summaryrefslogtreecommitdiff
path: root/modules/gallery/controllers/login.php
AgeCommit message (Collapse)Author
2010-06-12Bounce the user to the login page if they try to get to part of theBharat Mediratta
admin site as a guest. Also, theme the login/html page.
2010-06-12Make login/logout continuation url code consistent. Where necessary,Bharat Mediratta
we specify the continue_url in the session, but we store it in the login form so that we can propagate it across the session creation that happens at login time.
2010-03-03Update the copyright to 2010. It's only 3 months into the year :-)Bharat Mediratta
2010-02-10If the user does not have permission to view the album, photo or movie, redirectTim Almdal
to a logon page to allow the user to login. Pass the target url as a session variable to allow the user to be redirected where they want to go if the login was successful. Fixes ticket #1009.
2010-02-07Rename user_authenticate_xxx events to user_auth_xxx for brevity.Bharat Mediratta
2010-02-07Create the concept of a "failed authentication" as semanticallyBharat Mediratta
separate from a successful or failed login. 1) Rename user_login_failed event to user_authenticate_failed 2) Rename failed_logins table to failed_auth (bump Gallery module to v27 to rename the table) 3) auth::too_many_failed_logins -> auth::too_many_failures 4) auth::record_failed_auth_attempts -> auth::record_failed_attempts auth::clear_failed_auth_attempts -> auth::clear_failed_attempts
2010-01-30Prevent brute force login attacks by reducing login attempts to 1 perBharat Mediratta
minute after there have been 5 consecutive failed login attempts. Fix for ticket #589.
2010-01-23Merge branch 'master' of git@github.com:gallery/gallery3 into bharat_devBharat Mediratta
Conflicts: modules/gallery/tests/xss_data.txt
2010-01-22If the userid/password combination, render the full page instead of just ↵Tim Almdal
printing the form. Fixes ticket #980.
2010-01-16Use "(string) $form" instead of "$form->__toString()"Bharat Mediratta
2009-10-30Rename the login helper to auth. Create a login and logout helper function ↵Tim Almdal
to allow for programmically login in and out.
2009-10-27Fire the logon_event when the user logs on. Cleanup some old code from the ↵Tim Almdal
user/helpers/user.php file."
2009-10-24Remove a redundant comment, change the name of the identity change event to ↵Tim Almdal
'identity_before_change' and change the name of 'login::get_login_form()' to 'login::get_form()'
2009-10-22Change the name of identity library from Identity to IdentityProvider. ↵Tim Almdal
Create a helper class called identity to simplify call the Identity Provider. Move the contents of MY_Session.php to the new helper class and remove the MY_Session class
2009-10-21Correct white spaceTim Almdal
2009-10-16Remove all non Identity API methods from Identity.php. Created an ↵Tim Almdal
MY_Session class to provide the user state changes in the session and a login.php helper that has the login form.
2009-10-16Start simplifying the interface by moving the static methods from user.php ↵Tim Almdal
and group.php. Tried creating a identity helper, but the helper identity.php was confused with the library Identity.php. So got around this by making the methods on Identity static and calling the instance within the static methods. Also temporarily moved the user.php and group.php back into the user module.
2009-10-16Finish integrating the move of the user edit/update functions into the user ↵Tim Almdal
module. The premise is that the plugable user module will provide the update screens if the user backend supports updates.
2009-10-08Part of the previous commit, forgot to save... againTim Almdal
2009-10-06Change the focus of the user module from providing user/group management to ↵Tim Almdal
providing the default Identity implementation. * Remove the user_event callbacks and move them to the gallery_event callbacks. This will insure that the active user is always loaded (because the gallery callbacks are always called first) to its available to other gallery_ready handlers. Moved the method set_request_locale to the locales helper as it is more related to locales. * Move the user controllers and views into the gallery module. * Move the theme and block processing out of the user module and into core.