Commit graph

1891 commits

Author SHA1 Message Date
Kijin Sung
4f6c05f735 Only allow non-logged-in users in procMemberResetPassword 2023-11-29 22:02:04 +09:00
Kijin Sung
6a308386bc Don't redirect back to auth screen after login 2023-11-29 22:00:12 +09:00
Kijin Sung
64148f0544 More validity checks for reset password 2023-11-29 21:59:28 +09:00
Kijin Sung
a45373c113 Add short route for procMemberAuthAccount 2023-11-29 21:53:01 +09:00
Kijin Sung
ad6d578a00 Clean up unnecessary variables in procMemberAuthAccount 2023-11-29 21:50:19 +09:00
Kijin Sung
8e1ccf7c1b Separate procMemberResetPassword action from procMemberModifyPassword 2023-11-29 21:45:42 +09:00
Kijin Sung
cd1477f14b Add more specific message about password change/reset 2023-11-28 23:31:28 +09:00
Kijin Sung
cd79409f9b Change xe_validator_id for password reset form 2023-11-28 23:26:27 +09:00
Kijin Sung
24c2cecc9b Misc fixes to password change routine 2023-11-28 23:24:09 +09:00
Kijin Sung
c887d8a84d Add template for password reset without current_password 2023-11-28 23:16:32 +09:00
Kijin Sung
2ce8b5812b Customize password reset email for v2 method 2023-11-28 22:40:47 +09:00
Kijin Sung
c4a9da23b0 Set default value for password reset method on new install 2023-11-28 22:20:16 +09:00
Kijin Sung
5b3da67f29 Add option for password reset method 2023-11-28 22:19:00 +09:00
Kijin Sung
b934b8638f Clean up member_auth_mail table schema, adding auth_type column 2023-11-28 22:08:22 +09:00
Kijin Sung
9a6524d63d Allow pre-setting upload_target_type for each editor 2023-11-19 21:29:15 +09:00
Kijin Sung
073924efcf Fix #1346 allow setting filesize limit for member signature 2023-11-06 08:41:35 +09:00
Kijin Sung
990343d906 Set editor_mid automatically based on module_srl 2023-11-03 16:42:56 +09:00
Kijin Sung
e1cfb09652 Set proper module_srl and mid when uploading in member and communication modules 2023-11-02 21:22:43 +09:00
Kijin Sung
8d2b7101f4 Use Cookie class to control session and member-related cookies, too 2023-10-24 23:09:50 +09:00
Kijin Sung
c1ee5abaa1 Return early if hashed password is not provided 2023-10-23 22:10:07 +09:00
dewekk
31949e8a93
닉네임 변경 금지시 회원 등록 불가 문제 수정 2023-10-19 13:04:18 +09:00
Kijin Sung
74be21ff5a Fix missing clearfix in scrap list 2023-10-08 15:02:55 +09:00
Kijin Sung
0be8f6a441 Fix warnings in PHP 8.x 2023-10-05 15:30:37 +09:00
Kijin Sung
433103bf92 Also apply #2192 fix to document and comment modules; defend null 2023-10-03 14:32:15 +09:00
Kijin Sung
ce3f5e98d2 Fix #2192 count() error when member menu is empty 2023-10-03 14:28:31 +09:00
Kijin Sung
ad1241fbb5 Register member, poll, rss module triggers in module.xml 2023-10-02 22:40:37 +09:00
Kijin Sung
26f923d64b Fix #2145 rename $is_admin to more descriptive variable name in some controller actions 2023-09-13 11:15:13 +09:00
Kijin Sung
c8638d2548 Change cache-busting query string format from ?YYYYMMDDHHMMSS to ?t=UnixTime
- 날짜, 유닉스 타임스탬프, 16진수(CKEditor) 등 여러 가지 포맷을 혼용하고 있던
  캐시 방지용 쿼리스트링의 형태를 "유닉스 타임스탬프"로 통일
- 표준 시간대 처리 등 은근히 많은 자원을 소모하는 date() 함수를 사용하지 않음
- t=를 붙여서 정상적인 쿼리스트링 구조가 나오도록 하여, 웹방화벽이나 CDN
  등에서 문제를 일으킬 가능성을 줄임
- 덤으로, 길이도 2바이트씩 짧아짐
2023-09-12 23:15:26 +09:00
Kijin Sung
1ec0d74e77 Fix #2062 delete references to themes in skin config 2023-09-12 21:25:06 +09:00
Kijin Sung
7998adec59 Fix warning in PHP 8.x 2023-09-11 13:42:18 +09:00
Kijin Sung
a5ed417480 Fix warnings in PHP 8.x 2023-09-06 21:10:11 +09:00
Kijin Sung
4af7354bf0 Add options to control autologin cookie lifetime and refresh function 2023-08-29 23:42:01 +09:00
Kijin Sung
87300c9944 Resend autologin key periodically to maintain useful lifetime 2023-08-29 23:21:20 +09:00
Kijin Sung
06e736178b Support sending all _rx_* POST fields as HTTP headers instead
하위호환성, 부가기능 등을 위한 _rx_* POST 필드가 점점 많아짐에 따라
모두 헤더로 대체할 수 있도록 지원하고, 앞으로 점점 헤더로 바꿀 예정

CSRF 토큰은 예전부터 X-CSRF-Token 헤더를 지원했음
2023-08-27 23:32:31 +09:00
Kijin Sung
5716891c6c Remove unnecessary variable declaration 2023-08-05 16:11:29 +09:00
Kijin Sung
3cdd35911e Also set group_srl in response of procMemberAdminInsertGroup() 2023-08-05 16:09:37 +09:00
Kijin Sung
e37ca7c702 Fix missing encoding of HTML elements in group title and description 2023-08-05 16:08:39 +09:00
Kijin Sung
180be3df95 Wrap insertGroup() and updateGroup() in transactions to prevent inconsistent result when updating is_default 2023-08-05 16:05:25 +09:00
Kijin Sung
c42d446e23 Clean up insertGroup() and updateGroup() 2023-08-05 16:03:27 +09:00
conory
ee9349c734 Add group_srl to result of insertGroup() 2023-08-05 01:37:23 +09:00
Kijin Sung
ae2e8d6674 Update user agent info when autologin 2023-08-04 02:23:13 +09:00
Kijin Sung
555f5b6017 Keep previous autologin security key in database, in case the client STILL hasn't got the new cookie 2023-08-04 02:21:01 +09:00
Kijin Sung
6c309ad3b0 Fix #2055 support rx_ajax in login and signup forms of default member skins 2023-08-03 21:59:15 +09:00
Kijin Sung
42496b0176 Remove unnecessary error code when email confirmation is required 2023-08-03 21:55:04 +09:00
Kijin Sung
de9a5bce35 Redirect always to configured URL after signup, even if email confirmation is enabled. Fix #726, #949, #1735 2023-08-03 21:43:05 +09:00
Kijin Sung
eccb54ca42 Allow setting any URL as redirect URL after signup 2023-08-03 21:25:46 +09:00
Kijin Sung
7799aa77a3
Merge pull request #2156 from mariko-f/master
일본어 번역 추가 및 수정
2023-07-24 16:59:11 +09:00
Mariko Fukuda
600d725511 Fix Japanese translation 2023-07-22 19:31:00 +09:00
Kijin Sung
4505388e47 Revert some admin actions to popup or new window 2023-07-17 22:20:33 +09:00
Kijin Sung
fcf2ad8c3e Remove admin power to modify other user's ncenterlite config; close #1925; close #2148 2023-07-17 22:08:25 +09:00