Commit Graph

93227 Commits

Author SHA1 Message Date
Michal Čihař
20640592f0 Always use phpseclib for cookie encryption
- it provides fallback in case mcrypt is not found
- we now use AES in both mcrypt and PHP code case
- cleanup the code by removing mcrypt conditials
- rename some methods and cookies so that they don't refer to
  implementation details
- switching encryption implementations no longer invalidates the
  credentials

Signed-off-by: Michal Čihař <michal@cihar.com>
2014-06-12 10:39:52 +02:00
Michal Čihař
0652ca9ccd Merge remote-tracking branch 'origin/QA_4_2' 2014-06-12 10:19:00 +02:00
Michal Čihař
bc60315023 Adjust tests to new IV logic
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-06-12 10:18:45 +02:00
Michal Čihař
c6e76422c4 Allow to use system phpseclib
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-06-12 10:06:20 +02:00
Michal Čihař
d69f8bdd09 Update phpseclib to latest Git snapshot
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-06-12 10:02:52 +02:00
Michal Čihař
716f6d4c55 Merge remote-tracking branch 'origin/QA_4_2' 2014-06-12 09:47:17 +02:00
Michal Čihař
953c7415ad Separate check for password cookie
Otherwise it would not be possible to recall user name.

Signed-off-by: Michal Čihař <michal@cihar.com>
2014-06-12 09:47:04 +02:00
Michal Čihař
bd482546bc Merge remote-tracking branch 'origin/QA_4_2' 2014-06-12 09:45:43 +02:00
Michal Čihař
5d39998a86 Merge commit '7cba81de271d62bdf93ded7598709702a96f92d7'
Conflicts:
	libraries/plugins/auth/AuthenticationCookie.class.php
2014-06-12 09:45:13 +02:00
Michal Čihař
1cd945e548 Merge commit '59bb241cf13fd9a02626eb73daf5a5ca8476b29e' 2014-06-12 09:44:51 +02:00
Weblate
76c051bcea Merge remote-tracking branch 'origin/QA_4_2' into QA_4_2 2014-06-12 09:44:11 +02:00
Burak Yavuz
e664c931d2 Translated using Weblate (Turkish)
Currently translated at 100.0% (2770 of 2770)
2014-06-12 09:44:09 +02:00
Matías Bellone
480b992aae Translated using Weblate (Spanish)
Currently translated at 100.0% (2770 of 2770)
2014-06-12 09:44:06 +02:00
Giovanni Sora
bfb0f98a91 Translated using Weblate (Interlingua)
Currently translated at 51.1% (1417 of 2770)
2014-06-12 09:44:03 +02:00
Marc Delisle
ffb543b6e3 Translated using Weblate (French)
Currently translated at 100.0% (2770 of 2770)
2014-06-12 09:44:01 +02:00
Dieter Adriaenssens
88910393e5 Translated using Weblate (Dutch)
Currently translated at 99.9% (2768 of 2770)
2014-06-12 09:44:00 +02:00
Michal Čihař
29094da204 Translated using Weblate (Czech)
Currently translated at 100.0% (2770 of 2770)
2014-06-12 09:43:58 +02:00
Michal Čihař
7cba81de27 Regenerate cookie encryption IV for every session
The IV for cookie encryption was generated just once for every browser
and kept in a cookie. Generating it for every session is much better to
avoid information leaks (eg. that same user has logged in).

Signed-off-by: Michal Čihař <michal@cihar.com>
2014-06-12 09:41:27 +02:00
Michal Čihař
b252cb9981 Use better source of entropy for mcrypt IV
Signed-off-by: Michal Čihař <michal@cihar.com>
2014-06-12 09:16:20 +02:00
Marc Delisle
a6d379caf2 Since PHP 5.3.0, it's not longer required to call srand() before
mcrypt_create_iv().

Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-06-11 08:31:23 -04:00
Weblate
ada85ff63e Merge remote-tracking branch 'origin/master' 2014-06-11 14:08:21 +02:00
Giovanni Sora
359a9c3d53 Translated using Weblate (Interlingua)
Currently translated at 51.4% (1441 of 2803)
2014-06-11 14:08:17 +02:00
Kristjan Räts
0e4b51ac2f Translated using Weblate (Estonian)
Currently translated at 100.0% (2803 of 2803)
2014-06-11 14:08:15 +02:00
Dieter Adriaenssens
c17d6e3f9a Translated using Weblate (Dutch)
Currently translated at 99.6% (2793 of 2803)
2014-06-11 14:08:13 +02:00
Michal Čihař
42111aa0e9 Translated using Weblate (Czech)
Currently translated at 99.1% (2780 of 2803)
2014-06-11 14:08:11 +02:00
Marc Delisle
08790597c7 Merge pull request #1220 from smita786/gsoc_central_columns_list
security bug fixes
2014-06-11 08:08:08 -04:00
Smita Kumari
b749a7b1d6 security bug fixes
Signed-off-by: Smita Kumari <kumarismita62@gmail.com>

Fix coding style

Signed-off-by: Smita Kumari <kumarismita62@gmail.com>

use existing escapeHtml function

Signed-off-by: Smita Kumari <kumarismita62@gmail.com>
2014-06-11 17:31:36 +05:30
Kristjan Räts
59bb241cf1 Translated using Weblate (Estonian)
Currently translated at 100.0% (2770 of 2770)
2014-06-11 09:06:45 +02:00
Matías Bellone
2ca9001608 Translated using Weblate (Spanish)
Currently translated at 100.0% (2803 of 2803)
2014-06-11 04:59:43 +02:00
Domen
a92fe0541b Translated using Weblate (Slovenian)
Currently translated at 100.0% (2803 of 2803)
2014-06-10 21:35:20 +02:00
Domen
e9f7dafd21 Translated using Weblate (Slovenian)
Currently translated at 100.0% (2770 of 2770)
2014-06-10 21:34:11 +02:00
Burak Yavuz
8371ae9ea3 Translated using Weblate (Turkish)
Currently translated at 100.0% (2803 of 2803)
2014-06-10 19:40:03 +02:00
Marc Delisle
ee063a664d Translated using Weblate (French)
Currently translated at 100.0% (2803 of 2803)
2014-06-10 19:15:45 +02:00
Marc Delisle
548982acf7 Update po files 2014-06-10 12:46:53 -04:00
Marc Delisle
1c47963a82 Merge commit '92aaa7f' 2014-06-10 12:46:32 -04:00
Marc Delisle
92aaa7f900 Update po files 2014-06-10 12:45:56 -04:00
Weblate
a4d35bcc1b Merge remote-tracking branch 'origin/master' 2014-06-10 18:44:23 +02:00
Burak Yavuz
331e7b9fda Translated using Weblate (Turkish)
Currently translated at 100.0% (2803 of 2803)
2014-06-10 18:44:20 +02:00
Marc Delisle
44cc200650 Merge commit '478a105' 2014-06-10 12:43:42 -04:00
Marc Delisle
a83ca5d73b Fix merge conflict
Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-06-10 12:43:07 -04:00
Marc Delisle
478a105ed6 Merge pull request #1218 from D-storm/bug-4448
Bug-4448: Dump binary columns in hexadecimal notation not working
2014-06-10 12:39:18 -04:00
Matías Bellone
c498065b1a Translated using Weblate (Spanish)
Currently translated at 100.0% (2803 of 2803)
2014-06-10 17:32:45 +02:00
Marc Delisle
3658b5a9fd Translated using Weblate (French)
Currently translated at 100.0% (2803 of 2803)
2014-06-10 16:42:43 +02:00
Kristjan Räts
ed9d14d8ff Translated using Weblate (Estonian)
Currently translated at 100.0% (2803 of 2803)
2014-06-10 16:00:48 +02:00
Burak Yavuz
3cd3f1ba13 Translated using Weblate (Turkish)
Currently translated at 100.0% (2803 of 2803)
2014-06-10 15:35:42 +02:00
Chirayu Chiripal
ff688b18fb Bug-4448: Dump binary columns in hexadecimal notation not working and hex_for_blob -> hex_for_binary
Signed-off-by: Chirayu Chiripal <chirayu.chiripal@gmail.com>
2014-06-10 19:00:16 +05:30
Marc Delisle
b43a8553ea Update po files 2014-06-10 08:47:42 -04:00
Marc Delisle
b3ce71f569 Improve English
Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-06-10 08:47:07 -04:00
Weblate
5092650780 Merge remote-tracking branch 'origin/master' 2014-06-10 14:45:01 +02:00
Anders Jonsson
8debc309ba Translated using Weblate (Swedish)
Currently translated at 98.9% (2770 of 2800)
2014-06-10 14:44:58 +02:00