Commit graph

9 commits

Author SHA1 Message Date
emanuele-f
8a7ead5924 Harden HTTP session checks and remove user cookie 2018-08-21 18:16:54 +02:00
Simone Mainardi
3eeb37c3f0 Fixes invalid login page encoding 2018-07-25 18:15:04 +02:00
emanuele-f
ac07c48b7c Force username login always being lowercase 2017-05-29 11:39:19 +02:00
emanuele-f
1c38df48c9 Unify character encoding header code 2017-05-04 17:12:06 +02:00
emanuele-f
a10d6c4f7d Fix login issue with special characters.
The special characters were URL encoded during HTTP request and saved in URL encoded form.
The login used the unencoded password instead, and this resulted in a password hash mismatch which prevented user login.

Now the password hash is calculated on the unencoded password.
2017-04-14 18:20:36 +02:00
Emanuele Faranda
afdfac1c9c Lua scripts parameters validation (#970)
* partial work

* Migrate 'mode' parameters

* Migrate alerts types

* Fix some interface ids

* Partial work

* Partial work

* End of work for _GET parameters

* Work in progress

* Add support for special parameters

* Preferences validation

* Fixes and improvements

* Enforce interger validation
2017-02-08 12:25:35 +01:00
emanuele-f
397d525d85 Use POST requests when required 2017-01-14 20:31:01 +01:00
Luca
1b2ceac8f5 Added fixes to avoid users to be manipulated with invalid CSRF token 2017-01-12 10:10:20 -08:00
Luca
730d76b9f5 Initial import from SVN 2015-04-30 12:22:35 +02:00