| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2010-04-30 | Add page_title to admin views. Closes #1038. | ckieffer | |
| 2010-04-17 | Change the key for invalid passwords from "invalid" to | Bharat Mediratta | |
| "invalid_password" to remove ambiguity. | |||
| 2010-03-03 | Update the copyright to 2010. It's only 3 months into the year :-) | Bharat Mediratta | |
| 2010-02-27 | Fix for ticket #1037: Only show language drop-down when there's actually a ↵ | Andy Staudacher | |
| choice. | |||
| 2010-02-27 | Add more randomness to reset password mechanism. | Andy Staudacher | |
| 2010-02-11 | Get rid of unnecessary view file. | Andy Staudacher | |
| 2010-02-11 | Include user name in logging message for failed password reset. As Bharat ↵ | Andy Staudacher | |
| points out, t() ensures that parameters are escaped for XSS. | |||
| 2010-02-11 | Fix for ticket 1010: Don't leak valid user names in "forgot password" form. | Andy Staudacher | |
| Includes fixes for user forms as well (edit user / email / password). | |||
| 2010-02-09 | Fix password reset confirmation | Andy Staudacher | |
| 2010-02-07 | Last partial fix for ticket 585: Compartmentalize the admin area and require ↵ | Andy Staudacher | |
| active authentication every 20 minutes to access the admin area. Also renaming auth::validate_too_many_failed_password_changes to validate_too_many_failed_auth_attempts since it's used in this generalized way in 3 places now. | |||
| 2010-02-07 | Rename user_authenticate_xxx events to user_auth_xxx for brevity. | Bharat Mediratta | |
| 2010-02-07 | Create the concept of a "failed authentication" as semantically | Bharat Mediratta | |
| separate from a successful or failed login. 1) Rename user_login_failed event to user_authenticate_failed 2) Rename failed_logins table to failed_auth (bump Gallery module to v27 to rename the table) 3) auth::too_many_failed_logins -> auth::too_many_failures 4) auth::record_failed_auth_attempts -> auth::record_failed_attempts auth::clear_failed_auth_attempts -> auth::clear_failed_attempts | |||
| 2010-02-06 | Partial fix for ticket 585: Require current password when changing an ↵ | Andy Staudacher | |
| account's email address. Still leaving the user/group admin page wide open though. | |||
| 2010-02-06 | Fix up Admin_Users_Controller() form handling now that user_form.html | Bharat Mediratta | |
| is gone. Fixes ticket #1005. | |||
| 2010-02-02 | Protect password changes against brute force attacks. | Bharat Mediratta | |
| 2010-02-02 | Require the current password to change your password. | Bharat Mediratta | |
| Fixes ticket #585. Separate out the password change form from the regular edit user form. Require the old password to enter a new one. While I'm at it, roll the password strength javascript into a Form_Script element so that we can get rid of the old view (which incidentally fixes a bug where the password strength meter would go away on form errors). | |||
| 2010-02-01 | Localize validation errors. | Bharat Mediratta | |
| 2010-01-31 | Fix lots of warnings that pop up when we're in E_STRICT mode. They're | Bharat Mediratta | |
| mostly issues around uninitialized variables, calling non-static functions in a static context, calling Session functions directly instead of on its singleton, passing non-variables by reference, and subclasses not using the same interface as the parent class. | |||
| 2010-01-30 | Don't override the password in the database if it's empty in the form. | Bharat Mediratta | |
| Fixes ticket #995. | |||
| 2010-01-28 | Localize edit form error messages. | Bharat Mediratta | |
| 2010-01-22 | Don't try to access ORM::$changed externally; it's protected. | Bharat Mediratta | |
| 2010-01-20 | Fix typo: edit_user -> add_user. | Bharat Mediratta | |
| 2010-01-20 | Stop using MY_ORM::original(). | Bharat Mediratta | |
| 2010-01-17 | Move model rules down into their validate() function for consistency. | Bharat Mediratta | |
| Change "in_use" error to "conflict" for consistency. | |||
| 2010-01-16 | Use "(string) $form" instead of "$form->__toString()" | Bharat Mediratta | |
| 2010-01-16 | Convert Users_Controller to model based validation. | Bharat Mediratta | |
| 2010-01-16 | Convert Admin_Users_Controller, User_Model and Group_Model to use | Bharat Mediratta | |
| model based validation. | |||
| 2010-01-16 | Convert Admin_Users::add_user() to use model based validation. Get | Bharat Mediratta | |
| the rules and business logic out of the form and user::create(), and move it into User_Model::save(). | |||
| 2010-01-16 | Whitespace. | Bharat Mediratta | |
