Commit graph

1700 commits

Author SHA1 Message Date
Kijin Sung
f8aa934935 Change getLoginStatus method to POST (enable CSRF check, etc.) 2022-08-05 10:38:55 +09:00
Kijin Sung
0cc1246898 Move login status calculation to its own method and add API in member module 2022-08-05 10:21:14 +09:00
Kijin Sung
05c67b2a8b Simplify login error messages #1957
- 에러메시지 더 단순하게 줄임
2022-07-03 01:50:40 +09:00
Kijin Sung
53cdc17c7f Obfuscate some login error messages #1957
- 로그인 실패시 아이디나 메일주소가 틀렸는지, 비번이 틀렸는지 구분하여 알려주지 않도록 변경
- 아이디/비번찾기시에는 불필요하게 세분화된 일부분만 정리하고 완전히 막지 않음
2022-07-03 01:43:15 +09:00
Kijin Sung
a5f056284c Fix #1936 don't convert date-only timestamps in extra vars and member birthday column 2022-07-03 00:45:35 +09:00
Kijin Sung
96620b6a8c Fix #1935 apply editor default config in member signature editor 2022-07-03 00:24:06 +09:00
Kijin Sung
73f2034403 Fix device registration error when OS version is not detected (null) 2022-06-14 13:21:20 +09:00
Kijin Sung
06565b05cd Allow non-members to access dispMemberLogout #1953 2022-06-09 21:50:10 +09:00
Kijin Sung
4f4aee6647 Redirect away from dispMemberLogout if not logged in 2022-06-09 21:49:47 +09:00
dewekk
d1b0dbff9c
로그인 무한 리다이렉트 문제 수정
referer url이 dispMemberLoginForm으로 지정되면 $this->setRedirectUrl($referer_url);에 의해 로그인시 무한 리다이렉트되는 문제를 수정합니다.
2022-05-30 11:28:10 +09:00
Kijin Sung
d0cdcb5d2a Fix PHP warning about undefined properties 2022-05-19 15:55:38 +09:00
dewekk
cc010c6a5b
63b72f0 보완
필수 체크를 제거합니다.
2022-04-25 08:52:46 +09:00
dewekk
63b72f06c8
아이디 룰셋 추가 2022-04-19 13:59:44 +09:00
conory
274a3d9a11 Improve 0984b751e8 and Fix returning nothing on first run 2022-04-16 17:52:35 +09:00
conory
0984b751e8 Apply cache even when the member does not exist
탈퇴한 회원을 계속 DB에서 찾는 문제 수정
2022-04-16 14:37:18 +09:00
Kijin Sung
5ab25a9712 Fix #1913 set empty string for refused_reason and limited_reason if no value is submitted 2022-03-28 16:58:00 +09:00
conory
3c00ff1cc5 Fix wrong return value
$output->toBool()로 체크하는 서드파티에서 오류가 발생합니다. 항상 BaseObject()로 반환해야 합니다.
2022-03-24 15:02:38 +09:00
Kijin Sung
46136660a8 Disable password algorithms that are too large for the password field 2022-03-22 00:15:46 +09:00
Kijin Sung
7b46deb973 Fix #1886 clean up incorrect use of getMemberInfo* methods 2022-03-14 01:40:43 +09:00
Kijin Sung
7a20ab3692 Fix #1989 remove old limit of 60 chars for temporary password hash 2022-03-11 01:48:19 +09:00
dewekk
072fd82dd0
Fix typo
그룹 리스트가  캐시되지 않는 문제 수정
2022-03-10 17:02:19 +09:00
Kijin Sung
f3ac70d3b2 Fix #1874 standalone attribute for device actions 2022-02-08 22:08:23 +09:00
Kijin Sung
fc14a04173 Clean up getMemberMenu() method 2022-02-07 21:43:35 +09:00
Kijin Sung
9aea72b1c3 Separate CAPTCHA actions #1815 2022-02-07 21:04:09 +09:00
Kijin Sung
23f7568e74 Separate device-related actions to own class; add procMemberUnregisterDevice 2022-02-06 22:29:14 +09:00
Kijin Sung
5ed1b43786 Fix #1847 support logging in with 'email_address' or 'phone_number' input name if they are allowed as identifier 2022-02-04 22:24:03 +09:00
Kijin Sung
e5306e20c7 Fix #1858 delete auth mail if denied by administrator 2022-02-04 22:14:44 +09:00
Kijin Sung
8d67f80283 Make profile image force aspect ratio setting confugurable 2022-01-28 16:14:44 +09:00
Kijin Sung
6e0b4ab688 Fix login page always redirecting to main or list page if already logged in 2022-01-28 15:31:06 +09:00
Kijin Sung
8310f82a1a Fix #1856 missing IDN support in URL validator 2022-01-27 21:37:19 +09:00
Kijin Sung
9ff101f097
Merge pull request #1842 from shydah/fix/member-default-mskin
default 모바일 스킨에서도 로그인 폼에 referer_url을 활용하도록 개선
2021-12-31 15:00:24 +09:00
Kijin Sung
8d1dd026ef Fix #1660 #1826 limit SMS auth attempts from same IP 2021-12-31 14:56:30 +09:00
Kijin Sung
ff2e04fb8f Store auth SMS in DB #1826 #1660 2021-12-31 14:36:41 +09:00
Kijin Sung
5f8f7acced Prevent sending SMS to phone number that has already been registered #1826
+ Clean up some error messages
2021-12-31 14:25:44 +09:00
shydah
7c2571ea9f Add referer_url to default mobile skin of member module 2021-12-31 01:48:04 +09:00
Kijin Sung
d8ae1d8d1a Fix #1809 remove unnecessary error code after scrap 2021-12-31 01:44:06 +09:00
Kijin Sung
7e9e33765c Fix #1813 show textarea if HTML is not allowed in signature 2021-12-31 01:27:42 +09:00
Kijin Sung
bfc1c5d11a Fix missing file upload in signature editor when modifying member info 2021-12-31 01:24:00 +09:00
Kijin Sung
42442aeef7 헤더 또는 쿠키로 device token과 device key를 주고받을 수 있도록 허용하고, 중복 코드 정리 (#1325 보완)
요청 헤더: X-Device-Token
응답 헤더: X-Device-Key (포맷: member_srl:device_key)

