markzz/aurweb.git/web, branch v2.2.0

Release 2.2.0

2013-03-26T06:28:23Z

Signed-off-by: Lukas Fleischer

Use minified typeahead JS from archweb

2013-03-25T23:54:18Z

Signed-off-by: Lukas Fleischer

Show hint if password is empty during login

2013-03-25T01:15:12Z

A user might have an empty password due to two reasons: * The user just created an account and needs to set an initial password. * The password has been reset by the administrator. In both cases, the user might be confused as to why the login does not work. Add a message that helps users debug the issue in both cases. Signed-off-by: Lukas Fleischer

Implement IP banning for user registration and user login

2013-03-24T21:12:17Z

Adds a new is_ipbanned() function to determine whether the user attempting to login or register for an account has their IP address listed in the "Bans" table. Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

Return 404 error page if invalid package ID is used

2013-03-21T21:38:49Z

We already display the 404 error page if someone tries to access an invalid package via virtual URLs ("/packages/nonexistent"). Add the same check to "web/html/packages.php" to make sure the same error is shown if a user requests package details of a nonexistent package ID via legacy URLs ("/packages.php?ID=-1"). Signed-off-by: Lukas Fleischer

Save last login IP address

2013-03-21T21:26:46Z

Save the IP address used for the last login in the "Users" table. This makes it a bit easier to create IP ban lists for spammers without looking at web server logs. Signed-off-by: Lukas Fleischer

process_account_form(): Highlight errors

2013-03-21T21:26:45Z

Signed-off-by: Lukas Fleischer

Enforce e-mail validation during registration

2013-03-19T13:03:34Z

Remove the password field from the account creation form and always send a password reset request via e-mail instead. This ensures that only users with valid e-mail addresses are able to login. Signed-off-by: Lukas Fleischer

process_account_form(): Allow using empty passwords

2013-03-19T13:03:34Z

If an empty password is passed during account registration, login for the new user is disabled and a reset key is sent to the new user's e-mail address so that they can set an initial password manually. Signed-off-by: Lukas Fleischer

Move reset key submission to a separate function

2013-03-19T13:03:33Z

This allows for reusing reset key submission for other things, such as sending an initial password reset code during account registration. Signed-off-by: Lukas Fleischer