Commit graph

222 commits

Author SHA1 Message Date
Teatek
beec234478 fixes #958 : protect fields before copying properties from default user to new user 2019-01-27 16:52:15 +01:00
plegall
a9fa61adfe Merge branch '2.8' 2016-10-20 10:43:41 +02:00
plegall
25d2305839 fixes #542, do not always use browser language on register 2016-10-20 10:14:28 +02:00
plegall
4560e2d824 fixes #478, add new column user_infos.last_visit
This will speed up user edit popin opening, by avoiding to search in history for the last user visit.

The column user_infos.last_visit_from_history true/false says if the last_visit has already been search in history (to avoid making it twice). I could have implemented the search of last_visit for all users in the migration task 149 but in case of many users and long history, it would have taken years to execute...
2016-05-31 16:00:03 +02:00
plegall
c451470ad4 typo fixed 2016-02-12 20:22:20 +01:00
plegall
fbd90fa460 fixes #414, deactivate auth keys on password change 2016-02-12 20:20:12 +01:00
plg
08fe998dd1 session_regenerate_id() still fails with PHP 7.0.3
fix indentation
2016-02-10 15:19:40 +01:00
Nicolas
0909717c37 if php version is less than 7.0.3 and session_id exists do nothing 2016-02-10 12:37:12 +01:00
plegall
2fcf276811 fixes #413, force log in with auth key user 2016-02-01 10:05:33 +01:00
plegall
a12425629e fixes #412, warn visitor if auth key no longer valid 2016-01-29 12:44:38 +01:00
plg
f04e4d8b4f bug #408 fixed, no session_regenerate_id on early PHP 7 versions 2016-01-27 15:36:00 +01:00
modus75
4bf51fc8e0 shorten some code (not really important) 2016-01-16 17:20:43 +01:00
plegall
c789347c51 happy new year 2016, all headers updated 2016-01-14 12:17:58 +01:00
plegall
f2f9e5ecb7 feature #392, authentication keys, history log
When a user successfully performs an authentication with an auth_key, Piwigo
registers it in the history table.

For now, it is not shown/searchable in the history screen, but we can add it
in the future and we can provide a plugin with specific details about
authentication keys usage.
2016-01-04 15:04:02 +01:00
plegall
f4040a5a3a forgotten to give user_status on recursive call in create_user_auth_key, bug detected by @mistic100 2016-01-01 20:37:33 +01:00
plegall
4aeedb5a2e feature #392, authentication keys, album notification
* On album notification (for a group), sends one distinct email for each user
  with a new authentication key.

* When someone clicks the link with auth=<key> in URL, if the user is not
  already connected, Piwigo will automatically connect the user.
2015-12-31 19:59:08 +01:00
plegall
e520cf8389 merge r31167 from branch 2.7 to trunk
bug 3223 fixed: make sure we have found a user before validating the connection


git-svn-id: http://piwigo.org/svn/trunk@31168 68402e56-0260-453c-a942-63ccdbb3a9ee
2015-05-15 12:45:50 +00:00
plegall
18f045bf35 bug 3111: cleaner code for get_browser_language (no more reference as parameter)
git-svn-id: http://piwigo.org/svn/trunk@29840 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-09-30 08:23:34 +00:00
plegall
7e5722ce78 bug 3111: add comment to help understand the code
git-svn-id: http://piwigo.org/svn/trunk@29839 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-09-29 20:55:00 +00:00
plegall
3ef5464b26 bug fixed: register_user can be called with no ['mail_address']
git-svn-id: http://piwigo.org/svn/trunk@29759 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-09-23 08:37:16 +00:00
plegall
87a30ff064 bug 3050: increase security on reset password algorithm.
* reset key has a 1-hour life
* reset key is automatically deleted once used
* reset key is stored as a hash

Thank you effigies for code suggestions


git-svn-id: http://piwigo.org/svn/trunk@29111 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-07-28 19:27:50 +00:00
plegall
b97fcf2a22 feature 3105: display the link to Piwigo in connection settings notification email (option on register)
git-svn-id: http://piwigo.org/svn/trunk@29075 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-07-25 12:40:34 +00:00
rvelices
3c13387dfd since number of accepted args not required for add_event_handler, simplify calls
git-svn-id: http://piwigo.org/svn/trunk@28714 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-06-18 19:51:42 +00:00
mistic100
4bd32005b5 feature 3010 : replace trigger_action/event by trigger_notify/change
git-svn-id: http://piwigo.org/svn/trunk@28587 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-06-02 07:55:46 +00:00
rvelices
656ac54090 more query2array and remove unnecessary tests in often called url functions
git-svn-id: http://piwigo.org/svn/trunk@27388 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-02-16 07:39:19 +00:00
mistic100
922de9a63d remove PHP < 5.2 code
git-svn-id: http://piwigo.org/svn/trunk@27158 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-02-04 11:02:38 +00:00
mistic100
636650309a Update headers to 2014. Happy new year!!
git-svn-id: http://piwigo.org/svn/trunk@26461 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-01-05 00:19:25 +00:00
mistic100
6e91ec554c feature 1668: escape login and password in registration email
git-svn-id: http://piwigo.org/svn/trunk@26028 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-12-18 19:59:30 +00:00
mistic100
45afbb48fb remove is_adviser() and get_email_address_as_display_text()
git-svn-id: http://piwigo.org/svn/trunk@25729 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-11-26 20:54:07 +00:00
mistic100
79f0a80f33 feature 2999: documentation of functions_user.inc.php (move two functions to functions_category.inc.php)
git-svn-id: http://piwigo.org/svn/trunk@25728 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-11-26 20:48:08 +00:00
patdenice
e32dbb77be Small bug on password hash verification with strpos function
git-svn-id: http://piwigo.org/svn/trunk@25633 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-11-21 22:23:59 +00:00
mistic100
fc3b787b70 feature 2995: New email template
restore get_l10n_args removed at r25357
apply changes to NBM