| 2009-12-23 | Convert a bunch of leftover kohana::show_404 calls to throw | Bharat Mediratta | |
| Kohana_404_Exception instead. These are the ones where we used a lower-case 'k' so my previous filter didn't catch it. | |||
| 2009-11-25 | ORM::orderby -> ORM::order_by | Bharat Mediratta | |
| 2009-11-25 | Preliminary work to cut over to Kohana 2.4 | Bharat Mediratta | |
| - Kohana::log() -> Kohana_Log::add() - Kohana::config_XXX -> Kohana_Config::instance()->XXX - Implement View::set_global in MY_View - Updated Cache_Database_Driver to latest APIs - ORM::$loaded -> ORM::loaded() - Updated item::viewable() to use K2.4 parenthesization | |||
| 2009-11-21 | Correct inconsistent captialization. Fixes #906 | Tim Almdal | |
| 2009-11-17 | Redesign the way that we consider page types to create buckets of page | Bharat Mediratta | |
| types, and a subtype for specifics. Currently the top level bucket collection, item, other Here are the core subtypes so far: collection: album, search, tag item: movie, photo other: login, reset, comment-fragment, comment It's legal to create new page_subtypes whenever you want. Use the appropriate page_type to get the coarse grain behavior that you want. | |||
| 2009-11-06 | Remove width class from add group form, it sizes the form's elements, not ↵ | Chad Kieffer | |
| the form itself. | |||
| 2009-10-31 | Revert "Use an event 'check_user_name_exists' to validate the input name is ↵ | Tim Almdal | |
| already in use. The parameter is a standard class with the name and an exists flag. Any event handler should or their result with the exists flag." This reverts commit 04bf50bfb4241f7c814782c516732d927ff1f457. | |||
| 2009-10-30 | Caught a few more incorrect capitalizations. | Tim Almdal | |
| 2009-10-29 | Use an event 'check_user_name_exists' to validate the input name is already ↵ | Tim Almdal | |
| in use. The parameter is a standard class with the name and an exists flag. Any event handler should or their result with the exists flag. | |||
| 2009-10-27 | Check the minimum length when adding or modifying users via the admin screen. | Tim Almdal | |
| 2009-10-27 | Add a password strength meter. | Tim Almdal | |
| 2009-10-27 | Set the minimum password length to 5. The gallery owner can change this in ↵ | Tim Almdal | |
| the advance settings. | |||
| 2009-10-27 | When we are changing the password using the change password from as part of ↵ | Tim Almdal | |
| the password reset, the input value is in the post[hash] variable as opposed to the get(key) value. This should fix ticket #850. | |||
| 2009-10-24 | Merge branch 'master' into talmdal_dev | Tim Almdal | |
| Conflicts: modules/server_add/helpers/server_add_theme.php | |||
| 2009-10-23 | Created user.css. Moved user-related form css to the new sheet. | Chad Kieffer | |
| 2009-10-23 | move controllers and views to the user module to make the Identity Provider ↵ | Tim Almdal | |
| refactor smaller | |||
| 2009-10-22 | Change the name of identity library from Identity to IdentityProvider. ↵ | Tim Almdal | |
| Create a helper class called identity to simplify call the Identity Provider. Move the contents of MY_Session.php to the new helper class and remove the MY_Session class | |||
| 2009-10-19 | Simplify the user interface by moving the password reset functionality into ↵ | Tim Almdal | |
| the user module Bagging the User_Definition and Group_Definition abstract classes and replacing them with interfaces with the same names. Make sure all the unit tests work. | |||
| 2009-10-16 | Remove all non Identity API methods from Identity.php. Created an ↵ | Tim Almdal | |
| MY_Session class to provide the user state changes in the session and a login.php helper that has the login form. | |||
| 2009-10-16 | Cleanup merge of user/group helpers into Identity interface. Reduce ↵ | Tim Almdal | |
| redundant code in the user module and remove references to the Identity helper from the user module as the user module should be able to access things directly. Simplify the get_user_list api method to just accept an array of ids to return user objects for. | |||
| 2009-10-16 | Start simplifying the interface by moving the static methods from user.php ↵ | Tim Almdal | |
| and group.php. Tried creating a identity helper, but the helper identity.php was confused with the library Identity.php. So got around this by making the methods on Identity static and calling the instance within the static methods. Also temporarily moved the user.php and group.php back into the user module. | |||
 |
index : gallery3.git | |
| A clone of the Gallery3 code for testing and development. | root |
| summaryrefslogtreecommitdiff |