You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

46 KiB

Change Log

v2.5.12 (2016/9/21)

v2.5.11 (2016/9/15)

v2.5.10 (2016/7/26)

v2.5.9 (2016/07/22)

v2.5.8 (2016/07/16)

v2.5.7 (2016/06/17)

  • 34d8a89 v2.5.7 (@REJack)
    • fixed login remember
    • removed use_cookies-config_var (unused since reCAPTCHA doesnt use cookie/session)
    • changed logout()
    • changed is_loggedin() removed wrong session checks

v2.5.6 (2016/06/14)

  • fe117dd added abilty to set a config for CI's Email Library (@REJack)

v2.5.5 (2016/06/07)

  • a1bf4fb fixed reCAPTCHA-validation (moved after DDoS check) (@REJack)
  • 91ededf changed version to 2.5.5 (@REJack)
  • 5701a7a some little fixes with ddos_protection & reCAPTCHA (@REJack)
    • fixed timestamp where in reset_login_attempts(), get_login_attempts() & update_login_attempts()
    • fixed login() removed cookie/session-userdata for reCAPTCHA (if reCAPTCHA needed)
    • fixed login() moved update_login_attempts() before test email/name & password
    • fixed generate_recaptcha_field() removed cookie/session check

v2.5.4 (2016/06/02)

  • 66622f6 DDoS Protections fixes in login() (@REJack)
    • removed user get query from DDoS check in
    • fixed DDoS protection to update login_attempts if user not exist too
    • removed user get query from DDoS/reCAPTCHA check
    • fixed DDoS/reCAPTCHA proection to update login_attempts if user not exist too
    • added get_login_attempts() returns login_attempts as INT (used in login())

v2.5.3 (2016/06/02)

v2.5.2 (2016/06/02)

v2.5.1 (2016/06/01)

v2.5.0 (2016/06/01)

  • 1eee170 (@REJack)
    • release prefix changed in library
    • changed copyright in library
    • fixed usernames in Quick Start-Section

v2.5.0-alpha.6 (2016/06/01)

  • 7e92c31 v2.5.0-alpha.5 fixes (@REJack)
    • fixed both SQL files
    • fixed list_pms()
    • fixed delete_pm()
    • added abilty to send system PM's for send_pm() & send_pms()
    • changed name to username in aauth_users table
    • changed name to username in all user related functions
    • changed $name to $username in create_user() & update_user()
    • added user_exist_by_username()
    • changed user_exist_by_name() to an alias of user_exist_by_username()

v2.5.0-alpha.5 (2016/05/30)

  • 847a639 (@REJack)
    • reverted changed count_unread_pms() it counts now only not deleted pm's
    • changed delete_pm() if a receiver deletes a pm it updates date_read
  • 84b61fd changed some explanation infos in aauth's config (@REJack)
  • fe89cdb (@REJack)
    • fixed explanation info text in aauth config
    • added pm_cleanup_max_age-config_var
    • added 2 fields (pm_deleted_sender & pm_deleted_receiver) in pm table
    • changed list_pms() to catch only not deleted pm's
    • changed delete_pm() now it need a user_id to delete a pm (like get_pm())
    • changed delete_pm() sender's can now detete pm's from outbox
    • changed count_unread_pms() it counts now only not deleted pm's.
    • added cleanup_pms() removes pms older than X defined by pm_cleanup_max_age-config_var
  • e6e770a (@REJack)
    • changed send_pm() to send_pms()
    • added send_pm()
  • 1f1afbd enhanced send_pm() (@REJack)
    • changed $receiver_id to $receiver_ids
    • sends multiple pms
    • returns array of receiver user ids with specific error message on failure or TRUE if message successfully sent
  • 10e8446 (@REJack)
    • added date_created field to aauth_users-table in both SQL files
    • changed create_user() to fill date_created on user creation
  • 30239ed (@REJack)
    • added pm_encryption config_var
    • added abilty to encrypt PM's in send_pm() & get_pm()
    • added function user_exist_by_id used in send_pm()
    • added a user_id check in get_pm()
  • 483ed60 enhanced get_pm() (@REJack)
    • added $user_id argument between $pm_id & $set_as_true
    • changed set_as_true to set read date only if user_id is equal to receiver's id

v2.5.0-alpha.4 (2016/05/28)