요청 쿠키: device_token
응답 쿠키: device_key (포맷: member_srl:device_key) (유효기간 1분)
2021-11-26 01:52:15 +09:00
Kijin Sung
aa9af45207 회원가입 및 로그인시 device token과 device key를 헤더로 주고받을 수 있도록 지원 (#1325 보완)
요청 헤더: X-Device-Token
응답 헤더: X-Registered-Member-Srl, X-Registered-Device-Key
2021-11-24 16:22:30 +09:00
Kijin Sung
3ece3ed7a4 다른 액션에서 procMemberRegisterDevice를 호출한 경우에는 response method를 건드리지 않도록 변경 2021-11-24 15:35:24 +09:00
Kijin Sung
4a8464ad72 Fix #1798 TypeError when extra var stored as array is treated as string 2021-10-08 01:38:15 +09:00
Kijin Sung
cb16e7a293 Don't update admin extra vars in procMemberModifyInfo 2021-10-08 01:35:21 +09:00
Kijin Sung
605d8da7ee Fix #1797 also apply #1713 patch to procMemberModifyInfo 2021-10-08 01:28:59 +09:00
Kijin Sung
dd1e61ddc4 19012c85 보완 2021-10-06 16:10:12 +09:00
Kijin Sung
19012c85d2 Fix error reading profile image when current directory is not RX_BASEDIR 2021-10-06 15:53:41 +09:00
Kijin Sung
a743ee9427 Update member cache when profile image, signature, etc. are updated independently 2021-09-27 16:47:19 +09:00
Kijin Sung
f3918d792a Add rx_ev_* classes to all extra var input fields
서드파티 자료에서 확장변수 입력란 디자인을 커스터마이징하기 쉽도록
각 확장변수의 타입에 맞는 rx_ev_* 클래스를 추가해 주도록 함.
예: 한줄 입력란은 rx_ev_text, 체크박스 컨테이너(ul/div)는 rx_ev_checkbox 등
2021-09-13 01:32:55 +09:00
Kijin Sung
a02d5cb554 Also remove duplicate agreement in member update method #1788 2021-09-11 00:26:12 +09:00
Kijin Sung
891b57c770 Remove duplicate agreement in member_config #1788
- $config->agreements와 중복되는 $config->agreement는 삭제
- 회원가입폼(dispMemberSignUpForm)에 한하여, 첫 번째 약관의 내용을
  $member_config->agreement에 넣어주어 오래된 스킨과의 호환성을 유지함
2021-09-11 00:23:57 +09:00