Commit graph

9 commits

Author SHA1 Message Date
Stefan Bühler
e8f071f67c Rework session handling; add CSRF tokens and autologin 2014-10-06 21:40:11 +02:00
Stefan Bühler
54fb62b471 Rewrite/Refactoring
- add a lot of permission checks:
  zone edits were completely unchecked (after login); only list and creation were
  protected.
- reduce regular expression usage
- don't use user provided names/ids/urls for requests; instead use them
  to search for the zone in the list of all zones.
- rename 'label' to 'name' in template records ('name' is used in all
  other places)
- make 'localhost' default $apisid
- add 'soa_edit' default
- remove gen_pw/pwgen caller; use openssl instead for random password
- fix a lot of bugs (editrecord, TXT quoting, name checking, ...)
- improve record sorting
2014-10-05 13:08:23 +02:00
Mark Schouten
79f1809b16 Older php doesn't understand [] (we knew this already) 2014-07-11 15:21:31 +02:00
Mark Schouten
1ce641d1d1 Allow users to be returned as a Optionslist 2014-07-10 16:17:11 +02:00
Mark Schouten
00d94bbf74 We return something else now 2014-07-04 11:55:37 +02:00
Mark Schouten
aa37139301 Fix some inputvalidation and functionnames 2014-06-23 09:55:52 +02:00
Mark Schouten
59183064da Fix the username validator 2014-06-12 16:14:53 +02:00
Mark Schouten
b457495426 Add validation and 'htmlspecialchars' to keep Teun from breaking stuff 2014-05-26 12:04:24 +02:00
Henjo Hoeksma
296e83fb88 Refactoring 2014-05-23 11:48:19 +02:00
Renamed from htdocs/users.php (Browse further)