git-svn-id: http://piwigo.org/svn/trunk@25360 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-11-06 17:57:53 +00:00
mistic100
7a5e31e401 feature 2995: New email template
rewrite pwg_mail_group() and pwg_mail_notification_admins()
new function pwg_mail_admins()
add complete template management in pwg_mail()
TODO : font-size problem in Thunderbird

git-svn-id: http://piwigo.org/svn/trunk@25357 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-11-06 15:43:41 +00:00
plegall
df6718f3f8 feature 1668, user manager redesign: ability to add a new user (call to pwg.users.add through AJAX)
Move the "send connection settings" code to function register_user (avoid code duplication).


git-svn-id: http://piwigo.org/svn/trunk@25237 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-10-30 12:54:46 +00:00
mistic100
2d2a2e2813 bug 2988: register_user() must returns new user id
git-svn-id: http://piwigo.org/svn/trunk@25116 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-10-24 13:01:25 +00:00
mistic100
4926fced5e replace some mass_updates/inserts by single_update/insert
git-svn-id: http://piwigo.org/svn/trunk@25019 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-10-19 18:17:10 +00:00
rvelices
c121640b6d bug 2097: wrong number of sub-albums
bug 2098: make number of direct sub-albums available for each user

git-svn-id: http://piwigo.org/svn/trunk@22879 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-05-26 19:56:31 +00:00
plegall
f23b5fbcae merge r21236 from branch 2.5 to trunk
bug 2861: avoid "invalid password" with manual upgrade and admin session expired


git-svn-id: http://piwigo.org/svn/trunk@22005 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-04-04 10:56:51 +00:00
rvelices
55275efb66 feature 2557 recent photos/albums should never be empty
git-svn-id: http://piwigo.org/svn/trunk@21802 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-03-23 10:50:57 +00:00
rvelices
19d831bfe1 db changes for feature 2836 display # of comments/tags in menubar and feature 2557 recent photos should never be empty
git-svn-id: http://piwigo.org/svn/trunk@21801 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-03-23 10:02:04 +00:00
plegall
4c4bf26b0c feature 65: fetch_assoc behaves different with mysql and mysqli. When no row
is returned, mysql returns bool:false, while mysqli returns null and it was
breaking completely the installation process. I have faked the old mysql
behavior with mysqli (just for get_default_user_infos function)


git-svn-id: http://piwigo.org/svn/trunk@20545 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-02-04 13:04:42 +00:00
mistic100
ff5568afec feature:2823 Add triggers for login system
git-svn-id: http://piwigo.org/svn/trunk@20282 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-01-20 11:50:08 +00:00
plegall
4bc775e479 update Piwigo headers to 2013 (the end of the world didn't occur as expected on r12922)
git-svn-id: http://piwigo.org/svn/trunk@19703 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-01-01 12:35:02 +00:00
mistic100
bfd46560db make sure get_sql_condition_FandF() doesn't generate corrupted SQL code
git-svn-id: http://piwigo.org/svn/trunk@19333 68402e56-0260-453c-a942-63ccdbb3a9ee
2012-12-08 17:36:03 +00:00
plegall
26e0ed8fd6 feature 2727: improved backward compatibility with ['pass_convert']
git-svn-id: http://piwigo.org/svn/trunk@18890 68402e56-0260-453c-a942-63ccdbb3a9ee
2012-11-02 14:39:01 +00:00
plegall
a73846717f feature 2727: improve password security with the use of PasswordHash class.
This class performs salt and multiple iterations. Already used in Wordpress,
Drupal, phpBB and many other web applications.

$conf['pass_convert'] is replaced by $conf['password_hash'] + $conf['password_verify']


git-svn-id: http://piwigo.org/svn/trunk@18889 68402e56-0260-453c-a942-63ccdbb3a9ee
2012-11-02 13:59:07 +00:00
rvelices
267c548896 - remove unsed code; shorten existing code and improve readability ...
git-svn-id: http://piwigo.org/svn/trunk@18629 68402e56-0260-453c-a942-63ccdbb3a9ee
2012-10-12 20:00:16 +00:00
mistic100
7e33b84e77 feature 2754: Add "Email" field for user comments + mandatory "Author"
git-svn-id: http://piwigo.org/svn/trunk@18164 68402e56-0260-453c-a942-63ccdbb3a9ee
2012-09-23 09:34:30 +00:00
rvelices
a893882789 - multisize thumb longest side can be smaller than the square size
- remove unused css, shorten/optimize php called very often (at least theoretically should be faster)

git-svn-id: http://piwigo.org/svn/trunk@13240 68402e56-0260-453c-a942-63ccdbb3a9ee
2012-02-18 20:46:46 +00:00
rvelices
f6825cfb33 - remove square/thumb from choices on picture
- fix content margin on password register 
- purge derivative cache by type of derivative
- session saved infos/messages are not given to the page on html redirections
- shorter/faster code in functions_xxx

git-svn-id: http://piwigo.org/svn/trunk@13074 68402e56-0260-453c-a942-63ccdbb3a9ee
2012-02-09 21:11:34 +00:00