summaryrefslogtreecommitdiff
path: root/modules/user/controllers
AgeCommit message (Expand)Author
2009-10-23Created user.css. Moved user-related form css to the new sheet.Chad Kieffer
2009-10-23move controllers and views to the user module to make the Identity Provider r...Tim Almdal
2009-10-15Move all the edit/update forms for users and groups back to the user module.Tim Almdal
2009-10-14Move the ui for user adminsitration back to the user module.Tim Almdal
2009-10-13Refactor the ui component of the user module into the gallery core module.Tim Almdal
2009-10-09Convert direct lookups for the user table using ORM to using the user::lookup...Tim Almdal
2009-10-08Change the users.php controller so its no longer restful. The problem with o...Tim Almdal
2009-10-04Renamed most, if not all css selectors from gName to g-name. Moved a few shar...Chad Kieffer
2009-09-15CSRF / auth fixes, golden data file checkpointAndy Staudacher
2009-09-10Use abs_url() inside url::redirect() calls so that we don't just windBharat Mediratta
2009-09-08Move specialized (pretty) url generation back into Item_Model so thatBharat Mediratta
2009-09-04When changing user preferences, reset the session based locale preferences.Andy Staudacher
2009-08-29Update all code to use helper method html::clean(), html::purify(), ... inste...Andy Staudacher
2009-08-29Merge commit 'upstream/master'Andy Staudacher
2009-08-29Refactor all calls of p::clean() to SafeString::of() and p::purify() to SafeS...Andy Staudacher
2009-08-27Don't ask for csrf when we're resetting passwords. They're not gonna have on...Bharat Mediratta
2009-07-29Clean up user form events. Thanks to Ben Smith (glooper).Bharat Mediratta
2009-07-25fix for ticket #574. The user->url database wasn't being set when the user wa...Tim Almdal
2009-07-23Add form processing events:Bharat Mediratta
2009-07-21In the logout link, urlencode the continue url so that ampersands, etcBharat Mediratta
2009-07-16Add missing ) dropped in 8f9a943f.Bharat Mediratta
2009-07-01Fix a bunch of XSS vulnerabilities turned up by manual inspectionBharat Mediratta
2009-06-10Actually save the url when editing user information.Bharat Mediratta
2009-06-09Create a new method in MY_url.php "get_item_from_uri" which loads the itemTim Almdal
2009-06-06Don't ask for CSRF token when trying to view the password reset form.Bharat Mediratta
2009-06-01Security pass over all controller code. Mostly adding CSRF checkingBharat Mediratta
2009-05-31Clean up view variablesBharat Mediratta
2009-05-27Regenerate the session id every time through login::_auth() to avoid session ...Bharat Mediratta
2009-05-27Use a random value for the password reset hash to reduce the chancesBharat Mediratta
2009-05-26White space fixesChad Kieffer
2009-05-21Changed Name label to Username, closes ticket #93Chad Kieffer
2009-05-20Move the first-admin-login steps out of the user module and into an event lis...Bharat Mediratta
2009-05-13Gee it's May already. Update copyright to 2009.Bharat Mediratta
2009-05-13Don't allow admins to delete the guest user. Fixes ticket #213Bharat Mediratta
2009-05-13Variety of changes to the way we do user editing:Bharat Mediratta
2009-05-13Log password reset attempts. Fixes ticket #251.Bharat Mediratta
2009-05-10After ajax login, just reload the current page.Bharat Mediratta
2009-04-24add_group() was not getting $form before using it.Bharat Mediratta
2009-04-09Fix for ticket 181: don't ignore the locale option when adding usersAndy Staudacher
2009-04-05Don't do graphics detection in core_installer::install() because thatBharat Mediratta
2009-04-03Fix for ticket #201. Tim Almdal
2009-03-25Fix for ticket #181. Valiant take note of the change toTim Almdal
2009-03-17Fix the locale field in the change user settings formAndy Staudacher
2009-03-17Fix edit user form handlerAndy Staudacher
2009-03-16Proxy the url through _auth() to user::get_login_form()Bharat Mediratta
2009-03-16Clean up the login, maintenance login and required-top-level-login code.Bharat Mediratta
2009-03-11Bag the header("Location:", ...);exit() and replace withTim Almdal
2009-03-11Force a login if everybody does not have access to the rootTim Almdal
2009-02-10Adding UI for site language selection and user language preference.Andy Staudacher
2009-02-10Line length fixBharat Mediratta