markzz/aurweb.git/web/template/login_form.php, branch v2.3.0

Move login form to a separate page

2012-07-06T09:26:38Z

Do not show the login form on every page. Move it to a separate login page and add a link to the navigation bar. Also, add a logout link for logged-in users. Signed-off-by: Lukas Fleischer Signed-off-by: canyonknight

Add a new AUR_LOCATION setting

2011-11-02T20:21:23Z

This should be set to something like 'http://localhost' for development or 'https://aur.archlinux.org' in production. It ensures all links in the site stay in the development site and there is no sudden jump from development to production environments. Signed-off-by: Dan McGee Signed-off-by: Lukas Fleischer

web/template/login_form.php: Escape the request URI

2011-09-05T14:56:09Z

Reported-by: Thomas Bächler Signed-off-by: Lukas Fleischer

Link to current page in the login bar HTTPs link

2011-09-05T14:47:57Z

This is way more convenient if you follow a HTTP link. Implements FS#25757. Signed-off-by: Lukas Fleischer

Add a configuration setting to disallow HTTP login

2011-08-11T19:04:38Z

If this is enabled, do not show the login form and display a note suggesting to switch to a secure connection if a user accesses the site via HTTP. Signed-off-by: Lukas Fleischer

Added label tags for login form fields.

2011-05-09T08:54:36Z

Lukas: Use tabs for indentation instead of spaces. Signed-off-by: Lukas Fleischer

Remove mystery code.

2010-06-05T06:07:23Z

Signed-off-by: Loui Chang

login_form: Change 'Forgot Password' to translatable string.

2009-11-23T13:00:33Z

Also change layout and styling. Signed-off-by: Loui Chang

Implement 'Password Reset' facility (FS#3061)

2009-11-13T21:49:55Z

This works by adding a new field to the 'Users' table called 'ResetKey', which is a 32 characters long, random string. When the user requests a password reset, a new 'reset key' is generated and sent to the user's e-mail address in the form of a link in the following format: http://aur.archlinux.org/passreset.php?resetkey= When the above link is followed, the user is presented with a form to verify his/her e-mail address and specify the new desired password. If the e-mail address matches the reset key in the database, the new password is assigned to the account. If there is an error, a relevant message is displayed and the user is prompted to re-enter the required information. Upon successful completion of this procedure, the ResetKey field in the database is blanked and the specific key cannot be reused. One SQL query is needed to add the ResetKey field to the 'Users' table: ALTER TABLE `Users` ADD `ResetKey` CHAR(32) NOT NULL DEFAULT ''; Signed-off-by: Loui Chang

Redirect to REQUEST_URI after logging in.

2009-03-03T18:06:37Z

This closes FS#13017 Signed-off-by: Loui Chang