Kijin Sung
4f6c05f735
Only allow non-logged-in users in procMemberResetPassword
2023-11-29 22:02:04 +09:00
Kijin Sung
6a308386bc
Don't redirect back to auth screen after login
2023-11-29 22:00:12 +09:00
Kijin Sung
64148f0544
More validity checks for reset password
2023-11-29 21:59:28 +09:00
Kijin Sung
a45373c113
Add short route for procMemberAuthAccount
2023-11-29 21:53:01 +09:00
Kijin Sung
ad6d578a00
Clean up unnecessary variables in procMemberAuthAccount
2023-11-29 21:50:19 +09:00
Kijin Sung
8e1ccf7c1b
Separate procMemberResetPassword action from procMemberModifyPassword
2023-11-29 21:45:42 +09:00
Kijin Sung
cd1477f14b
Add more specific message about password change/reset
2023-11-28 23:31:28 +09:00
Kijin Sung
cd79409f9b
Change xe_validator_id for password reset form
2023-11-28 23:26:27 +09:00
Kijin Sung
24c2cecc9b
Misc fixes to password change routine
2023-11-28 23:24:09 +09:00
Kijin Sung
c887d8a84d
Add template for password reset without current_password
2023-11-28 23:16:32 +09:00
Kijin Sung
2ce8b5812b
Customize password reset email for v2 method
2023-11-28 22:40:47 +09:00
Kijin Sung
c4a9da23b0
Set default value for password reset method on new install
2023-11-28 22:20:16 +09:00
Kijin Sung
5b3da67f29
Add option for password reset method
2023-11-28 22:19:00 +09:00
Kijin Sung
b934b8638f
Clean up member_auth_mail table schema, adding auth_type column
2023-11-28 22:08:22 +09:00
Kijin Sung
9a6524d63d
Allow pre-setting upload_target_type for each editor
2023-11-19 21:29:15 +09:00
Kijin Sung
073924efcf
Fix #1346 allow setting filesize limit for member signature
2023-11-06 08:41:35 +09:00
Kijin Sung
990343d906
Set editor_mid automatically based on module_srl
2023-11-03 16:42:56 +09:00
Kijin Sung
e1cfb09652
Set proper module_srl and mid when uploading in member and communication modules
2023-11-02 21:22:43 +09:00
Kijin Sung
8d2b7101f4
Use Cookie class to control session and member-related cookies, too
2023-10-24 23:09:50 +09:00
Kijin Sung
c1ee5abaa1
Return early if hashed password is not provided
2023-10-23 22:10:07 +09:00
dewekk
31949e8a93
닉네임 변경 금지시 회원 등록 불가 문제 수정
2023-10-19 13:04:18 +09:00
Kijin Sung
74be21ff5a
Fix missing clearfix in scrap list
2023-10-08 15:02:55 +09:00
Kijin Sung
0be8f6a441
Fix warnings in PHP 8.x
2023-10-05 15:30:37 +09:00
Kijin Sung
433103bf92
Also apply #2192 fix to document and comment modules; defend null
2023-10-03 14:32:15 +09:00
Kijin Sung
ce3f5e98d2
Fix #2192 count() error when member menu is empty
2023-10-03 14:28:31 +09:00
Kijin Sung
ad1241fbb5
Register member, poll, rss module triggers in module.xml
2023-10-02 22:40:37 +09:00
Kijin Sung
26f923d64b
Fix #2145 rename $is_admin to more descriptive variable name in some controller actions
2023-09-13 11:15:13 +09:00
Kijin Sung
c8638d2548
Change cache-busting query string format from ?YYYYMMDDHHMMSS to ?t=UnixTime
...
- 날짜, 유닉스 타임스탬프, 16진수(CKEditor) 등 여러 가지 포맷을 혼용하고 있던
캐시 방지용 쿼리스트링의 형태를 "유닉스 타임스탬프"로 통일
- 표준 시간대 처리 등 은근히 많은 자원을 소모하는 date() 함수를 사용하지 않음
- t=를 붙여서 정상적인 쿼리스트링 구조가 나오도록 하여, 웹방화벽이나 CDN
등에서 문제를 일으킬 가능성을 줄임
- 덤으로, 길이도 2바이트씩 짧아짐
2023-09-12 23:15:26 +09:00
Kijin Sung
1ec0d74e77
Fix #2062 delete references to themes in skin config
2023-09-12 21:25:06 +09:00
Kijin Sung
7998adec59
Fix warning in PHP 8.x
2023-09-11 13:42:18 +09:00
Kijin Sung
a5ed417480
Fix warnings in PHP 8.x
2023-09-06 21:10:11 +09:00
Kijin Sung
4af7354bf0
Add options to control autologin cookie lifetime and refresh function
2023-08-29 23:42:01 +09:00
Kijin Sung
87300c9944
Resend autologin key periodically to maintain useful lifetime
2023-08-29 23:21:20 +09:00
Kijin Sung
06e736178b
Support sending all _rx_* POST fields as HTTP headers instead
...
하위호환성, 부가기능 등을 위한 _rx_* POST 필드가 점점 많아짐에 따라
모두 헤더로 대체할 수 있도록 지원하고, 앞으로 점점 헤더로 바꿀 예정
CSRF 토큰은 예전부터 X-CSRF-Token 헤더를 지원했음
2023-08-27 23:32:31 +09:00
Kijin Sung
5716891c6c
Remove unnecessary variable declaration
2023-08-05 16:11:29 +09:00
Kijin Sung
3cdd35911e
Also set group_srl in response of procMemberAdminInsertGroup()
2023-08-05 16:09:37 +09:00
Kijin Sung
e37ca7c702
Fix missing encoding of HTML elements in group title and description
2023-08-05 16:08:39 +09:00
Kijin Sung
180be3df95
Wrap insertGroup() and updateGroup() in transactions to prevent inconsistent result when updating is_default
2023-08-05 16:05:25 +09:00
Kijin Sung
c42d446e23
Clean up insertGroup() and updateGroup()
2023-08-05 16:03:27 +09:00
conory
ee9349c734
Add group_srl to result of insertGroup()
2023-08-05 01:37:23 +09:00
Kijin Sung
ae2e8d6674
Update user agent info when autologin
2023-08-04 02:23:13 +09:00
Kijin Sung
555f5b6017
Keep previous autologin security key in database, in case the client STILL hasn't got the new cookie
2023-08-04 02:21:01 +09:00
Kijin Sung
6c309ad3b0
Fix #2055 support rx_ajax in login and signup forms of default member skins
2023-08-03 21:59:15 +09:00
Kijin Sung
42496b0176
Remove unnecessary error code when email confirmation is required
2023-08-03 21:55:04 +09:00
Kijin Sung
de9a5bce35
Redirect always to configured URL after signup, even if email confirmation is enabled. Fix #726 , #949 , #1735
2023-08-03 21:43:05 +09:00
Kijin Sung
eccb54ca42
Allow setting any URL as redirect URL after signup
2023-08-03 21:25:46 +09:00
Kijin Sung
7799aa77a3
Merge pull request #2156 from mariko-f/master
...
일본어 번역 추가 및 수정
2023-07-24 16:59:11 +09:00
Mariko Fukuda
600d725511
Fix Japanese translation
2023-07-22 19:31:00 +09:00
Kijin Sung
4505388e47
Revert some admin actions to popup or new window
2023-07-17 22:20:33 +09:00
Kijin Sung
fcf2ad8c3e
Remove admin power to modify other user's ncenterlite config; close #1925 ; close #2148
2023-07-17 22:08:25 +09:00