summaryrefslogtreecommitdiff
path: root/modules/user
AgeCommit message (Collapse)Author
2010-08-15We use UTF-8 everywhere. Fixes ticket #1285.Bharat Mediratta
2010-08-08Whitespace fixBharat Mediratta
2010-08-08Convert tabs to spaces to fix File_Structure_Test.Bharat Mediratta
2010-08-01Fix the i18n error message for missing/incorrect password. Fixes ticket #1265.Bharat Mediratta
2010-08-01Merge branch 'dialog' of github.com:gallery/gallery3 into dialogTim Almdal
2010-08-01Merge branch 'master' into dialogTim Almdal
2010-08-01Add a localized error message for missing usernames. Fixes ticket #1266.Bharat Mediratta
2010-07-31Full pass over all the JSON encoding and JS dialog code. We now abideBharat Mediratta
by the following rules: 1) An initial dialog or panel load can take either HTML or JSON, but the mime type must accurately reflect its payload. 2) dialog form submits can handle a pure HTML response, but the mime type must also be correct. This properly resolves the problem where the reauth code gets a JSON response first from the reauth code, and then an HTML response when you reauth and continue on to a given form -- try it out with Admin > Settings > Advanced. 3) All JSON replies must set the mime type correctly. The json::reply convenience function does this for us. 4) By default, any HTML content sent back in the JSON response should be in the "html" field, no longer the "form" field. The combination of these allows us to stop doing boilerplate code like this in our controllers: // Print our view, JSON encoded json::reply(array("form" => (string) $view)); instead, controllers can just return HTML, eg: // Print our view print $view; That's much more intuitive for developers.
2010-07-31More patches as part of #1225. Change the 'core' modules to use the json::replyTim Almdal
method to set the content type header and encode the response as a json object
2010-07-31Partial fix for #1225 addresses the issues with the user edit forms.Tim Almdal
2010-07-23More patches as part of #1225. Change the 'core' modules to use the json::replyTim Almdal
method to set the content type header and encode the response as a json object
2010-07-23Partial fix for #1225 addresses the issues with the user edit forms.Tim Almdal
2010-07-20Show the old group name in the error message when we fail to modify a group. ↵Bharat Mediratta
Fixes ticket #1233.
2010-07-20Fix a bunch of missing or invalid error messages. Fixes ticket #1232.Bharat Mediratta
2010-07-20Add internationalized error messages for adding and editing groups.Bharat Mediratta
2010-07-06Fix for ticket #1181. Use $.getJSON to retrieve the json contents of the ↵Tim Almdal
dialog. Convert all the controllers that create the data to go into a dialog to return the html as part of a json object.
2010-06-15Removed self-closing slash from opening <li> tag.ckieffer
2010-04-30Add page_title to admin views. Closes #1038.ckieffer
2010-04-17Change the key for invalid passwords from "invalid" toBharat Mediratta
"invalid_password" to remove ambiguity.
2010-04-17Add user::valid_username() as a validation helper.Bharat Mediratta
2010-03-03Update the copyright to 2010. It's only 3 months into the year :-)Bharat Mediratta
2010-02-27Fix for ticket #1037: Only show language drop-down when there's actually a ↵Andy Staudacher
choice.
2010-02-27Add more randomness to reset password mechanism.Andy Staudacher
2010-02-20Add link to edit user group names. Closes ticket #1028.Chad Kieffer
2010-02-18Revert "Fix for ticket #491: Make user and group names translatable."Bharat Mediratta
This reverts commit 409121942590e12692eaf4e6e9e8b71bfe5ed60c.
2010-02-18Revert "Never assign a SafeString instance to a Model member (or hell will ↵Bharat Mediratta
break loose)." This reverts commit dcddc68f58dac2f0fe71f5a00ea4af32618efa13.
2010-02-15Never assign a SafeString instance to a Model member (or hell will break loose).Andy Staudacher
2010-02-14Fix for ticket #491: Make user and group names translatable.Andy Staudacher
Also fixed a UI bug: No longer showing the edit user buttons to admins in the profile view (to be consistent with the requirements in the controller).
2010-02-11Get rid of unnecessary view file.Andy Staudacher
2010-02-11Include user name in logging message for failed password reset. As Bharat ↵Andy Staudacher
points out, t() ensures that parameters are escaped for XSS.
2010-02-11Fix for ticket 1010: Don't leak valid user names in "forgot password" form.Andy Staudacher
Includes fixes for user forms as well (edit user / email / password).
2010-02-09Fix password reset confirmationAndy Staudacher
2010-02-07Last partial fix for ticket 585: Compartmentalize the admin area and require ↵Andy Staudacher
active authentication every 20 minutes to access the admin area. Also renaming auth::validate_too_many_failed_password_changes to validate_too_many_failed_auth_attempts since it's used in this generalized way in 3 places now.
2010-02-07Rename user_authenticate_xxx events to user_auth_xxx for brevity.Bharat Mediratta
2010-02-07Create the concept of a "failed authentication" as semanticallyBharat Mediratta
separate from a successful or failed login. 1) Rename user_login_failed event to user_authenticate_failed 2) Rename failed_logins table to failed_auth (bump Gallery module to v27 to rename the table) 3) auth::too_many_failed_logins -> auth::too_many_failures 4) auth::record_failed_auth_attempts -> auth::record_failed_attempts auth::clear_failed_auth_attempts -> auth::clear_failed_attempts
2010-02-06Partial fix for ticket 585: Require current password when changing an ↵Andy Staudacher
account's email address. Still leaving the user/group admin page wide open though.
2010-02-06Fix for ticket 1004: Replace all uses of split with explode (none actually ↵Andy Staudacher
required regular expressions). Thanks to Brian Hartsock for providing a patch!
2010-02-06Fix up Admin_Users_Controller() form handling now that user_form.htmlBharat Mediratta
is gone. Fixes ticket #1005.
2010-02-02Protect password changes against brute force attacks.Bharat Mediratta
2010-02-02Require the current password to change your password.Bharat Mediratta
Fixes ticket #585. Separate out the password change form from the regular edit user form. Require the old password to enter a new one. While I'm at it, roll the password strength javascript into a Form_Script element so that we can get rid of the old view (which incidentally fixes a bug where the password strength meter would go away on form errors).
2010-02-02Fix a bug in valid_password() where an empty password was considered valid.Bharat Mediratta
2010-02-01Localize validation errors.Bharat Mediratta
2010-02-01Fix a bug in valid_name where it wasn't checking for name collisions on new ↵Bharat Mediratta
users.
2010-01-31Force all non-guest users to have an email address since that'sBharat Mediratta
required in model validation. Without this, any save on a user without email will fail which means that you can't log in. Bump user module to version 3.
2010-01-31Fix lots of warnings that pop up when we're in E_STRICT mode. They'reBharat Mediratta
mostly issues around uninitialized variables, calling non-static functions in a static context, calling Session functions directly instead of on its singleton, passing non-variables by reference, and subclasses not using the same interface as the parent class.
2010-01-30Don't override the password in the database if it's empty in the form.Bharat Mediratta
Fixes ticket #995.
2010-01-30Fix the valid_admin code -- it was considering all non-admins invalid.Bharat Mediratta
Fixes ticket #997 (highest prime under 1000!)
2010-01-29Strongly type the argument list to the model::validate method.Tim Almdal
2010-01-28Localize edit form error messages.Bharat Mediratta
2010-01-27Convert back to using ORM::factory(..., $id) instead of calling where().Bharat Mediratta
generated by cgit v1.2.3 (git 2.46.0) at 2025-10-18 16:32:40 +0000