aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/session.php
Commit message (Collapse)AuthorAgeFilesLines
...
| * | [ticket/9908] Send 301 before stripping SID so bots do (hopefully) not revisit.Andreas Fischer2011-06-101-0/+1
| |/ | | | | | | PHPBB3-9908
* | Merge branch 'develop-olympus' into developNils Adermann2011-06-101-18/+23
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/9802] Remove unnecessary htmlspecialchars() call on REMOTE_ADDR. [ticket/9802] Only check for IPv4-mapped address when address is IPv6. [ticket/9802] Fix tiny logic bug in loop determining REMOTE_ADDR. [ticket/9802] Remove redundant character class definition from preg_replace. [ticket/9802] Fix redundant str_replace call. No need to replace ' ' with ' '. Conflicts: phpBB/includes/session.php
| * Merge branch 'ticket/bantu/9802' into develop-olympusNils Adermann2011-06-101-18/+23
| |\ | | | | | | | | | | | | | | | | | | | | | | | | * ticket/bantu/9802: [ticket/9802] Remove unnecessary htmlspecialchars() call on REMOTE_ADDR. [ticket/9802] Only check for IPv4-mapped address when address is IPv6. [ticket/9802] Fix tiny logic bug in loop determining REMOTE_ADDR. [ticket/9802] Remove redundant character class definition from preg_replace. [ticket/9802] Fix redundant str_replace call. No need to replace ' ' with ' '.
| | * [ticket/9802] Remove unnecessary htmlspecialchars() call on REMOTE_ADDR.Andreas Fischer2011-04-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | The value in $_SERVER['REMOTE_ADDR'] is either validated to be a valid IP address or is replaced by our default value. Valid IP addresses do not contain HTML special characters, thus the htmlspecialchars() call is unnecessary. PHPBB3-9802
| | * [ticket/9802] Only check for IPv4-mapped address when address is IPv6.Andreas Fischer2011-04-191-14/+19
| | | | | | | | | | | | PHPBB3-9802
| | * [ticket/9802] Fix tiny logic bug in loop determining REMOTE_ADDR.Andreas Fischer2011-04-191-2/+2
| | | | | | | | | | | | | | | | | | When $ip is empty() it was assigned to $this->ip. PHPBB3-9802
| | * [ticket/9802] Remove redundant character class definition from preg_replace.Andreas Fischer2011-04-191-2/+2
| | | | | | | | | | | | PHPBB3-9802
| | * [ticket/9802] Fix redundant str_replace call. No need to replace ' ' with ' '.Andreas Fischer2011-04-191-2/+2
| | | | | | | | | | | | PHPBB3-9802
* | | Merge branch 'develop-olympus' into developNils Adermann2011-06-051-0/+6
|\ \ \ | |/ / | | | | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/10158] Remove some code duplication from generating the message. [ticket/10195] Return false in session::check_dnsbl() when IPv6 is passed. [ticket/10158] Only view "Return to" links if they are useful. [ticket/10158] Add return-link to folder, when the user replied from a folder. [ticket/10158] Add "Return to Inbox"-link to "PM send"-message.
| * | [ticket/10195] Return false in session::check_dnsbl() when IPv6 is passed.Andreas Fischer2011-05-261-0/+6
| |/ | | | | | | | | | | There is no support for IPv6 addresses in the blacklists we check right now. PHPBB3-10195
* | Merge branch 'develop-olympus' into developOleg Pudeyev2011-02-261-6/+7
|\ \ | |/ | | | | | | * develop-olympus: [ticket/9912] Fix error in logic. Do not strip SID when user is not a bot.
