Commit Graph

293 Commits

Author SHA1 Message Date
Evan Prodromou
25a6f240a4 better cookie building
darcs-hash:20080624033223-34904-39ffa0aebcb9d173a7e5dd09870681ebb6e7313d.gz
2008-06-23 23:32:23 -04:00
Evan Prodromou
fcd473a1a3 set user takes a nickname, not a user object
darcs-hash:20080624032818-34904-bf8c5594c42c797820e080250c955645a5a84aa1.gz
2008-06-23 23:28:18 -04:00
Evan Prodromou
25b9085efe change some things around to see if we can get the cookies right
darcs-hash:20080624032408-34904-1437e0359bd81c780e8ab12bdcbd1f9d8c87ef1c.gz
2008-06-23 23:24:08 -04:00
Evan Prodromou
8cc7e4723d force session again and correctly get ID
darcs-hash:20080624031746-34904-3719874e1e0afa201e5c81e267531f0768ddacd9.gz
2008-06-23 23:17:46 -04:00
Evan Prodromou
ae2603ec13 use the correct field for Remember_me
darcs-hash:20080624031057-34904-7a2597a8f56d9d49ad8f126c55058893a922c89f.gz
2008-06-23 23:10:57 -04:00
Evan Prodromou
b26316589c typo in name of common_set_cookie
darcs-hash:20080624030834-34904-6efc827f64aebc23a1d2f3602c562fff69b9a0df.gz
2008-06-23 23:08:34 -04:00
Evan Prodromou
97b016387b bad function call
darcs-hash:20080624030741-34904-e5b601dd4d76b367ae09a61923b062f6a36702f7.gz
2008-06-23 23:07:41 -04:00
Evan Prodromou
91a3598972 switch order for checkbox, instructio
darcs-hash:20080624030034-34904-bdcb6197d2050bc37f9daaf6f849aed5890bce53.gz
2008-06-23 23:00:34 -04:00
Evan Prodromou
be3a44651c implement rememberme functionality
Added a checkbox on login or register to remember the current user. If
the login is successful, this sets a cookie with a random code (saved
in the DB). If they come back, and they aren't logged in "normally",
we check to see if they have a rememberme cookie. If so, we log them
in.

However, they can't change settings -- cookie theft is too prevalent.
So we mark a session as having a "real" (password or OpenID) login, or
not. In settings pages, we check to see if the login is "real", and if
not, we redirect to the login page.

darcs-hash:20080624025234-34904-ad20001bf35bf41fcb63a0c357fd929aacc55fdb.gz
2008-06-23 22:52:34 -04:00
Evan Prodromou
e330eb50d2 more robust handling of new JIDs
darcs-hash:20080624015616-34904-c1ff985257c8c57aacf68439488d628a8b4d2e38.gz
2008-06-23 21:56:16 -04:00
Evan Prodromou
939a3e48d8 syntax error in jabber_format_notice
darcs-hash:20080624015001-34904-5ce1e31677627baa3b4241530cfe2ae0e385c541.gz
2008-06-23 21:50:01 -04:00
Evan Prodromou
a8a2f40696 broadcast notices to jabber
darcs-hash:20080624014241-34904-39ace8e82e50e5f50c5980b5fb3256184a7c9050.gz
2008-06-23 21:42:41 -04:00
Evan Prodromou
d1e55b3777 jabber send and confirmation code
darcs-hash:20080624013203-34904-fe87dc6b3b991e9753512b8b7cc192f7610eb1dc.gz
2008-06-23 21:32:03 -04:00
Evan Prodromou
63dcbe1e6e add jabber library and use it
darcs-hash:20080624001523-34904-8d0c052f12301d86aeb9107149b34f22c94da1c4.gz
2008-06-23 20:15:23 -04:00
Evan Prodromou
ae40dfe842 add imsettings to menu
darcs-hash:20080623223641-34904-2758e19c70026a0c169e99d86481d87b0b4bc79c.gz
2008-06-23 18:36:41 -04:00
Evan Prodromou
7d9372ec50 first pass at a daemon to receive XMPP messages
darcs-hash:20080623022710-84dde-bf3d3e3ce87957b9a91d38c16cf834d07b9933ea.gz
2008-06-22 22:27:10 -04:00
Evan Prodromou
d758c11784 disallow nicknames on a blacklist
darcs-hash:20080622180437-34904-4b6313f6fd8845232031663c5c2df00dff725183.gz
2008-06-22 14:04:37 -04:00
Evan Prodromou
a554e28e37 version number changed
darcs-hash:20080622172354-34904-6d09d8e6cceafb348b88528fe15e907bf1244347.gz
2008-06-22 13:23:54 -04:00
Evan Prodromou
8a28d54f6a use a static rather than a constant for code chars
darcs-hash:20080622163458-34904-1be378ff9765dcfdf491ea8d38ef6c157ebe99ce.gz
2008-06-22 12:34:58 -04:00
Evan Prodromou
8a170ed8fd special function for generating confirmation codes
darcs-hash:20080622163241-34904-199b3654328d78c0b9fe2fa85a3ecc1ab0b1262a.gz
2008-06-22 12:32:41 -04:00
Evan Prodromou
403039510c require the right class
darcs-hash:20080622155454-34904-2598501f3d1788eb1ead9252e5925637e721a525.gz
2008-06-22 11:54:54 -04:00
Evan Prodromou
97115c846e move confirmemail to confirmaddress
Rename the confirmemail to more general confirmaddress so we can use
it for Jabber, SMS, or whatever.

