Shish
|
33f5b5ef1a
|
[core] use salted sha3 instead of md5 for session tokens
|
2024-08-31 21:53:30 +01:00 |
|
Shish
|
845c8b3d85
|
[core] Make User::by_name / User::by_id not-null
Nearly everywhere that these functions are called, the result is assumed to be not-null, and a null will break things
|
2024-08-31 20:39:36 +01:00 |
|
Shish
|
8efa960e5d
|
Make some more things null-safe
(in preparation for bumping up the phpstan strictness to disallow null-unsafe code)
|
2024-08-31 19:19:24 +01:00 |
|
Shish
|
8f8c0d151a
|
Update dependency versions
|
2024-08-31 17:06:39 +01:00 |
|
Shish
|
7150af6b9e
|
[core] use sha3 instead of md5 for csrf tokens
|
2024-06-21 19:35:47 +01:00 |
|
Shish
|
be842308d9
|
[core] have a system level SECRET variable, to be used as a salt separate from DATABASE_DSN
|
2024-06-21 00:18:43 +01:00 |
|
Shish
|
61f13c6794
|
[core] have User::by_session() check session ID on the PHP side
Generating the token on the PHP side is more consistent than getting the databases to do it
|
2024-06-20 01:13:10 +01:00 |
|
Shish
|
8a3d5b5b11
|
[core] move get_session_id and set_login_cookie into User class
|
2024-06-20 01:07:11 +01:00 |
|
Shish
|
a59b9f706c
|
[core] use || for SQL concatenation
MySQL supports this now?
|
2024-06-19 23:57:41 +01:00 |
|
Shish
|
5cbbe5e1b3
|
[core] remove is_logged_in
This was only used in a couple of places, and user classes are more useful
|
2024-05-04 16:06:08 +01:00 |
|
Shish
|
7ee4152942
|
[core] organise exceptions a bit
|
2024-02-11 16:03:23 +00:00 |
|
Shish
|
8c22cb1fb6
|
[core] exact and named page args
|
2024-02-11 11:34:17 +00:00 |
|
Shish
|
05199c13cc
|
[core] kill a secret global
|
2024-01-20 19:52:18 +00:00 |
|
Shish
|
b60c3fe362
|
[core] a load more type hints, and fix bugs revealed by type hints
|
2024-01-20 14:11:00 +00:00 |
|
Shish
|
802ff336a2
|
[core,tests] even more types
|
2024-01-15 14:08:11 +00:00 |
|
Shish
|
f00a4e3d90
|
fewer loose functions
|
2023-12-16 11:04:52 +00:00 |
|
Shish
|
fd1bb21f9d
|
bumps
|
2023-11-11 22:05:28 +00:00 |
|
Luana
|
34b608c4b7
|
ratings ext fully MicroHTML
|
2023-07-03 16:35:43 +01:00 |
|
Shish
|
86aa959097
|
expose join date
|
2023-02-15 22:00:00 +00:00 |
|
Shish
|
301a5d3027
|
updates
|
2023-02-13 22:28:50 +00:00 |
|
Shish
|
4e5444e217
|
avatar URL function
|
2023-02-08 01:29:52 +00:00 |
|
Shish
|
010f976af5
|
expose userclass / permissions
|
2023-02-07 13:21:37 +00:00 |
|
Shish
|
180f21e29e
|
Use graphqlite-like API
|
2023-02-04 13:29:21 +00:00 |
|
Shish
|
54e2ca21ec
|
phpstan
|
2023-02-03 16:44:16 +00:00 |
|
Shish
|
708e102338
|
Have shimmie's global cache object implement PSR-16
|
2023-02-02 16:04:35 +00:00 |
|
Shish
|
e79470d974
|
experimental graphql api
|
2023-02-01 21:57:18 +00:00 |
|
Shish
|
bce2d55744
|
Namespaces are one honking great idea—let's do more of those!
|
2023-01-10 22:44:09 +00:00 |
|
Shish
|
a04bc2e7e4
|
php8.1 gogogo
|
2022-10-28 01:45:35 +01:00 |
|
Shish
|
3d9e32e919
|
new php-cs-fixer
|
2021-12-14 18:32:47 +00:00 |
|
Shish
|
58db685b29
|
more error handling
|
2021-11-10 19:33:51 +00:00 |
|
Shish
|
77f7121e26
|
drop php7.3 support, make use of 7.4 features
|
2021-03-14 23:43:50 +00:00 |
|
Shish
|
5816aa3084
|
execute consistently
|
2020-10-25 21:34:52 +00:00 |
|
Shish
|
19a6b39c70
|
make use of str_starts_with / str_ends_with / str_contains
|
2020-10-25 19:31:58 +00:00 |
|
Shish
|
0b2e36303d
|
allow bypassing auth tokens in unit tests
|
2020-04-25 21:35:14 +01:00 |
|
Shish
|
b0cb46abca
|
test a couple extra branches
|
2020-04-24 14:10:45 +01:00 |
|
Shish
|
1597eff082
|
lint fixing
|
2020-03-13 09:23:54 +00:00 |
|
Shish
|
6f7e0e5b12
|
drop logging args that didn't get used in practice
|
2020-02-01 21:37:07 +00:00 |
|
Shish
|
66bd27b0ee
|
fix login for names with spaces
|
2020-02-01 21:21:27 +00:00 |
|
Shish
|
235b976dbc
|
databases...
|
2020-01-26 18:10:58 +00:00 |
|
Shish
|
06fffd6328
|
more
|
2020-01-26 17:39:55 +00:00 |
|
Shish
|
9eb5acf2dc
|
use strict types
|
2020-01-26 16:27:56 +00:00 |
|
Shish
|
b8dc0a880b
|
if login fails with a space, try with underscore
|
2019-12-16 09:01:09 +00:00 |
|
Shish
|
d7a2ca9ddc
|
remove SCORE_STRNORM - everyone supports LOWER now
|
2019-12-15 16:07:46 +00:00 |
|
Shish
|
d705578f79
|
formatting
|
2019-12-15 15:31:44 +00:00 |
|
Shish
|
a9993b47a8
|
working microcrud for ipbans
|
2019-11-27 21:06:14 +00:00 |
|
Shish
|
6486bb95da
|
name_to_id
|
2019-11-11 16:43:42 +00:00 |
|
Shish
|
247cfcbd77
|
Avoid shadowing global variable
When we aren't referencing the current `global $user`, we should give it
a different name to avoid confusion
|
2019-11-11 16:43:42 +00:00 |
|
Shish
|
e08cdb1638
|
make Cache its own thing, separate from Database
|
2019-10-02 10:49:32 +01:00 |
|
Shish
|
a7bddb1dac
|
get rid of is_admin, fixes #676
|
2019-09-29 19:01:09 +01:00 |
|
Matthew Barbour
|
1370afec72
|
Moved database driver constants to DatabaseDriver
|
2019-06-20 10:47:15 -05:00 |
|