summaryrefslogtreecommitdiffstats
path: root/admin
Commit message (Collapse)AuthorAgeFilesLines
* Remove config files that are created on install. Refs #69.Sam Wilson2015-10-041-1/+0
|
* Clean codenashe2015-08-116-21/+21
| | | | Replace dirname(__FILE__) by __DIR__.
* Fix class autoloadingnashe2015-08-115-8/+15
| | | | | | | Made some mistakes with my last PR: I tested that everything were working, but on the wrong branch. This commit fixes all the autoloading error that were left.
* Make authentication timing-safenashe2015-08-041-1/+2
| | | | | | | Improve the authentication to make it timing-safe against bruteforce attacks. See code comments for more details on the implementation.
* Improve coding stylenashe2015-08-031-7/+5
|
* Avoid type juggling vulnerability.nashe2015-08-031-2/+2
| | | | | | | | | | | | | | | | | Password comparison should not be done with the `==` operator, but `===`, due to type juggling. References: * http://phpsadness.com/sad/47 * turbochaos.blogspot.fr/2013/08/exploiting-exotic-bugs-php-type-juggling. html ### Test case * Create an administrator with the password "240610708". * Try to login to the dashboard with the password "QNKCDZO" :-)
* Control width blacklisting feed are down, cron.php manage the status of this ↵Fernando García2014-03-042-0/+4
| | | | feeds
* display moonmoon version in title bar of the administration panel, make the ↵Pascal Chevrel2012-05-031-1/+7
| | | | version number a variable
* forgot to migrate the login page to incoude the l10n class (didn't notice ↵Pascal Chevrel2012-03-131-3/+4
| | | | because of the cookie)
* l10n support for moonmoonPascal Chevrel2012-03-123-27/+27
|
* fix css in admin pages that were reverted to pre html5 version in a mergePascal Chevrel2012-03-111-22/+22
|
* Merge branch 'html5' of https://github.com/pascalchevrel/moonmoon into ↵Maurice Svay2012-03-101-1/+1
|\ | | | | | | | | | | | | pascalchevrel-html5 Conflicts: admin/index.php
| * html5: admin page, make the http:// mention in the add feed field be a ↵Pascal Chevrel2012-03-091-1/+1
| | | | | | | | placeholder hinding at the type of URL, not real text. When you copy/paste a feed, you already have the http:// part
* | Merge branch 'cleanup' of https://github.com/pascalchevrel/moonmoon into ↵Maurice Svay2012-03-103-372/+370
|\ \ | |/ |/| | | | | | | | | | | pascalchevrel-cleanup Conflicts: admin/default.css app/classes/Planet.class.php
| * convert all files saved in Windows(CRLF) to Unix (LF)Pascal Chevrel2012-03-093-348/+348
| |
* | Merge pull request #18 from pascalchevrel/admin_templateMaurice Svay2012-03-082-59/+64
|\ \ | |/ |/| change the template in the admin panel to use HTML5 syntax
| * change the template in the admin panel to use HTML5 syntax (and use <header> ↵Pascal Chevrel2012-03-082-59/+64
| | | | | | | | and <nav> elements), adjust css accordingly, add IE6/7/8 support by loading http://html5shiv.googlecode.com/svn/trunk/html5.js with IE conditionnal comments
* | fix install process and admin section which are currently broken because of ↵Pascal Chevrel2012-03-082-7/+3
|/ | | | the separation of classes in separate files. Now the files calling those classes are including app/app.php, also, I changed the variable name in the installation wizard to so as to avoid confusion with already used in the admin section
* Use a centralized template for the admin section to avoid repeating htmlPascal Chevrel2012-03-065-153/+148
|
* update spyc library from 0.2.3 to 0.5Pascal Chevrel2012-03-061-4/+4
|
* Update wording in adminMaurice Svay2010-08-101-4/+4
|
* Fixes bug when adding no feed deletes all feedsMaurice Svay2010-08-101-1/+1
|
* Initial commitMaurice Svay2010-02-1619-0/+608