valvin
/
ttrss
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
8,753 Commits 1 Branch 18 Tags 122 MiB
Commit Graph

44 Commits

Author SHA1 Message Date
Andrew Dolgov 5feed36a3c do not use separate _ssl cookie for secure sessions 2018-10-15 15:48:37 +03:00
Andrew Dolgov 65e98f4086 force regenerate session id on successful login, remove previous blank SID check 2018-10-15 15:47:50 +03:00
Andrew Dolgov 74736fce0f if empty session is autostarted because of a cookie, immediately destroy it 2018-10-15 14:53:35 +03:00
Andrew Dolgov 7d53c2b501 validate_session: bring back IP session binding (enabled by default) and UA checking 2018-10-15 08:26:07 +03:00
Andrew Dolgov 4d13514dd4 sessions: PDO 2017-12-01 14:48:23 +03:00
Andrew Dolgov 1b5b1e5fec sessions: use is_server_https() for secure cookie setting 2017-07-17 07:33:43 +03:00
Natan Frei e234ac8dcb $_SERVER['HTTPS'] can be exists and 'off' for non-https connectios 2017-07-17 00:44:48 +03:00
Andrew Dolgov 09628e1b1a rework previous 32 bit session stuff 2017-07-13 14:40:30 +03:00
Andrew Dolgov b465c28ee0 sessions: clip max expiry value to a 32bit integer 2017-07-13 08:57:07 +03:00
Andrew Dolgov ea79a0e033 remove some redundant php closing tags 2017-04-26 20:24:18 +03:00
Andrew Dolgov 7b55001eee fix various issues reported by static analysis 
update gitlab-ci config
 2017-04-26 15:29:22 +03:00
Andrew Dolgov 33d131d699 ttrss_gc: return true 2015-12-07 15:25:31 +03:00
Andrew Dolgov f5e66c439e remove SESSION_CHECK_ADDRESS 2015-08-21 09:02:16 +03:00
Andrew Dolgov ffc3a1e579 session: don't try to validate session schema version on empty sessions 2015-01-31 18:48:11 +03:00
Andrew Dolgov 3192fb43bc do not invalidate session when version_static and user agent changes 2015-01-30 13:14:19 +03:00
Andrew Dolgov 04a8c2065f better error reporting in session validation 2013-07-06 12:05:52 +04:00
Andrew Dolgov 3472c4c569 use static version for session checking, show latest changeset for git version instead of head date 2013-04-24 16:57:24 +04:00
Andrew Dolgov 6322ac79a0 remove $link 2013-04-17 16:48:41 +04:00
Andrew Dolgov 404e2e3603 more work on singleton-based DB 2013-04-17 15:36:48 +04:00
Andrew Dolgov 889a5f9f19 experimental SQL-based error logger 2013-04-16 19:41:31 +04:00
Andrew Dolgov 9ce7a5546c implement some tweaks to session handling; properly remove session cookie if invalid/login failed 2013-04-04 15:33:14 +04:00
Andrew Dolgov 810205625b session validation: check for tt-rss version 2013-04-04 12:55:15 +04:00
Andrew Dolgov 6f431804a9 remove session check/destroy stuff, looks problematic 2013-04-03 19:13:23 +04:00
Andrew Dolgov c35b6d8e14 initialize session connection in ttrss_open but define session_connection in global context 2013-04-02 14:04:47 +04:00
Andrew Dolgov 168680976f sessions: initialize connection on include, not in ttrss_open 2013-04-02 13:58:08 +04:00
Ryan Parrish f4bae03a6e Merge branch 'master' of https://github.com/stickystyle/Tiny-Tiny-RSS 2013-04-01 10:41:20 -04:00
Ryan Parrish 7081aaa09b add missing gettext libs 2013-04-01 10:40:28 -04:00
Andrew Dolgov 837ec70e3e validate_session: check for user agent 2013-04-01 18:22:07 +04:00
Andrew Dolgov e9b7469233 validate session on startup 2013-03-31 13:10:46 +04:00
Andrew Dolgov 8f49a2257b fix stuff broken by previous pull 2013-03-29 19:20:46 +04:00
all 48ec0b8526 Check that $_SESSION["uid"] is defined before checking value 2013-03-29 15:17:38 +01:00
Andrew Dolgov 2137d67496 sessions: properly check for cookie being set 2013-03-28 12:40:56 +04:00
Andrew Dolgov 6cfd3c149c remove SESSION_EXPIRE_TIME 2013-03-28 10:06:16 +04:00
Andrew Dolgov f231f438ba reimplement remember_me 2013-03-28 09:48:58 +04:00
Andrew Dolgov 60ed4c9ad5 add yet another workaround for stuck login due to session cookies 2013-03-28 09:09:41 +04:00
Andrew Dolgov 5160620c8a only autostart session if login cookie exists 2013-03-28 08:06:21 +04:00
Andrew Dolgov 3972bf5981 db_escape_string: specify link parameter for consistency; sessions: do not force-close db connection in _close() 2013-03-22 09:14:55 +04:00
Andrew Dolgov 5c81e817d3 enable mysql db session support 2013-03-21 21:52:20 +04:00
Andrew Dolgov 0295919648 attempt fix db_escape_string() invocation in sessions.php 2013-03-21 21:42:11 +04:00
Andrew Dolgov acfbab375d mute warnings caused by session_start() to deal with potential ps_files_cleanup_dir stuff 2013-02-19 16:56:43 +04:00
Andrew Dolgov 6addc13f46 sessions: prevent HTTPS warning 2013-01-22 19:21:40 +04:00
Andrew Dolgov 964f153371 api: use tt-rss session storage 2012-09-19 12:45:01 +04:00
Andrew Dolgov 09e8bdfd18 simplify default global config, expand sanity_check messages 2011-12-13 19:20:26 +04:00
Andrew Dolgov 107d0cf39e overall directory tree cleanup 2011-12-11 23:59:25 +04:00
Renamed from sessions.php (Browse further)