markzz/aurweb.git/web/lib, branch v2.2.0aurweb working repositoryhttps://git.markzz.net/markzz/aurweb.git/atom/web/lib?h=v2.2.02013-03-26T06:28:23ZRelease 2.2.02013-03-26T06:28:23ZLukas Fleischerarchlinux@cryptocrack.de2013-03-26T06:28:23Zurn:sha1:f542383bc536ea59e1390ecc796fe78bcd2e7f0e
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Show hint if password is empty during login2013-03-25T01:15:12ZLukas Fleischerarchlinux@cryptocrack.de2013-03-25T01:15:12Zurn:sha1:cd59a313b40a8611072a4bdd7896e5cf8dab24ee
A user might have an empty password due to two reasons:
* The user just created an account and needs to set an initial password.
* The password has been reset by the administrator.
In both cases, the user might be confused as to why the login does not
work. Add a message that helps users debug the issue in both cases.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Implement IP banning for user registration and user login2013-03-24T21:12:17Zcanyonknightcanyonknight@gmail.com2013-03-20T00:17:59Zurn:sha1:cb91942595e796c6a10299d6547767954b923fb5
Adds a new is_ipbanned() function to determine whether the user
attempting to login or register for an account has their IP
address listed in the "Bans" table.
Signed-off-by: canyonknight <canyonknight@gmail.com>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Save last login IP address2013-03-21T21:26:46ZLukas Fleischerarchlinux@cryptocrack.de2013-03-19T13:49:34Zurn:sha1:5660816ea079585c70583a9e470e22c4cf66c022
Save the IP address used for the last login in the "Users" table. This
makes it a bit easier to create IP ban lists for spammers without
looking at web server logs.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
process_account_form(): Highlight errors2013-03-21T21:26:45ZLukas Fleischerarchlinux@cryptocrack.de2013-03-19T13:26:16Zurn:sha1:de39a712b040d4ce51dc4eb2f4e2ef74a7a9013c
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
process_account_form(): Allow using empty passwords2013-03-19T13:03:34ZLukas Fleischerarchlinux@cryptocrack.de2013-03-19T12:37:56Zurn:sha1:97dd4b0f4de69e63e7924ba9ecb726b3c07008f4
If an empty password is passed during account registration, login for
the new user is disabled and a reset key is sent to the new user's
e-mail address so that they can set an initial password manually.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Move reset key submission to a separate function2013-03-19T13:03:33ZLukas Fleischerarchlinux@cryptocrack.de2013-03-19T12:10:12Zurn:sha1:5d31bb24502536d53968f1ba0062d2b0aedb11c5
This allows for reusing reset key submission for other things, such as
sending an initial password reset code during account registration.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Fix typo in delete permission warning2013-03-19T12:50:45ZConnor Behanconnor.behan@gmail.com2013-03-02T07:21:50Zurn:sha1:a386bbd35d20465ae182b7aadf3fd2dfcbd5250f
Signed-off-by: Connor Behan <connor.behan@gmail.com>
Signed-off-by: canyonknight <canyonknight@gmail.com>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Release 2.1.02013-03-18T18:55:58ZLukas Fleischerarchlinux@cryptocrack.de2013-03-18T18:55:58Zurn:sha1:fe096e31cfe396ae9893c2f04dbceff2e8d26828
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Remove checks before calling connection method2013-02-10T11:10:38Zcanyonknightcanyonknight@gmail.com2013-02-03T16:26:31Zurn:sha1:cf2ab50b8239b75af5df60ee143f41fedb044dc8
Large amount of boilerplate code that checks if a database
connection exists is useless now that the new connection method
automatically does the same check.
Signed-off-by: canyonknight <canyonknight@gmail.com>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>