| * [ticket/9912] Fix error in logic. Do not strip SID when user is not a bot.Andreas Fischer2011-02-251-6/+7
| | | | | | | | | | | | | | | | This also moves the code up to the point where we know that the user is a bot. Regression from d07e152ea7e820c5a0e47aeb8004fa0b5621a314 PHPBB3-9912
* | Merge branch 'develop-olympus' into developAndreas Fischer2011-02-071-0/+1
|\ \ | |/ | | | | | | | | * develop-olympus: [ticket/9949] Unit tests for user::lang() [ticket/9949] $user->lang() uses last int-value to get the key not first
| * [ticket/9949] $user->lang() uses last int-value to get the key not firstJoas Schilling2011-01-291-0/+1
| | | | | | | | | | | | | | | | The comment in the code says: "We now get the first number passed and will select the key based upon this number". But the loop over the arguments is not left and therefore it uses the last int-value not the first one. PHPBB3-9949
* | [ticket/9746] Adding calls to phpbb_ip_normalise() from session management.Andreas Fischer2011-01-031-0/+18
| | | | | | | | PHPBB3-9746
* | [feature/update-session-api] Add update_session methodIgor Wiedler2010-12-291-9/+20
| | | | | | | | PHPBB3-9688
* | Merge branch 'feature/igorw/request-class' into developAndreas Fischer2010-12-161-1/+2
|\ \ | | | | | | | | | | | | | | | | | | | | | * feature/igorw/request-class: [feature/request-class] Convert some remaining cookies [feature/request-class] Adjust misleading comment [feature/request-class] Remove direct access to _REQUEST in acp_search [feature/request-class] Special case of direct access to _REQUEST
| * | [feature/request-class] Convert some remaining cookiesIgor Wiedler2010-10-171-1/+2
| | | | | | | | | | | | | | | | | | | | | Convert some remaining accesses to cookie to use the request class instead. Thanks to bantu for the note. PHPBB3-9716
* | | [ticket/9556] Drop php closing tags, add trailing newlineIgor Wiedler2010-11-111-2/+0
|/ / | | | | | | | | | | | | | | | | | | | | | | Closing tags converted using Oleg's script. remove-php-end-tags.py -a . Trailing newlines added using the following where $ext is file extension. find . -type f -name "*.$ext" -print | xargs printf "e %s\nw\n" | ed -s; Extensions: php, css, html, js, xml. PHPBB3-9556
* | [feature/request-class] Replace direct use of GET/REQUEST with request_var.Nils Adermann2010-09-171-4/+5
| | | | | | | | | | | | | | Now with $_VARs causing fatal errors we should really be able to find and delete all of these occurances. PHPBB3-9716
* | Merge branch 'develop-olympus' into developIgor Wiedler2010-09-161-0/+11
|\ \ | |/ | | | | | | * develop-olympus: [ticket/9091] Extract IPv4 address from addresses mapped into IPv6.
| * Merge branch 'ticket/bantu/9091' into develop-olympusIgor Wiedler2010-09-161-0/+11
| |\ | | | | | | | | | | | | * ticket/bantu/9091: [ticket/9091] Extract IPv4 address from addresses mapped into IPv6.
| | * [ticket/9091] Extract IPv4 address from addresses mapped into IPv6.Andreas Fischer2010-07-231-0/+11
| | | | | | | | | | | | PHPBB3-9091
* | | Merge branch 'develop-olympus' into developIgor Wiedler2010-09-161-3/+3
|\ \ \ | |/ / | | | | | | | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/9609] Change header() calls setting HTTP status to send_status_line(). [ticket/9613] Slightly update language strings. [ticket/9613] Fix missing database part for unread posts search load switch. [ticket/9613] Implement a load switch for unread posts search feature. [ticket/9785] Allow users to request new passwords when board is disabled. [ticket/9644] Check $mode before calling user_notification() from submit_post()
| * | [ticket/9609] Change header() calls setting HTTP status to send_status_line().Andreas Fischer2010-09-111-3/+3
| | | | | | | | | | | | PHPBB3-9609
* | | Merge branch 'develop-olympus' into developNils Adermann2010-08-211-1/+1
|\ \ \ | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * develop-olympus: (57 commits) Revert "[ticket/7716] Data too long for column 'message_subject'" [ticket/7716] Data too long for column 'message_subject' [ticket/9780] Adding unit tests for gen_rand_string(). [ticket/9780] Add length check back to gen_rand_string(). [ticket/7972] Copying topics in the MCP now indexes the new topic. [ticket/9782] Board disable radio set on when server load high [ticket/9635] Useless parameter $data['post_time'] in function submit_post. [ticket/9104] Safari does not display box headers correctly in the ACP. [ticket/9777] Print error message in pre-commit hook when php is not installed. [ticket/7716] Data too long for column 'message_subject' [task/git-tools] Ignore git commit message comments [task/git-tools] Adjust the hook to enforce that a ticket is always mentioned [task/git-tools] Vastly expanded commit-msg hook. [task/git-tools] Beginnings of a syntax checking hook. [task/git-tools] Append ticket identifier to commit message prior to editing. [ticket/7332] Redirect users back to post details when performing actions. [ticket/7332] Collapse post details content down to a maximum of 300px heigh [ticket/9771] Remove query string parameters that have no name. [ticket/9760] Remove unrestricted wildcards from search terms. [ticket/9599] Reimplement phpbb_checkdnsrr() function. ... Conflicts: tests/template/template.php
| * | [ticket/9782] Board disable radio set on when server load highJoas Schilling2010-08-201-1/+1
| |/ | | | | | | PHPBB3-9782
* | Merge branch 'develop-olympus' into developAndreas Fischer2010-07-081-2/+2
|\ \ | |/ | | | | | | | | | | | | | | | | | | * develop-olympus: [ticket/9712] Future dates can be formatted as 'less than one minute ago' [ticket/9659] Signature options in set_user_options [ticket/9703] Correct database leak where deleting user did not rm some PM data [ticket/9697] Backlink broken when the select parent forum does not exist. [ticket/9695] Correct the improper display of user input in mcp_ban.php [ticket/9628] _add_module 'after'-parameter does not work correctly. [ticket/9578] ACP Posting tab is missing "Post settings" module.
