includes/sessions.php
2009-12-19 Dan AJAX login: Fixed error box failure to destroy upon cancel. Fixes issue 8.
2009-12-19 Dan Logs: Fully integrated an author_uid column. Logs are now linked by user ID instead of just username, so they survive username changes better. Database is changed. Fixes issue 6.
2009-12-18 Dan Comments (AJAX): Now paginated server side. Fixes issue 2.
2009-12-17 Dan ACP: Added lockout management feature
2009-12-12 Dan Re-merge changes from a2hosting dev
2009-12-12 Dan CAPTCHA: Added smart autosubmit for registration page. Usability testing was so-so, may back out later.
2009-12-11 Dan A couple fixes to permission out-of-scope errors.
2009-12-07 Dan Sessions: Made acl_check_deps() verify scope, so that all of an action's dependencies must apply to the namespace of the given action.
2009-12-07 Dan PostgreSQL: Fixed $session->create_user()
2009-11-04 Dan Logins: reorganized data structures a bit. WiP - needs test routine done.
2009-08-22 Dan Sessions: Improved inactive account UX; shuffled around a bit of code so that whitelist checks are shared; fixed a bunch of bugs related to ban code and IPv6 addresses
2009-08-21 Dan User ACP: redirect to Special:Login on own account deletion
2009-08-21 Dan Sessions: whoops, left a debug message in by accident, broke a few redirects
2009-08-21 Dan Fixed some upgrade bugs; added support for choosing one's own date/time formats; rebrand as 1.1.7
2009-08-11 Dan Added ability for authentication plugins to modify session keys (to allow invalidation when their own authentication data is changed) as well as the ability to disable the built-in password change facility
2009-08-03 Dan Sessions: fixed logout() destroying normal session (instead of elevated) if $level = USER_LEVEL_CHPREF. Possible very minor security concern: elevated sessions were not fully destroyed, so if a normal session is opened from the same IP, the elevated one may be reusable for 15 minutes.
2009-07-31 Dan Merged development from Scribus and Charlie
2009-07-17 Dan AJAX Login: Fixed all known issues with lockout (and some unknown ones)
2009-07-29 Dan Fixed logins with usernames containing Unicode characters
2009-07-02 Dan Login and sessions: fixed some improper handling of the config for lockout logic
2009-06-21 Dan AJAX login: fixed improper run of login_submit_early; fixed failure to redirect if main_page_members == current page
2009-05-22 Dan Sped up AJAX de-auth a little; added a little extra info to login_success JSON responses
2009-05-15 Dan Fixed undefined indices for user_extra in various places
2009-05-05 Dan Made some more changes to the way namespaces are handled, for optimization purposes. This is a bit of a structural reorganization: $paths->pages is obsoleted in its entirety; calculating page existence and metadata is now the job of the Namespace_* backend class. There are many things in PageProcessor that should be reorganized, and page actions in general should really be rethought. This is probably the beginning of a long process that will be taking place over the course of the betas.
2009-04-19 Dan Upgrader: UX: Added welcome page, different between Caoineag and Banshee
2009-04-15 Dan New, beautiful, rethought Admin:Home. No, really, you'll like it.
2009-04-11 Dan session: login_process_userdata_json hook should work with more than one installed auth plugin now
2009-04-05 Dan Session: additional metadata passed back from auth plugins is passed through to client for optional further parsing
less more (0) -100 -50 -28 tip