Subversion Repositories oidplus

Rev

Go to most recent revision | Show changed files | Directory listing | RSS feed

Filtering Options

Rev Age Author Path Log message Diff
619 2021-06-04 15:52:28 daniel-marschall /trunk/ Added: Tool to find out best bcrypt cost (<1s)  
617 2021-06-02 00:03:52 daniel-marschall /trunk/ Added new high-security feature RA Password Pepper (use with extreme caution! Existing passwords will become invalid)
RA password generation: BCrypt "cost" parameter can now be configured.
 
564 2021-05-10 20:46:59 daniel-marschall /trunk/ Proper fix for the CSRF Token issue with OAuth (BUG#0000213)  
511 2021-01-18 01:13:07 daniel-marschall /trunk/ Security: Added "INSIDE_OIDPLUS" constant to include files to avoid generating error messages when an include file is accessed directly
Updated copyright notices to 2021
 
473 2020-11-19 11:16:11 daniel-marschall /trunk/ Design plugins now have a "css" key in the manifest.xml, which needs to be set!  
461 2020-11-04 22:30:07 daniel-marschall /trunk/  
459 2020-11-04 14:32:51 daniel-marschall /trunk/ New class: OIDplusRAAuthInfo  
458 2020-10-27 15:54:15 daniel-marschall /trunk/  
457 2020-10-27 15:32:00 daniel-marschall /trunk/ Various smaller security tweaks  
456 2020-10-27 01:23:03 daniel-marschall /trunk/ Security: Admin passwords can now be BCrypt instead of SHA3-512
Security: BCrypt is now the default auth method for newly created RAs
 
453 2020-10-26 14:21:59 daniel-marschall /trunk/ Security: Auth-Plugins now also generate hashes.
Security: New setting to select default RA hashing algorithm.
Security: New auth plugin A3 "BCrypt".
 
400 2020-09-20 17:11:53 daniel-marschall /trunk/ BUGFIX: RAs cannot login and RAs cannot be created (BUG#0000208/1)
BUGFIX: Infinite loop in e-mail-sending (BUG#0000208/2)
 
392 2020-09-15 19:59:14 daniel-marschall /trunk/ Removed md5() and sha1() from security-relevant areas [although the security impact was VERY small]  
391 2020-09-14 17:23:30 daniel-marschall /trunk/  
389 2020-09-14 17:06:17 daniel-marschall /trunk/ XML Schema for plugin manifests  
386 2020-09-12 22:00:01 daniel-marschall /trunk/ Fixed various smaller things detected by warnings/errors of "Eclipse for PHP"  
308 2020-05-15 00:22:05 daniel-marschall /trunk/ Plugin manifests are now XML instead of INI files; plugins can now have an optional OID  
279 2020-04-25 11:02:51 daniel-marschall /trunk/ Slighly altered plugin architecture again: Manifest now only contains the plugin main class (the other classes are loaded using autoloading) and the page priority attribute was removed.  
277 2020-04-25 02:27:11 daniel-marschall /trunk/ Introducing new plugin architecture (manifest.ini)  
224 2020-03-19 20:32:14 daniel-marschall /trunk/ OIDplus now automatically registeres the plugins. The plugins do not need to register themselves through the singleton.  

Show All