| * [ticket/9712] Future dates can be formatted as 'less than one minute ago'Chris Smith2010-07-071-2/+2
| | | | | | | | PHPBB3-9712
* | [feature/auto-loading] Added autoloader to common and ensured compatabilityNils Adermann2010-07-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The autoloader is registered in install without caching, since caching is set up during installation. This provides the same functionality, performance is not a concern during installation anyway. In common.php the autoloader is instantiated after the cache is initialised and is started with the standard cache backend used for other cached values. A few places in the code using class_exists had to be updated to explicitly avoid autoloading, since they are used to check whether a file needs to be included which does not (yet) follow the naming scheme the autoloader follows. PHPBB3-9682
* | Merge branch 'develop-olympus' into developNils Adermann2010-04-041-1/+1
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * develop-olympus: (26 commits) [git-tools] add note about PHP_BIN using env [git-tools] do not display stderr [git-tools] Prepend the branch to the commit message for all branches. [git-tools] Use env to find the correct paths to binaries. [git-tools] Display what parse errors were found. [git-tools] This script requires bash to run, so point directly to bash. [feature/dbal-tests] Remove hardcoded 'mysql' from PDO DSN in DBAL test. [feature/dbal-tests] Fix mysql (not mysqli) dbal test. [feature/dbal-tests] Only output the missing config error message once. [feature/dbal-tests] Make the PDO prefix depend on the dbms. [feature/dbal-tests] Fix whitespace and line endings. [bug/9108] Fix table binding issues with PostgreSQL in board-wide feed. (Old Bug #58425) [bug/59425] Correctly check for double inclusion in captcha garbage collection [bug/58465] The redirect hidden field is now XHTML conform [feature/dbal-tests] Make some tests for build_array_data on SELECT [feature/dbal-tests] Make some tests for return_on_error on SELECT-queries [feature/dbal-tests] Tests for $db->sql_query_limit() [feature/dbal-tests] Load phpbb-schema after creating the connection to the database [feature/dbal-tests] Added tests for dbal fetchrow and fetchfield. [feature/dbal-tests] Added database test & refactored test framework ...
| * [bug/59425] Correctly check for double inclusion in captcha garbage collectionU-H-PC\H2010-03-281-1/+1
| | | | | | | | | | | | The check to avoid the double inclusion of the captcha factory class in the garbage collection code was faulty, checking for "captcha_factory" instead of "phpbb_captcha_factory". TerryE pointed the problem out, thanks!
* | Merge branch 'develop-olympus' into developNils Adermann2010-03-261-0/+6
|\ \ | |/ | | | | | | | | | | | | * develop-olympus: [develop-olympus] Make this test run on windows with backslash-paths. [bug/56965] Redirect fails with directory traversal [bug/58685] Correct spelling errors in append_sid() comments. [bug/58025] Search robots are now redirected if they send a SID in the request
| * [bug/58025] Search robots are now redirected if they send a SID in the requestChris Smith2010-03-131-0/+6
| | | | | | | | | | | | | | Previously search robots could stumble upon a board link somewhere on the web containing a SID they'd follow it and end up indexing that page with the SID in the request URI, this fix prevents that by redirecting them to the same URI just without the SID.
