Fixed cookie behaviour when behind a reverse proxy with a different hostname. See PHPCRED-28
[PHPCredLocker.git] / lib / auth.class.php
Ben Tasker Fixed cookie behaviour when behind a reverse prox…
Ben Tasker Increased the stringency of the sesskey check. Se…
Ben Tasker Updated file headers for PHPCRED-10
bentasker Improved password storage schema
bentasker Implemented BCrypt support
bentasker Portal adds ID to session for use in Logging. See…
bentasker CustomerPortal handling added to menus. See #32
bentasker Customer can now log into the Portal, but can't s…
bentasker Begun implementing framework for Customer login p…
Ben Tasker Implementing changes for #26
Ben Tasker Fixed redirect issue on session expiration
Ben Tasker Improving key generation - can now generate up to…
bentasker General code tidy. Improved keylength for TLS - S…
bentasker Moved key generation to a single, cached, file to…
bentasker Added form token to all user views and moved toke…
bentasker Added unique form token to authentication. Untrac…
bentasker Enforced IP Banning - See #10
bentasker Few minor fixes including Installers plugin obfus…
Ben Tasker Implemented (but not yet enforced) IP banning for…
Ben Tasker Implementing session deletion on log-out
Ben Tasker Minor JS Bug fixes
Ben Tasker Minor bug fixes and setting up test database
bentasker Adding an additional required factor to authentic…
bentasker Finished preventing direct access to scripts
Ben Tasker Mobile Auth Fix
Ben Tasker Implemented password changes
bentasker Implementing User Management
bentasker first full commit