1
0
Fork 0
Commit Graph

112 Commits (4d20b7e2f3bbc081259789d060536c673107c8ad)

Author SHA1 Message Date
Anonymous Contributor 4d20b7e2f3 Only check regex and equals when field is provided 2023-08-23 18:16:35 +02:00
Anonymous Contributor d70fd4357a Remove dead link from admin dashboard 2023-08-23 18:16:35 +02:00
Anonymous Contributor 6b88527f05 Properly check request method in login form 2023-08-23 18:16:35 +02:00
Anonymous Contributor 5d0a79f20f Fix password form regexes 2023-08-23 18:16:35 +02:00
Anonymous Contributor 3d0c156cb3 Fix OpenSim API being included too late in users 2023-08-23 18:16:35 +02:00
Anonymous Contributor 841f1707eb Enforce POST and validate input for profile forms 2023-08-23 18:16:35 +02:00
Anonymous Contributor f073fb621d Add validation regex for new identity's name 2023-08-23 18:16:35 +02:00
Anonymous Contributor e192d3fd04 Fix POST request handling in dashboard forms 2023-08-23 18:16:35 +02:00
Anonymous Contributor 1df2182bae Use POST for password changes, validate input 2023-08-23 18:16:35 +02:00
Anonymous Contributor c97c58e30d Fix HTML format 2023-08-23 18:16:35 +02:00
Anonymous Contributor e2795e99b9 Do not use PHP's error control operator 2023-08-23 18:16:35 +02:00
Anonymous Contributor 9954f31721 Fix typos 2023-08-23 18:16:35 +02:00
Anonymous Contributor 57ff06d418 Generate a random string as invite code 2023-08-23 18:16:35 +02:00
Anonymous Contributor 8c7a31d88a Use POST for user management, validate input 2023-08-23 18:16:35 +02:00
Anonymous Contributor 6ca8988128 Use POST for managing identities, validate input 2023-08-23 18:16:35 +02:00
Anonymous Contributor 9d760f7dc3 Use POST for leaving groups, validate input 2023-08-23 18:16:35 +02:00
Anonymous Contributor e6d51a0afb Use POST when removing friends, validate input 2023-08-23 18:16:35 +02:00
Anonymous Contributor 87c21a06eb Fix incorrect regex escaping 2023-08-23 18:16:35 +02:00
Anonymous Contributor 0a6b06fb29 Fix property reference 2023-08-23 18:16:35 +02:00
Anonymous Contributor 2e7abe5bd5 Remove unneeded file 2023-08-23 18:16:35 +02:00
Anonymous Contributor d3f3ca5779 Fix include/template paths 2023-08-23 18:16:35 +02:00
Anonymous Contributor 17fe6651c8 Reflect directory structure changes 2023-08-23 18:16:35 +02:00
Anonymous Contributor f9828aa110 Move templates to template directory 2023-08-23 18:16:35 +02:00
Anonymous Contributor 4415adb6e6 Reflect directory structure changes 2023-08-23 18:16:35 +02:00
Anonymous Contributor da225d7213 Do not include unused discord class 2023-08-23 18:16:35 +02:00
Anonymous Contributor 08f29758c0 Only include and construct OpenSim when needed 2023-08-23 18:16:35 +02:00
Anonymous Contributor c9cad23e2c Only include PHPMailer when needed 2023-08-23 18:16:35 +02:00
Anonymous Contributor 59c9e53f1e Rename PHPMailer directory 2023-08-23 18:16:35 +02:00
Anonymous Contributor 45a33c2b9f Remove unused GoogleAuthenticator class 2023-08-23 18:16:35 +02:00
Anonymous Contributor 11c8fa3471 Change dir structure of class files 2023-08-23 18:16:34 +02:00
Anonymous Contributor d5356a81c1 Do not store salt when generating new password 2023-08-23 18:16:34 +02:00
Anonymous Contributor a699bf2dee Small fixes 2023-08-23 18:16:34 +02:00
Anonymous Contributor 1f82e33c54 Check if CSRF token is available before replacing 2023-08-23 18:16:34 +02:00
Anonymous Contributor d81e48fc12 Redirect after logout 2023-08-23 18:16:34 +02:00
Anonymous Contributor c4ce814333 Use Argon2id as password hashing algorithm 2023-08-23 18:16:34 +02:00
Anonymous Contributor 5559355635 Add values for default avatar option(s) 2023-08-23 18:16:34 +02:00
Anonymous Contributor bd3df89454 Fix various small errors 2023-08-23 18:16:34 +02:00
Anonymous Contributor 3134f55393 Fix RUNTIME array being reset after loading config 2023-08-23 18:16:34 +02:00
Anonymous Contributor 06b7e6dc6e Replace %%CSRF%% variable with CSRF token 2023-08-23 18:16:34 +02:00
Anonymous Contributor ed9f4c8eed Unset pre-session on login and registration 2023-08-23 18:16:34 +02:00
Anonymous Contributor 20ae77b90b Add CSRF field variable to all forms 2023-08-23 18:16:34 +02:00
Anonymous Contributor 3e8d0d3778 Add CSRF token validation for forms 2023-08-23 18:16:34 +02:00
Anonymous Contributor a446cfd9c1 Generate CSRF token on session start 2023-08-23 18:16:34 +02:00
Anonymous Contributor c78e7e2007 Set secure attributes for session cookie 2023-08-23 18:16:34 +02:00
Anonymous Contributor 43ea9eefda Add domain config variable 2023-08-23 18:16:34 +02:00
Anonymous Contributor b6eff53f0c Just set status code, do not hardcode HTTP version 2023-08-23 18:16:34 +02:00
Anonymous Contributor 16ee118c98 Always redirect after making changes 2023-08-23 18:16:34 +02:00
Anonymous Contributor b3db0383a1 Fix input validation checks in identities.php 2023-08-23 18:16:34 +02:00
Anonymous Contributor 7b08766668 Always encode user input before including in HTML 2023-08-23 18:16:34 +02:00
Anonymous Contributor 70962b0c63 Only fetch required rows from database 2023-08-23 18:16:34 +02:00