* | Merge branch 'develop-olympus' into developNils Adermann2010-03-081-1/+1
|\ \ | |/
| * [bug/58755] Fix a redirection bug that can occur after loginDavid Ward2010-03-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | This issue affects any forum (i.e. https://myforum/phpBB3/) where: - the forum is located in a directory underneath the web root (i.e., NOT https://myforum/) - a user accesses the forum with a URI pointing to a directory rather than a script (i.e., NOT https://myforum/phpBB3/index.php) - the URI used ends in a slash (i.e., NOT https://myforum/phpBB3) If these conditions are met, after successful login the user is redirected to an invalid URI (i.e., https://myforum/phpBB3/phpBB3?sid=). This change fixes extract_current_page() to handle the case correctly where the URI ends in a slash and is not the web root. So after successful login, the redirection back to the main page will work (i.e., https://myforum/phpBB3/?sid=)
* | Make a few functions truly static to fix the tests.Nils Adermann2010-03-061-1/+1
|/
* [Fix] Don't send activation email when user tries to change email without ↵Cullen Walsh2010-01-251-5/+8
| | | | | | | | | permission (fix by nrohler). (Bug #56335) Authorised by: naderman git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10443 89ea8834-ac86-4346-8a33-228a782c2dd0
* Fix Bug #54125 - Correctly reset login keys if passed value is the current user.Andreas Fischer2009-11-191-3/+3
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10279 89ea8834-ac86-4346-8a33-228a782c2dd0
* Fix getting host for situations where the name/IP is not resolvable. Related ↵Meik Sievertsen2009-09-221-1/+1
| | | | | | | | to Bug #41025 Related revisions: r9387 and r10158 git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10178 89ea8834-ac86-4346-8a33-228a782c2dd0
* extend r9387 - check for existance of all functions we use...Meik Sievertsen2009-09-171-1/+1
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10158 89ea8834-ac86-4346-8a33-228a782c2dd0
* - fixed bug #44975Jim Wigginton2009-09-041-0/+14
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10103 89ea8834-ac86-4346-8a33-228a782c2dd0
* Add some very basic checks to the users ip - related to bug #48995Meik Sievertsen2009-08-201-0/+21
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10020 89ea8834-ac86-4346-8a33-228a782c2dd0
* Because we store forwarded_for if the check is activated we need a better checkMeik Sievertsen2009-08-201-5/+5
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10019 89ea8834-ac86-4346-8a33-228a782c2dd0
* Ability to define constant PHPBB_USE_BOARD_URL_PATH to use board url for ↵Meik Sievertsen2009-08-171-1/+4
| | | | | | | | images/avatars/ranks/imageset... This feature does not change anything for those not using the constant and this feature is also quite in-flux. We need to test this with some applications and bridges and there may be other locations able to benefit from it. git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10008 89ea8834-ac86-4346-8a33-228a782c2dd0
* Fix Bug #49035 - Fix general error while registration, through undefined ↵Joas Schilling2009-08-041-1/+3
| | | | | | | | variable $config in validate_referer (Patch by wjvriend) Authorised by: bantu git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9917 89ea8834-ac86-4346-8a33-228a782c2dd0
* Fallback options for missing language files. (Bug #38575 - Patch by EXreaction)Meik Sievertsen2009-08-011-2/+30
| | | | git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9901 89ea8834-ac86-4346-8a33-228a782c2dd0
* Fix bug #18005 - Do not add style-parameter to URL again, after admin ↵Joas Schilling2009-07-241-1/+1
| | | | | | | | | re-authentification - Patch by leviatan21 Authorised by: AcydBurn git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9841 89ea8834-ac86-4346-8a33-228a782c2dd0
* Fixed Bug #45115 - Signature parsing flags are not stored in DBRuslan Uzdenov2009-06-271-2/+2
| | | | | | Authorised by: AcydBurn git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9696 89ea8834-ac86-4346-8a33-228a782c2dd0
* Fixed Bug #47145 - [Fix] Correctly check banned users when force password changeGabriel Vazquez2009-06-241-1/+1
| | | | | | Authorised by: AcydBurn git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@9665 89ea8834-ac86-4346-8a33-228a782c2dd0
generated by cgit v1.2.1 (git 2.21.0) at 2025-12-27 01:35:06 +0000