aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | [feature/passwords] Add phpass copyright notice to salted md5 driverMarc Alexander2013-10-111-0/+28
| | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | [feature/passwords] Increase test coverage to 100% of methodsMarc Alexander2013-10-101-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Obsolete code that is impossible to hit has been removed and the logic of the salted md5 driver has been changed to correctly implement the phpBB 3.0 phpbb_hash() function. PHPBB3-11610
| * | | | [feature/passwords] Increase test coverage to 35 out ouf 36 methodsMarc Alexander2013-10-092-6/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Only one small code part in the salted md5 driver can't be tested right now. Passwords helper and passwords driver helper are now fully covered by tests. PHPBB3-11610
| * | | | [feature/passwords] Move check for 8-bit characters to bcrypt driverMarc Alexander2013-10-072-10/+10
| | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | Merge branch 'develop' of https://github.com/phpbb/phpbb3 into feature/passwordsMarc Alexander2013-10-0320-245/+313
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: phpBB/includes/functions.php
| * | | | | [feature/passwords] Use passwords manager in phpBB hash functionsMarc Alexander2013-10-021-37/+6
| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | [feature/passwords] Rename manager methods to check() and hash()Marc Alexander2013-10-021-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These method names are more straightforward than the previous ones. PHPBB3-11610
| * | | | | [feature/passwords] Inject passwords manager into auth providersMarc Alexander2013-10-024-18/+47
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The passwords manager will replace the old method of using the functions phpbb_hash() and phpbb_check_hash(). PHPBB3-11610
| * | | | | [feature/passwords] Do not hash passwords longer than 4096 bytesMarc Alexander2013-10-011-0/+14
| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | [feature/passwords] Pass config via service container to driver helperMarc Alexander2013-09-282-6/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will get rid of the global $config in the driver helper PHPBB3-11610
| * | | | | [feature/passwords] A few more corrections in methods due to namespacingMarc Alexander2013-09-282-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | [feature/passwords] More changes due to namespacingMarc Alexander2013-09-272-10/+12
| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | [feature/passwords] Modify passwords files for namespacing changesMarc Alexander2013-09-279-18/+36
| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | [feature/passwords] Add schema changes to schema_data for new hash typesMarc Alexander2013-09-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | Merge branch 'develop' of https://github.com/phpbb/phpbb3 into feature/passwordsMarc Alexander2013-09-27420-6524/+9143
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: phpBB/develop/create_schema_files.php
| * | | | | | [feature/passwords] Use dependency injection for passwords driver helperMarc Alexander2013-09-223-13/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The passwords driver helper is now injected into the driver base instead of being manually loaded. PHPBB3-11610
| * | | | | | [feature/passwords] Use dependency injection for helperMarc Alexander2013-09-223-7/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will now be used instead of manually loading the passwords helper instance in the passwords manager. PHPBB3-11610
| * | | | | | [feature/passwords] Rename migrations file to passwordsMarc Alexander2013-09-202-63/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also removed the effectively_installed() check that is not needed according to EXreaction. PHPBB3-11610
| * | | | | | [feature/passwords] Do not pass phpbb_container to passwords managerMarc Alexander2013-09-208-86/+77
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Add missing function documentationMarc Alexander2013-09-141-0/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Additionally, a new line has been added to make the code look nicer. PHPBB3-11610
| * | | | | | [feature/passwords] Rename "crypto" files to "passwords" filesMarc Alexander2013-09-1412-87/+87
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Properly set convert_flag and add test for itMarc Alexander2013-09-141-1/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Define default hashing algorithm in container fileMarc Alexander2013-09-143-9/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The default hashing algorithm type is defined as a parameter in the service definition file for the password hashing system. This will allow us to change this in the future but it will also prevent unexperienced admins from changing the hashing algorithm. PHPBB3-11610
| * | | | | | [feature/passwords] Add get_name() method to driversMarc Alexander2013-09-143-0/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will allow us to actually properly differentiate between the available drivers. PHPBB3-11610
