includes/sessions.php
2009-07-02 Dan Login and sessions: fixed some improper handling of the config for lockout logic
2009-06-21 Dan AJAX login: fixed improper run of login_submit_early; fixed failure to redirect if main_page_members == current page
2009-05-22 Dan Sped up AJAX de-auth a little; added a little extra info to login_success JSON responses
2009-05-15 Dan Fixed undefined indices for user_extra in various places
2009-05-05 Dan Made some more changes to the way namespaces are handled, for optimization purposes. This is a bit of a structural reorganization: $paths->pages is obsoleted in its entirety; calculating page existence and metadata is now the job of the Namespace_* backend class. There are many things in PageProcessor that should be reorganized, and page actions in general should really be rethought. This is probably the beginning of a long process that will be taking place over the course of the betas.
2009-04-19 Dan Upgrader: UX: Added welcome page, different between Caoineag and Banshee
2009-04-15 Dan New, beautiful, rethought Admin:Home. No, really, you'll like it.
2009-04-11 Dan session: login_process_userdata_json hook should work with more than one installed auth plugin now
2009-04-05 Dan Session: additional metadata passed back from auth plugins is passed through to client for optional further parsing
2009-03-14 Dan Added support for alternate port numbers on database servers. Also in install-cli, merged in new sysreqs functionality.
2009-02-26 Dan Added possibility for auth plugins, which can log a user in using non-standard authentication methods.
2009-02-16 Dan Major redesign of rendering pipeline that separates pages saved with MCE from pages saved with the plaintext editor (full description in long commit message)
2009-01-26 Dan Replaced integer checks that used preg_match() to use ctype_digit() instead
2009-01-16 Dan Deprecated old grab_password_hash() functions in session
2009-01-12 Dan Added support for live re-auth and de-auth; fully AJAX, no page reload required, plus plugin-usable API.
2009-01-04 Dan Upgrades should work now.
2009-01-04 Dan Two big commits in one day I know, but redid password storage to use HMAC-SHA1. Consolidated much AES processing to three core methods in session that should handle everything automagically. Installation works; upgrades should. Rebranded as 1.1.6.
2008-12-21 Dan Corrected a few issues with languages and client-side code
2008-12-21 Dan Fixed a couple PostgreSQL bugs.
2008-12-21 Dan Fixed timezone preference setting not fully implemented; added ability for users to select their own rank from a list of possible ranks based on group membership and user level
2008-11-21 Dan Added dependency checking in ACL tracer
2008-11-09 Dan Merging with upstream
2008-11-03 Dan Fixed error-out when DiffieHellman not supported and respawn requested (part of OS X QA process)
2008-11-09 Dan Added config option to grant userpage rights to new users (defaults to on, as it was hardcoded on before)
2008-11-09 Dan Fixed DiffieHellman being included twice when not supported and login fails
2008-09-21 Dan Added initial support for DST. Rules are defined in constants.php and are extensible.
2008-08-20 Dan Made upgrades from 1.1.4 -> 1.1.5 work if keyhash is not present
2008-08-13 Dan Made login forms that use $session->aes_javascript() use new whiteOutForm() function
2008-08-12 Dan Added customizable parameters for session length and the long-missing "remember me" option (or rather, the ability to turn it off and make sessions temporary)
2008-08-12 Dan Rebranded as 1.1.5 (Caoineag alpha 5) and fixed a couple bugs related to CDN support in template_nodb and installerUI. Updated readme.
less more (0) -100 -50 -30 tip