Michal Čihař
b52bd77987
Merge branch 'QA_4_6'
2016-05-23 13:49:00 +02:00
Michal Čihař
f9d6c40939
Safer handling of sessions during authentication
...
- always generate new session for login form
- always generate new session when authenticated using cookie auth
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-23 13:48:25 +02:00
Michal Čihař
e3d650a2bb
Merge branch 'QA_4_6'
2016-05-23 13:05:01 +02:00
Michal Čihař
11eb574242
Improve handling of logout
...
- add separate script for handling logout
- no longer require old_usr for all authentication methods
(this avoids potential information leak)
- require valid token for logout
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-23 13:02:21 +02:00
Michal Čihař
21db724c85
Remove need for having define for test
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-23 12:09:36 +02:00
Michal Čihař
56b683b32d
Remove session data before calling destroy
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-17 09:56:47 +02:00
Michal Čihař
9d57ab4f2b
Remove unused code
...
This was used only in testsuite and quite some portion of tests existed
just to test this.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-04-07 09:51:49 +02:00
Michal Čihař
f4e16addb7
Merge remote-tracking branch 'origin/pull/12147' into tmp
2016-04-07 09:39:21 +02:00
Madhura Jayaratne
e6a3e76cfb
Fix #12143 Cannot login with certain password
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-03-31 21:00:59 +11:00
Michal Čihař
b856502d64
Prefer phpseclib if avaible
...
It does better decisions about which backend to use than simply using
openssl.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-03-01 15:49:05 +01:00
Durgesh
0b64827930
Refactored url parmeters generating, Issue #11990
...
Signed-off-by: Durgesh <007durgesh219@gmail.com>
2016-02-22 14:36:41 +05:30
Michal Čihař
d4820d1ebe
Use recaptcha library from Packagist instead of own copy
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-22 08:05:29 +01:00
Michal Čihař
2fffee3093
Merge remote-tracking branch 'origin/pull/11986'
2016-02-22 07:56:50 +01:00
chintan zaveri
2b74163914
Removal of Swekey
...
Signed-off-by: Chintan Zaveri <zaveri_chintan@rediff.com>
master rebased
Signed-off-by: Chintan Zaveri <zaveri_chintan@rediff.com>
2016-02-20 21:41:07 +05:30
Michal Čihař
5042b65398
Merge branch 'QA_4_5' into QA_4_6
2016-02-12 10:45:43 +01:00
Michal Čihař
2148e7cad8
Implement test for Cookie auth without runkit
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-03 20:21:40 +01:00
Michal Čihař
2a9fb73f92
Remove PmaAbsoluteUri from redirects
...
This is no longer needed as per RFC 7231.
Issue #11412
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-03 14:32:14 +01:00
Michal Čihař
ac9714cf6a
Autoloading for phpseclib
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-01 21:53:53 +01:00
Michal Čihař
7b58acf62e
Merge branch 'QA_4_5'
2016-02-01 21:46:33 +01:00
Michal Čihař
b69fa1499f
Bring back file inclustion, just remove version check from it
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-01-28 17:08:19 +01:00
Michal Čihař
072ff0b38a
Remove checks for PHP versions we no longer support
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-01-28 16:08:47 +01:00
Michal Čihař
37004337ab
Merge commit 'a478437e0ee4d74ec5036cb32e165da002303dd1'
2016-01-14 09:10:43 +01:00
Michal Čihař
55b317c699
Remove /*overload*/ prefix from mb_* calls
...
I believe this was temporary flagging to see which code is migrated and
can be safely removed now.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-01-04 16:35:28 +01:00
Marc Delisle
66c15daba0
Remove some unnecessary string concatenations
...
https://github.com/dseguy/clearPHP/blob/master/rules/no-unnecessary-string-concatenation.md
Signed-off-by: Marc Delisle <marc@infomarc.info>
2015-12-06 08:01:07 -05:00
Marc Delisle
357b1b4757
Remove some unnecessary string concatenations
...
https://github.com/dseguy/clearPHP/blob/master/rules/no-unnecessary-string-concatenation.md
Signed-off-by: Marc Delisle <marc@infomarc.info>
2015-12-04 09:05:42 -05:00
Marc Delisle
2607023281
Remove some unnecessary string concatenations
...
https://github.com/dseguy/clearPHP/blob/master/rules/no-unnecessary-string-concatenation.md
Signed-off-by: Marc Delisle <marc@infomarc.info>
2015-12-03 11:00:01 -05:00
Marc Delisle
9ee3931c09
Remove some unnecessary string concatenations
...
https://github.com/dseguy/clearPHP/blob/master/rules/no-unnecessary-string-concatenation.md
Signed-off-by: Marc Delisle <marc@infomarc.info>
2015-12-03 10:43:10 -05:00
Deven Bansod
77f220cee5
Merge branch 'QA_4_5'
...
Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
Conflicts:
libraries/plugins/auth/AuthenticationCookie.php
2015-11-26 19:29:18 +05:30
Marc Delisle
8e666ec1b5
Fix merge conflicts
...
Signed-off-by: Marc Delisle <marc@infomarc.info>
2015-10-24 16:35:58 -04:00
Hugues Peccatte
6f4676cdfc
Merge remote-tracking branch 'origin/master' into useNamespaces_master
2015-10-04 18:04:49 +02:00
Hugues Peccatte
71b62bcef9
Merge remote-tracking branch 'origin/master' into useNamespaces_master
2015-09-26 13:50:49 +02:00
Hugues Peccatte
914cdaa984
Merge remote-tracking branch 'origin/master' into useNamespaces_master
2015-09-19 22:31:36 +02:00
Hugues Peccatte
7185d61649
Set uses instead of absolute namespace.
...
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2015-09-12 15:43:39 +02:00
Hugues Peccatte
42c0ebac85
Merge branch 'master' into useNamespaces_master
2015-09-09 22:05:00 +02:00
Hugues Peccatte
6c594eb0cf
Fix calls.
...
Remove useless PHPDoc.
Add missing require.
Add missing 'use'.
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2015-09-05 22:58:47 +02:00
Hugues Peccatte
04b4f723d8
Move libraries/plugins/auth and export classes into a namespace.
...
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2015-09-05 00:09:30 +02:00