Michal Čihař
6117ad5cef
Use hash_equals for checking username
...
This makes the comparison happen in constant time and makes it
impossible to use it to guess stored usernames.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-08-18 09:39:22 +02:00
Michal Čihař
285e5623b6
Strip null bytes from MySQL username
...
In old PHP versions this could lead to allow/deny rules bypass.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-08-18 09:10:55 +02:00
J.M
e25bba8bcc
Fix notice Undefined index: old_usr in AuthenticationHttp.class.php:162
2013-04-28 17:29:50 +02:00
Rouslan Placella
f730b7745d
Improve response for failed http login
2012-11-26 23:08:15 +00:00
Rouslan Placella
bc9e81aa14
Fixed broken logout functionality got http auth
2012-11-26 22:56:37 +00:00
Michal Čihař
869d7c0e99
Use single quotes when we do not want to evaluate the string
2012-10-16 11:18:16 +02:00
Alex Marin
0565b0e12a
oop: integrate authentication plugins
2012-06-22 11:43:54 +03:00
