| Sun, 07 Oct 2007 22:06:15 -0400 |
Dan |
Fixed the security hole (really, I'm a moron - used $failed > $threshold instead of $failed >= $threashold) and patched up some...erm... math issues
|
file |
diff |
annotate
|
| Sun, 07 Oct 2007 21:28:36 -0400 |
Dan |
[F] Added support for account lockouts. User is locked out or required to complete a CAPTCHA after specified threshold for specified period.
|
file |
diff |
annotate
|
| Sun, 07 Oct 2007 17:22:25 -0400 |
Dan |
More minor Ux improvements
|
file |
diff |
annotate
|
| Sun, 07 Oct 2007 16:56:14 -0400 |
Dan |
AJAX login box is now used in userprefs panel; Spry shake effect and general UX on auth fail is smoother now; added ajaxLoginNavTo() JS function
|
file |
diff |
annotate
|
| Sun, 07 Oct 2007 08:39:40 -0400 |
Dan |
SECURITY: remove debug message in session manager; implemented alternate MediaWiki syntax for template embedding; added Adobe Spry for "shake" effect on unsuccessful login
|
file |
diff |
annotate
|
| Mon, 24 Sep 2007 21:29:19 -0400 |
Dan |
Improved response time for username autofill; fix JS login box in Safari (bug surfaced only after 1.0.1)
|
file |
diff |
annotate
|
| Sun, 23 Sep 2007 18:42:16 -0400 |
Dan |
Revamped the administrator's user CP, big time. The admin module now uses a smart form and enables all profile fields, including users_extra, to be changed. Passwords are encrypted when sent. The whole CP has been split off into a different file to accomodate the large amount of code.
|
file |
diff |
annotate
|
| Tue, 18 Sep 2007 16:29:26 -0400 |
Dan |
Enano should now fully support UTF-8 usernames; newly registered users are now granted automatic edit access to their user pages (admins can still use protection on the page)
|
file |
diff |
annotate
|
| Tue, 18 Sep 2007 00:30:43 -0400 |
Dan |
Fully implemented password complexity enforcement; added encryption for passwords on registration form; some baby steps taken towards supporting international usernames - this is not working very well, we might need a hackish fix; TODO: implement password strength meter into installer UI and get international usernames 100% working
|
file |
diff |
annotate
|
| Sat, 08 Sep 2007 14:02:19 -0400 |
Dan |
Fixed some rather major bugs in the registration system, this will need a release followup
|
file |
diff |
annotate
|
| Thu, 09 Aug 2007 12:26:16 -0400 |
Dan |
AJAX comments are now paginated; plugin manager can now show system plugins; typo in installer corrected; links in oxygen/stpatty/admin footers changed to "About Enano" page; 1.0.1 release candidate
|
file |
diff |
annotate
|
| Wed, 25 Jul 2007 18:06:34 -0400 |
Dan |
Various bugfixes and cleanups, too much to remember... see the diffs for what got changed :-)
|
file |
diff |
annotate
|
| Tue, 10 Jul 2007 11:59:02 -0400 |
Dan |
Changed administration login request to use the AJAX login form; made high-level authentication more apparent in the AJAX box; recompiled Oxygen Mint
|
file |
diff |
annotate
|
| Tue, 03 Jul 2007 14:07:35 -0400 |
Dan |
Fixed a lot of bugs with Safari and Konqueror; improved Opera compatibility
|
file |
diff |
annotate
|