBAL test. [feature/dbal-tests] Fix mysql (not mysqli) dbal test. [feature/dbal-tests] Only output the missing config error message once. [feature/dbal-tests] Make the PDO prefix depend on the dbms. [feature/dbal-tests] Fix whitespace and line endings. [bug/9108] Fix table binding issues with PostgreSQL in board-wide feed. (Old Bug #58425) [bug/59425] Correctly check for double inclusion in captcha garbage collection [bug/58465] The redirect hidden field is now XHTML conform [feature/dbal-tests] Make some tests for build_array_data on SELECT [feature/dbal-tests] Make some tests for return_on_error on SELECT-queries [feature/dbal-tests] Tests for $db->sql_query_limit() [feature/dbal-tests] Load phpbb-schema after creating the connection to the database [feature/dbal-tests] Added tests for dbal fetchrow and fetchfield. [feature/dbal-tests] Added database test & refactored test framework ...
| * [bug/59425] Correctly check for double inclusion in captcha garbage collectionU-H-PC\H2010-03-281-1/+1
| | | | | | | | | | | | The check to avoid the double inclusion of the captcha factory class in the garbage collection code was faulty, checking for "captcha_factory" instead of "phpbb_captcha_factory". TerryE pointed the problem out, thanks!
* | Merge branch 'develop-olympus' into developNils Adermann2010-03-261-0/+6
|\ \ | |/ | | | | | | | | | | | | * develop-olympus: [develop-olympus] Make this test run on windows with backslash-paths. [bug/56965] Redirect fails with directory traversal [bug/58685] Correct spelling errors in append_sid() comments. [bug/58025] Search robots are now redirected if they send a SID in the request
| * [bug/58025] Search robots are now redirected if they send a SID in the requestChris Smith2010-03-131-0/+6
| | | | | | | | | | | | | | Previously search robots could stumble upon a board link somewhere on the web containing a SID they'd follow it and end up indexing that page with the SID in the request URI, this fix prevents that by redirecting them to the same URI just without the SID.
* | Merge branch 'develop-olympus' into developNils Adermann2010-03-081-1/+1
|\ \ | |/
generated by cgit v1.2.1 (git 2.21.0) at 2026-03-28 23:38:58 +0000