darcs-hash:20080622155250-34904-0cbc2895c01769dfb5e7393e6534355b6f5c2ac3.gz
2008-06-22 11:52:50 -04:00
Evan Prodromou
1fcdecbd2b typo in objstring
darcs-hash:20080622142906-34904-0699374fa0a88a1e4c004deb2a2f96b775fb98e5.gz
2008-06-22 10:29:06 -04:00
Evan Prodromou
313999fc7d reference calling for objstring
darcs-hash:20080622142713-34904-1cee0bb3dbf54ad9ebb27b9c99fe4166dca3f9e2.gz
2008-06-22 10:27:13 -04:00
Evan Prodromou
745a145f0d add better debugging
darcs-hash:20080622140941-34904-2a0eda21f6a374a9d26107a4bc627fc6de2a7063.gz
2008-06-22 10:09:41 -04:00
Evan Prodromou
202f80511a some whitespace
darcs-hash:20080620072125-84dde-777b0a5405ea8ffc2436f711d60ab515d803b987.gz
2008-06-20 03:21:25 -04:00
Evan Prodromou
15a09c5d69 change from using tag uris to http urls for identifiers
Weirdly, I got in an argument with Tim Berners-Lee in #swig about the
tag URIs I was using in FOAF documents. Eventually, I was convinced
that it's a better thing to use HTTP URLs instead. So, now we have
HTTP URLs.

The tricky thing was for users. Since they can change their names, we
can't use their profile URL, since it includes the name. Instead, I
made up a new action, which simply redirects from a user ID to their
current profile URL. This should be sufficiently long-term.