| * | | | | | [feature/passwords] Move migrations file to phpbb folderMarc Alexander2013-09-141-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Move files after namespacing changesMarc Alexander2013-09-149-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Add legacy support for md5 passwordsMarc Alexander2013-09-142-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Fix incorrect call to helper instead of $thisMarc Alexander2013-09-141-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The driver helper method unique_id is called inside the helper. Therefore, it shouldn't be called via $this->helper but rather via $this. PHPBB3-11610
| * | | | | | [feature/passwords] Do not use specific errors but just return falseMarc Alexander2013-09-141-12/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The authentication system should handle the possible errors for now. Additional error returns can be added later on if they are needed. PHPBB3-11610
| * | | | | | [feature/passwords] NULL should be null according to coding guidelinesMarc Alexander2013-09-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Do not check if type_map is emptyMarc Alexander2013-09-141-11/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the type map is empty the service container is incomplete or broken. There is no need to check this as other components would probably be broken at the same time. PHPBB3-11610
| * | | | | | [feature/passwords] Properly treat duplicates in combined hashesMarc Alexander2013-09-141-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Make method get_hashing_public_algorithm publicMarc Alexander2013-09-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Combined hashing requires it for checking the supplied password hash for its hashing algorithm. PHPBB3-11610
| * | | | | | [feature/passwords] Add combined hashing method to helperMarc Alexander2013-09-142-0/+40
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will allow to hash a previously hashed password with another hashing method, i.e. as upgrade path from phpBB 3.0 to 3.1. PHPBB3-11610
| * | | | | | [feature/passwords] Add function for obtaining only the hash to helperMarc Alexander2013-09-141-0/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is also needed for combined hashing of passwords. PHPBB3-11610
| * | | | | | [feature/passwords] Fix minor code limitations in helperMarc Alexander2013-09-141-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These limitations caused it to only allow a specific input to combined hashes. PHPBB3-11610
| * | | | | | [feature/passwords] Pass phpbb_container to passwords helperMarc Alexander2013-09-142-2/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Use correct prefix for salt in salted_md5Marc Alexander2013-09-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Add method for obtaining the hash settings onlyMarc Alexander2013-09-143-0/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is needed for combined hashing of passwords. PHPBB3-11610
| * | | | | | [feature/passwords] Add schema changes for new hash typesMarc Alexander2013-09-149-9/+72
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Make sure hash has the required lengthMarc Alexander2013-09-141-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also added tests to make sure that crypto drivers are enforcing the hash length. PHPBB3-11610
| * | | | | | [feature/passwords] Make method get_hashing_algorithm() protectedMarc Alexander2013-09-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is currently no use for it being public. PHPBB3-11610
| * | | | | | [feature/passwords] Use common salt generation function for all typesMarc Alexander2013-09-143-31/+47
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We will be using the same method inside the driver helper class for all hash types. This is the same function that has been used for the salted md5 hash of phpBB 3.0. PHPBB3-11610
| * | | | | | [feature/passwords] Add driver helper class fileMarc Alexander2013-09-141-0/+108
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Add driver helper class for additional functionsMarc Alexander2013-09-142-27/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Functions for the helper class might be used in other drivers as well and therefore shouldn't be limited to just one driver. PHPBB3-11610
| * | | | | | [feature/passwords] Do not support 8-bit characters with $2a$ bcryptMarc Alexander2013-09-141-7/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 8-bit unicode characters might reduce the security of the password hash when using the $2a$ bcrypt prefix. Those types of characters are usually not used in passwords but we should prevent this possible issue anyway. PHPBB3-11610
| * | | | | | [feature/passwords] Add convert flag for converting to defaultMarc Alexander2013-09-141-7/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Correctly supply hash salt and settings to bcryptMarc Alexander2013-09-141-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Use correct prefix for bcrypt typeMarc Alexander2013-09-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
| * | | | | | [feature/passwords] Default to bcrypt with $2y$ prefix if possibleMarc Alexander2013-09-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-11610
generated by cgit v1.2.1 (git 2.21.0) at 2025-03-27 05:32:52 +0000