gallery3.git - A clone of the Gallery3 code for testing and development.

Age	Commit message (Collapse)	Author
2010-07-31	Full pass over all the JSON encoding and JS dialog code. We now abide	Bharat Mediratta
	by the following rules: 1) An initial dialog or panel load can take either HTML or JSON, but the mime type must accurately reflect its payload. 2) dialog form submits can handle a pure HTML response, but the mime type must also be correct. This properly resolves the problem where the reauth code gets a JSON response first from the reauth code, and then an HTML response when you reauth and continue on to a given form -- try it out with Admin > Settings > Advanced. 3) All JSON replies must set the mime type correctly. The json::reply convenience function does this for us. 4) By default, any HTML content sent back in the JSON response should be in the "html" field, no longer the "form" field. The combination of these allows us to stop doing boilerplate code like this in our controllers: // Print our view, JSON encoded json::reply(array("form" => (string) $view)); instead, controllers can just return HTML, eg: // Print our view print $view; That's much more intuitive for developers.
2010-07-31	Resend the entire dialog content (including the wrapping view) instead of ↵	Tim Almdal
	just the form.
2010-07-31	More patches as part of #1225. Change the 'core' modules to use the json::reply	Tim Almdal
	method to set the content type header and encode the response as a json object
2010-07-06	Fix for ticket #1181. Use $.getJSON to retrieve the json contents of the ↵	Tim Almdal
	dialog. Convert all the controllers that create the data to go into a dialog to return the html as part of a json object.
2010-06-12	Bounce the user to the login page if they try to get to part of the	Bharat Mediratta
	admin site as a guest. Also, theme the login/html page.
2010-06-12	Make login/logout continuation url code consistent. Where necessary,	Bharat Mediratta
	we specify the continue_url in the session, but we store it in the login form so that we can propagate it across the session creation that happens at login time.
2010-03-03	Update the copyright to 2010. It's only 3 months into the year :-)	Bharat Mediratta

2010-02-10	If the user does not have permission to view the album, photo or movie, redirect	Tim Almdal
	to a logon page to allow the user to login. Pass the target url as a session variable to allow the user to be redirected where they want to go if the login was successful. Fixes ticket #1009.
2010-02-07	Rename user_authenticate_xxx events to user_auth_xxx for brevity.	Bharat Mediratta

2010-02-07	Create the concept of a "failed authentication" as semantically	Bharat Mediratta
	separate from a successful or failed login. 1) Rename user_login_failed event to user_authenticate_failed 2) Rename failed_logins table to failed_auth (bump Gallery module to v27 to rename the table) 3) auth::too_many_failed_logins -> auth::too_many_failures 4) auth::record_failed_auth_attempts -> auth::record_failed_attempts auth::clear_failed_auth_attempts -> auth::clear_failed_attempts
2010-01-30	Prevent brute force login attacks by reducing login attempts to 1 per	Bharat Mediratta
	minute after there have been 5 consecutive failed login attempts. Fix for ticket #589.
2010-01-23	Merge branch 'master' of git@github.com:gallery/gallery3 into bharat_dev	Bharat Mediratta
	Conflicts: modules/gallery/tests/xss_data.txt
2010-01-22	If the userid/password combination, render the full page instead of just ↵	Tim Almdal
	printing the form. Fixes ticket #980.
2010-01-16	Use "(string) $form" instead of "$form->__toString()"	Bharat Mediratta

2009-10-30	Rename the login helper to auth. Create a login and logout helper function ↵	Tim Almdal
	to allow for programmically login in and out.
2009-10-27	Fire the logon_event when the user logs on. Cleanup some old code from the ↵	Tim Almdal
	user/helpers/user.php file."
2009-10-24	Remove a redundant comment, change the name of the identity change event to ↵	Tim Almdal
	'identity_before_change' and change the name of 'login::get_login_form()' to 'login::get_form()'
2009-10-22	Change the name of identity library from Identity to IdentityProvider. ↵	Tim Almdal
	Create a helper class called identity to simplify call the Identity Provider. Move the contents of MY_Session.php to the new helper class and remove the MY_Session class
2009-10-21	Correct white space	Tim Almdal

2009-10-16	Remove all non Identity API methods from Identity.php. Created an ↵	Tim Almdal
	MY_Session class to provide the user state changes in the session and a login.php helper that has the login form.
2009-10-16	Start simplifying the interface by moving the static methods from user.php ↵	Tim Almdal
	and group.php. Tried creating a identity helper, but the helper identity.php was confused with the library Identity.php. So got around this by making the methods on Identity static and calling the instance within the static methods. Also temporarily moved the user.php and group.php back into the user module.
2009-10-16	Finish integrating the move of the user edit/update functions into the user ↵	Tim Almdal
	module. The premise is that the plugable user module will provide the update screens if the user backend supports updates.
2009-10-08	Part of the previous commit, forgot to save... again	Tim Almdal

2009-10-06	Change the focus of the user module from providing user/group management to ↵	Tim Almdal
	providing the default Identity implementation. * Remove the user_event callbacks and move them to the gallery_event callbacks. This will insure that the active user is always loaded (because the gallery callbacks are always called first) to its available to other gallery_ready handlers. Moved the method set_request_locale to the locales helper as it is more related to locales. * Move the user controllers and views into the gallery module. * Move the theme and block processing out of the user module and into core.