  • 46308eb fixed missing comma in sql files (@REJack)
    • SQL files Tested with MySQL v5.7.11

v2.5.0-alpha.3 (2016/05/25)

v2.5.0-alpha.2 (2016/05/25)

  • 852d4f9 Create aauth_lang.php (@terrylinooo)
    • added Traditional Chinese translation, used by Taiwan, Hong Kong
  • 52412ff Create aauth_lang.php (@terrylinooo)
    • added Simplified Chinese translation, used by China, Singapore and Malaysia

v2.5.0-alpha (2016/05/24)

  • 36da952 fixed SQL files (now its compatible with MySQL >= 5.7.3) (@REJack)
  • 34f66af #137 Non-user based DDoS check (@REJack)
    • added a new table for login_attempts (in both SQL files)
    • added 2 config vars login_attempts(db) & remove_successful_attempts
    • changed function reset_login_attempts() (removed user_id and changed where to ip_address and timestamp from user_id only)
    • changed function update_login_attempts() (removed user_id and changed where to ip_address and timestamp from email/user_id only)
    • changed function login() (removed arguments from changed functions, added abilty to enable/disable removing login attempt after successful login)
  • 61f9907 (@REJack)
    • removed aauth_system_variables from SQL files
    • removed config var system_variables
  • 51d03fa added config var info for totp_two_step_login_redirect (@REJack)
  • 37a731d totp enhancements (@REJack)
    • added 2 config vars (totp_two_step_login_active, totp_two_step_login_redirect)
    • changed login() to set session data if totp is required and two_step_login is active and skip default
    • fixed control() to check if totp verification is required, if required then it redirects to totp_two_step_login_redirect
    • fixed control() to check if is_loggedin not with totp verification is required
    • changed is_allowed() to check if totp verification is required, if required then it redirects to totp_two_step_login_redirect
    • added 2 functions verify_user_totp_code($totp_code, $user_id = FALSE) & is_totp_required()
  • bf04633 some little fixes (@REJack)
    • is_loggedin() 2 empty lines removed
    • control() it hasn't checked if no perm_par was given
  • bfdc6ea removed System Variables (@REJack)
  • 569fc87 fixed config var password_hash_algo string to constant and added info link (@REJack)
  • 906ccf0 changed config var name from max_login_attempt_per_minutes to max_login_attempt_time_period (@REJack)
  • fd6e3f3 removed config var update_last_login_attempt (@REJack)
  • f33affc changed get_user_groups() (public groups now visible if checked on guests) (@REJack)
  • bd33c95 BCrypt/PHP's password_hash support (@REJack)
  • e4aa1f5 tests update_login_attempts done (@REJack)
  • 4c3aec4 fixed strtotime() parameter (@REJack)
  • e205dc2 removed user_id for reset_/remind_password function (#124) (@REJack)
  • 30a576d fixed fatal flaw on update_login_attempts (#133) (@REJack)
  • 952f3eb changed version to 2.5.0-alpha (@REJack)

v2.4.7 (2016/05/13)

v2.4.6 (2015/12/02)

v2.4.5 (2015/10/28)

v2.4.4 (2015/10/27)

v2.4.3 (2015/10/27)

v2.4.2 (2015/10/26)

v2.4.1 (2015/10/12)

  • da36535 Fix depreciated valid email
  • dce098f Fix for depreciated valid_email function
  • 205380b Set definition as not mandatory parameter for create_group

v2.4.0 (2015/10/07)

v2.3.4 (2015/10/07)

v2.3.3 (2015/09/28)

v2.3.1 (2015/09/21)

v2.3.0 (2015/07/28)

v2.2.0 (2015/05/10)

v2.1.0 (2014/12/23)

v2.0.5 (2014/09/26)

  • 48059ab Changed collation from utf8_turkish_ci to global standard utf8_general_ci
  • 44cefd4 Fixes

v2.0.4 (2014/08/16)

v2.0.3 (2014/08/06)

v2.0.2 (2014/08/05)

v2.0.1 (2014/07/22)

v2.0-beta (2014/07/04)

v1.0 (2014/06/11)