darcs-hash:20080620071700-84dde-c6145243dc45dd2dff621aff421375d05796057e.gz
2008-06-20 03:17:00 -04:00
Evan Prodromou
03dba4270a go back to ensuring session
darcs-hash:20080620070256-84dde-215e2ccf2cc037208837353a3d979d69770301f6.gz
2008-06-20 03:02:56 -04:00
Evan Prodromou
2025169b50 strip some whitespace
darcs-hash:20080620065619-84dde-9c207b2a898ff0a16b45f5f1b28565aaa85f9e65.gz
2008-06-20 02:56:19 -04:00
Evan Prodromou
6f74a091e1 don't keep cached user
darcs-hash:20080620065455-84dde-0c3bd495205e49ba2c5a8e040495339f35f9b215.gz
2008-06-20 02:54:55 -04:00
Evan Prodromou
f72329a13d whitespace and debugging changes
darcs-hash:20080620064824-84dde-1d349cf2add75fbffa7cc763fb5ac8776cce4d03.gz
2008-06-20 02:48:24 -04:00
Evan Prodromou
940b14952a fancy url for confirmation of email
darcs-hash:20080620062847-84dde-e7dd5ea325b1cbbf3cb5e3668851750497242e64.gz
2008-06-20 02:28:47 -04:00
Evan Prodromou
bf0be3ddb7 confirm email addresses
darcs-hash:20080620051536-5ed1f-231e427832dd20c861eb7a6dc1171315e90f455b.gz
2008-06-20 01:15:36 -04:00
Evan Prodromou
6a6ad1f76e skip a DB hit, and better regex
darcs-hash:20080620203449-84dde-b878277e0ad5a5478b7396fbca7e42feb39715f8.gz
2008-06-20 16:34:49 -04:00
matthew.gregg
e547595e48 Fix for bug #00019 (Linkified all @ addresses in a message)
darcs-hash:20080620181136-982e4-ee4bb812b3db0f1d0e0b7961bc9aa6beec74096b.gz
2008-06-20 14:11:36 -04:00
Evan Prodromou
4b2883832e fix pagination for galleries
darcs-hash:20080620195627-84dde-96d31837394eba6357e1134bc5a76b650dea42e6.gz
2008-06-20 15:56:27 -04:00
Evan Prodromou
22423f4210 put instructions into header div
darcs-hash:20080619190357-84dde-f7e6e0741c5fc9c1bf99b4273ff1c0160056cf39.gz
2008-06-19 15:03:57 -04:00
Evan Prodromou
480ca70dc8 try to clear openid url cookie better
darcs-hash:20080619183238-84dde-dbe912a40894ec7414e6d5ea0bc40ec527385436.gz
2008-06-19 14:32:38 -04:00
Evan Prodromou
50c7e4c722 posting from a form takes you back to the same page
darcs-hash:20080619161814-5ed1f-5add55346470e71a53a676d39617062acc0f19bf.gz
2008-06-19 12:18:14 -04:00
Evan Prodromou
d08a2761f2 update version
darcs-hash:20080619150158-5ed1f-e488de5630d8ca131b3ad95c6701bfb3c1e5d569.gz
2008-06-19 11:01:58 -04:00
Evan Prodromou
1e0455b984 update_user didn't return true
darcs-hash:20080619145838-5ed1f-c9c98e0df682a6ad4f1ec3028a985ff49b7c3e12.gz
2008-06-19 10:58:38 -04:00
Evan Prodromou
0d8de282b2 copy args function
darcs-hash:20080619141107-84dde-a5e018fdac3f72eee13b3093fbd871299cda0739.gz
2008-06-19 10:11:07 -04:00
Evan Prodromou
8e8dcd1eeb build backto a little smarter
darcs-hash:20080619140350-84dde-a9b640051f5b35a5f7907d49ab006e62d480b82a.gz
2008-06-19 10:03:50 -04:00
Evan Prodromou
53706623b2 added some debugging stuff
darcs-hash:20080619135944-84dde-948447f0e5e7524c64a5538d145d8c52bf4206a9.gz
2008-06-19 09:59:44 -04:00
Evan Prodromou
0ba9948603 move update_user function to openid.php
darcs-hash:20080619135148-84dde-6caaa7f97d2405bc318bfa818c4ac9cbc31cab33.gz
2008-06-19 09:51:48 -04:00
Evan Prodromou
171b4f72ee immediate mode for openid
darcs-hash:20080619134710-84dde-6086a4ac7bbd72a251fe5ce6fe3156e3270ebd74.gz
2008-06-19 09:47:10 -04:00
Evan Prodromou
7258969cd4 use query method to do some transactions
darcs-hash:20080619033619-84dde-e4fcc00f5d86cb0d11feff5f88f719ea72d3318e.gz
2008-06-18 23:36:19 -04:00
Evan Prodromou
4aedce6864 do some commits
darcs-hash:20080619033212-84dde-2f7227fe16c7015b03121424520ebd74d4b96762.gz
2008-06-18 23:32:12 -04:00
Evan Prodromou
de9cd14a6f default DB driver is DB
darcs-hash:20080619020634-84dde-37a8f87b9f293534ed167e183fa2d08f6714c2ad.gz
2008-06-18 22:06:34 -04:00
Evan Prodromou
1d67f33b3b switch password and id in munge_password
I think this is the less effective way to salt a password, BUT...
I had a big bug in my code! All the code that was calling this
function got the order of the params mixed up. So, to save heartache,
I just reversed the order of the parameters, and reversed how the were
used in the function. It should be functionally the same as before,
but better documented.

darcs-hash:20080618211454-84dde-4772135cc92f2a51faa072e4470da3c628e1510c.gz
2008-06-18 17:14:54 -04:00