REJack
bd33c956a2
BCrypt/PHP's password_hash support
...
- added config var `use_password_hash`
- added config var `password_hash_algo`
- added config var `password_hash_options`
- added `verify_password()`
- changed `login()` (changed pass check with new the function, added a little skip for pass recreation if password_hash is active)
- changed `hash_password()`
- added `sql/Aauth_v2_BCrypt.sql` with a working password if BCrypt is active
9 years ago
REJack
e4aa1f5bc7
tests `update_login_attempts` done
...
fixed strtotime params in `update_login_attempts`
changed config var `update_last_login_attempt` to true,
9 years ago
REJack
4c3aec4b7c
fixed `strtotime()` parameter
9 years ago
REJack
e205dc28b8
removed user_id for reset_/remind_password function ( #124 )
...
- changed `ver_code` to sha1 hashed timestamp (`remind_password()`)
- removed `user_id` in reset password link (`remind_password()`)
- removed function param `$user_id` (`reset_password()`)
- changed password length to an even number based on config var `min` (`reset_password()`)
9 years ago
REJack
30a576df06
fixed fatal flaw on `update_login_attempts` ( #133 )
...
- changed `last_login_attempt` value to `Y-m-d H:i:s` from `Y-m-d H:0:0`
- changed `last_login_attempt`-check to check every x minute based on config var (`max_login_attempt_per_minutes`)
- added optional `last_login_attempt` update on login attempt (`update_last_login_attempt`)
- added config var `max_login_attempt_per_minutes`
- added config var `update_last_login_attempt`
- fixed config var info for `max_login_attempt` (`20` to `10`)
9 years ago
REJack
952f3ebe46
changed version to 2.5.0-alpha
9 years ago
REJack
0ae258d889
added function `get_user_vars($user_id)`
9 years ago
REJack
3887dd46ad
renamed `valid_chars` to `additional_valid_chars` #125
9 years ago
REJack
0ba3a8ea5e
verification email sending disabled if a admin is creating a user
9 years ago
REJack
4675b2fc5f
Sub-Groups added
...
- added function add_subgroup($group_par, $subgroup_par)
- added function remove_subgroup($group_par, $subgroup_par)
- added function get_subgroups($group_par)
- modified is_group_allowed() to check subgroups
- modified delete_group() to remove subgroups
9 years ago
Raphael Jackstadt
ca2cefd2b7
added a check if user has email or name already
...
fix for #109
9 years ago
AnasTHH
a775982cb8
Update Aauth.php
9 years ago
Bevin
eedb053d2d
Updated optional name param to use false instead of string
9 years ago
Bevin
b09f96f244
Fixed error on optional param of name when creating user
9 years ago
Emre Akay
8161fff5d2
Update Aauth.php
10 years ago
AnasTHH
09c1ffa481
Update Aauth.php
10 years ago
AnasTHH
e1dee38adc
Added a function to remove member from all groups
10 years ago
scombat
b254c9d715
Update array clearing for php compatibilities
...
remove array clearing method (lines 1911 and 2001) :
```php
$this->infos = [];
```
in profit of a more php compatible method :
```php
$this->infos = array();
```
10 years ago
REJack
c7e05f0265
sry thats was my failure
10 years ago
REJack
50ddf8b99c
fix for allow_user and allow_group problem #90
10 years ago
Emre Akay
ecb3ae3a77
Update Aauth.php
10 years ago
Steve
c84fde5591
Add hash in configuration
10 years ago
Emre Akay
6f70228f71
Update Aauth.php
10 years ago
REJack
f42e5468ff
moved $perm_id after the if's conditions for more performance
10 years ago
REJack
f51e1b4ff2
Enchantment on is_allowed() function #83
10 years ago
Emre Akay
0f31aa7ea7
Update Aauth.php
10 years ago
Emre Akay
80977fe877
Update Aauth.php
10 years ago
REJack
581981f02c
fix for #79
10 years ago
Steve
b9174a1cde
Double declaration and assignation of valid flag
10 years ago
Vipin K. Singh
9ead7557c9
Another approach for aauth_error_login_failed
...
keeping the old logic, but using proper lang key "aauth_error_no_user"
10 years ago
Vipin K. Singh
3db113a30a
"aauth_error_login_failed" is not specified
...
aauth_error_login_failed - this language key is not specified
10 years ago
Emre Akay
cfc0295f71
Update Aauth.php
10 years ago
lostlian
da36535250
Fix depreciated valid email
...
Fix depreciated valid email
10 years ago
lostlian
dce098ffcb
Fix for depreciated valid_email function
...
Fix for depreciated valid_email function
10 years ago
lostlian
205380b22e
Set definition as not mandatory parameter for create_group
...
The $definition parameter was a required parameter and it is not like
the documentation.
10 years ago
Emre Akay
a683c62c4e
Update Aauth.php
10 years ago
Emre Akay
bc1c12aa52
Update Aauth.php
10 years ago
Emre Akay
a19e5d81f8
version 2.3.4
10 years ago
REJack
e6aa1f6a05
changed __key__ to __data_key__ in ``user_variables`` & ``system_variables`` (fix for #68 )
10 years ago
REJack
9aca808dd7
possible fix for #66
10 years ago
Emre Akay
f7d44fc0f6
@version update
...
v2.3.3 added
10 years ago
hbinded
eacf9b1539
Fix wrong password message
...
This fixes a non existing error message if all authentication methods fail. Line 352 is calling <pre>aauth_error_login_failed</pre> but that is not in the lang line. This fix tries to match the naming used by the OP i.e. aauth_error_login_failed_xxx where xxx is the error (email/password).
10 years ago
CEkdhl
54f8563dce
Fix issue with messages
10 years ago
REJack
56202a2e7d
there was a mistake for #58 fix
10 years ago
REJack
39c893fcc4
fix for #58 sry for my mistake
10 years ago
Raphael Jackstadt
a11bdbe580
Reserved keyword conflict in MySQL.
10 years ago
Raphael Jackstadt
136ba686bd
fix for #51 'is_allowed() bug '
10 years ago
Raphael Jackstadt
12a76b1659
changed result to row by get_pm
...
added return false if ``aauth_error_no_pm`` appears
10 years ago
Raphael Jackstadt
f0cf74ec51
added return by delete_user()
10 years ago
Raphael Jackstadt
bcbf28b432
changed NULL to FALSE by get_perm_id()
...
i found that error on my unit tests 😄
10 years ago