1. 13 Mar, 2016 1 commit
    • Lukas Fleischer's avatar
      Store last login address as plain text · 32c8d0c3
      Lukas Fleischer authored
      
      
      Directly store the information contained in $_SERVER['REMOTE_ADDR']
      instead of using ip2long() which does not support IPv6 addresses. Note
      that the LastLoginIPAddress field is designed to be used by the
      administrator on rare occasions only (e.g. to fight spam) and is not
      displayed anywhere.
      
      Fixes FS#48557.
      
      Signed-off-by: Lukas Fleischer's avatarLukas Fleischer <lfleischer@archlinux.org>
      32c8d0c3
  2. 07 Feb, 2016 3 commits
  3. 13 Dec, 2015 1 commit
  4. 14 Nov, 2015 1 commit
  5. 20 Sep, 2015 1 commit
  6. 11 Sep, 2015 2 commits
  7. 08 Aug, 2015 3 commits
  8. 29 Jun, 2015 1 commit
  9. 27 Jun, 2015 3 commits
  10. 31 May, 2015 1 commit
  11. 27 Dec, 2014 1 commit
  12. 13 Dec, 2014 1 commit
  13. 21 Nov, 2014 1 commit
  14. 24 Oct, 2014 1 commit
  15. 10 Oct, 2014 1 commit
  16. 05 Aug, 2014 1 commit
    • Lukas Fleischer's avatar
      Add PCRE_DOLLAR_ENDONLY to preg_match() · 237a4570
      Lukas Fleischer authored
      
      
      When using preg_match() to check for a match that starts at the
      beginning of the string and ends at the last character of the string, we
      do not want to allow an additional newline character to sneak in.
      Amongst other potential loopholes, adding the PCRE_DOLLAR_ENDONLY
      modifier prevents users from registering with user names that end with a
      newline character.
      
      Signed-off-by: default avatarLukas Fleischer <archlinux@cryptocrack.de>
      237a4570
  17. 02 Aug, 2014 1 commit
  18. 29 Jul, 2014 1 commit
  19. 25 Jul, 2014 2 commits
  20. 15 Jul, 2014 3 commits
  21. 05 Jun, 2014 3 commits
  22. 30 May, 2014 1 commit
    • Lukas Fleischer's avatar
      Accept upper case letters in valid_username() · e0186706
      Lukas Fleischer authored
      In commit 0722f46c
      
       (Simplify valid_user() and valid_username(),
      2014-02-06), the conversion to lower case letters was unintentionally
      removed and in consequence, names with upper case letters have been
      rejected since then.
      
      Instead of reintroducing the conversion, add the "i" modifier to the
      regular expression validating the name to do case-insensitive pattern
      matching.
      
      Signed-off-by: default avatarLukas Fleischer <archlinux@cryptocrack.de>
      e0186706
  23. 22 May, 2014 3 commits
  24. 10 Feb, 2014 2 commits
  25. 09 Feb, 2014 1 commit