24 Commits

Author SHA1 Message Date
dgw
469763cd25
Ensure all statusCode/errorCode API values are strings (#3756)
PHPDoc comments about the API response format say that both `statusCode`
and `errorCode` are expected to be strings, but a lot of cases were
returning ints instead. This could cause problems for JSON clients.
2024-05-08 13:42:39 +02:00
JT Smith
1de2b6c53f Typofixes 2022-10-05 00:38:24 +02:00
Bryan Joshua Pedini
98697c3401
Prevent encryption warning when password provided via env (#3040)
Fixes #3038 

* added check for user provided from environment variables
* Add unit tests

Co-authored-by: ྅༻ Ǭɀħ ༄༆ཉ <ozh@ozh.org>
2021-09-01 19:30:19 +02:00
ozh
5d2b954518 Pass parameter to yourls_hash_passwords_now(). Will make tests easier. 2013-09-05 23:34:45 +02:00
ozh
ee8e4a52c6 Further improvements
- offload phpass functions to their own reusable functions
- clean option table after config has been hashed
2013-06-12 21:12:12 +02:00
ozh
06013f047c Fixing and improving stuff on @nicwaller's patch
- works with "login" => "pass" and 'login' => 'pass'
- works with malformed arrays
- works with any password & special chars
- better error reporting
- l10n instead of hardcoded strings
- less var declared
2013-06-12 16:51:49 +02:00
Nic Waller
931c4f306b Gently notify the user when config.php is unwritable 2013-06-05 04:53:34 +00:00
Nic Waller
d7f99fb186 Enable secure hashing by default, unless explicitly disabled. 2013-06-04 04:09:24 +00:00
Nic Waller
bd1d64a1b9 Rewrite config.php with password hashes 2013-06-02 22:13:34 -07:00
Nic Waller
3739a094be More secure password hashes with PHPASS 2013-06-03 01:49:27 +00:00
ozh
445b32a0f5 Handle custom notice upon login 2013-05-07 18:15:12 +02:00
Ozh
e5d93601c2 Better auth filtering. Fixes issue 1229.
git-svn-id: http://yourls.googlecode.com/svn/trunk@795 12232710-3e20-11de-b438-597f59cd7555
2012-11-11 08:32:09 +00:00
ozhozh
e106be25e5 Removed closing PHP tag on include files
git-svn-id: http://yourls.googlecode.com/svn/trunk@753 12232710-3e20-11de-b438-597f59cd7555
2012-08-29 14:57:35 +00:00
ozhozh
f8e1a690d7 Introduce new action when user successfully authed
git-svn-id: http://yourls.googlecode.com/svn/trunk@693 12232710-3e20-11de-b438-597f59cd7555
2011-09-17 09:26:45 +00:00
ozhozh
a01f1ecf1d Full jsonp support. Fixes issue 744.
git-svn-id: http://yourls.googlecode.com/svn/trunk@659 12232710-3e20-11de-b438-597f59cd7555
2011-08-10 07:09:46 +00:00
ozhozh
22cfadc9a6 Prevent full path disclosure in case of direct calls. Fixes issue 646.
git-svn-id: http://yourls.googlecode.com/svn/trunk@571 12232710-3e20-11de-b438-597f59cd7555
2011-01-14 07:24:32 +00:00
ozhozh
52d73db5d1 More filters and more actions
git-svn-id: http://yourls.googlecode.com/svn/trunk@327 12232710-3e20-11de-b438-597f59cd7555
2010-04-20 14:49:37 +00:00
ozhozh
ffc00d9857 Big commit
- html files regrouped in one file with new cleaner template tags
- secure and passwordless authentification method for API calls (fixes issue 167)
- fix bug in upgrader (incorrect version number sanitization)


git-svn-id: http://yourls.googlecode.com/svn/trunk@251 12232710-3e20-11de-b438-597f59cd7555
2009-11-27 22:51:52 +00:00
ozhozh
05c85515a8 - stricter coding to remove some potential warnings
- adds 'message' in all API results
- adds HTTP-like error/status codes in API results. Fixes issue 88.

git-svn-id: http://yourls.googlecode.com/svn/trunk@191 12232710-3e20-11de-b438-597f59cd7555
2009-09-22 19:35:54 +00:00
ozhozh
3078e37718 Load auth functions from start if needed
git-svn-id: http://yourls.googlecode.com/svn/trunk@183 12232710-3e20-11de-b438-597f59cd7555
2009-09-19 10:50:14 +00:00
ozhozh
2b82e4f56e Stricter coding syntax to avoid notices because of undefined indexes
git-svn-id: http://yourls.googlecode.com/svn/trunk@78 12232710-3e20-11de-b438-597f59cd7555
2009-08-22 17:10:41 +00:00
ozhozh
bb901d6785 Improving the auth scheme to make it more solid and less intrusive (no such things as redirecting to another page)
git-svn-id: http://yourls.googlecode.com/svn/trunk@21 12232710-3e20-11de-b438-597f59cd7555
2009-05-21 14:12:54 +00:00
lesterchan
281d3e80be Added basic login feature
git-svn-id: http://yourls.googlecode.com/svn/trunk@13 12232710-3e20-11de-b438-597f59cd7555
2009-05-16 14:23:22 +00:00
ozhozh
2f6b480e8b Initial commit (importing from http://svn.planetozh.com/ozhin)
git-svn-id: http://yourls.googlecode.com/svn/trunk@3 12232710-3e20-11de-b438-597f59cd7555
2009-05-11 20:30:26 +00:00