 Andrew Dolgov
|
1b5b1e5fec
sessions: use is_server_https() for secure cookie setting
|
il y a 7 ans |
 Natan Frei
|
e234ac8dcb
$_SERVER['HTTPS'] can be exists and 'off' for non-https connectios
|
il y a 7 ans |
|
Andrew Dolgov
|
09628e1b1a
rework previous 32 bit session stuff
|
il y a 7 ans |
|
Andrew Dolgov
|
b465c28ee0
sessions: clip max expiry value to a 32bit integer
|
il y a 7 ans |
|
Andrew Dolgov
|
ea79a0e033
remove some redundant php closing tags
|
il y a 7 ans |
 Andrew Dolgov
|
7b55001eee
fix various issues reported by static analysis
|
il y a 7 ans |
|
Andrew Dolgov
|
33d131d699
ttrss_gc: return true
|
il y a 8 ans |
|
Andrew Dolgov
|
f5e66c439e
remove SESSION_CHECK_ADDRESS
|
il y a 9 ans |
|
Andrew Dolgov
|
ffc3a1e579
session: don't try to validate session schema version on empty sessions
|
il y a 9 ans |
|
Andrew Dolgov
|
3192fb43bc
do not invalidate session when version_static and user agent changes
|
il y a 9 ans |
 Andrew Dolgov
|
04a8c2065f
better error reporting in session validation
|
il y a 11 ans |
|
Andrew Dolgov
|
3472c4c569
use static version for session checking, show latest changeset for git version instead of head date
|
il y a 11 ans |
 Andrew Dolgov
|
6322ac79a0
remove $link
|
il y a 11 ans |
|
Andrew Dolgov
|
404e2e3603
more work on singleton-based DB
|
il y a 11 ans |
|
Andrew Dolgov
|
889a5f9f19
experimental SQL-based error logger
|
il y a 11 ans |
|
Andrew Dolgov
|
9ce7a5546c
implement some tweaks to session handling; properly remove session cookie if invalid/login failed
|
il y a 11 ans |
|
Andrew Dolgov
|
810205625b
session validation: check for tt-rss version
|
il y a 11 ans |
|
Andrew Dolgov
|
6f431804a9
remove session check/destroy stuff, looks problematic
|
il y a 11 ans |
|
Andrew Dolgov
|
c35b6d8e14
initialize session connection in ttrss_open but define session_connection in global context
|
il y a 11 ans |
|
Andrew Dolgov
|
168680976f
sessions: initialize connection on include, not in ttrss_open
|
il y a 11 ans |
 Ryan Parrish
|
f4bae03a6e
Merge branch 'master' of https://github.com/stickystyle/Tiny-Tiny-RSS
|
il y a 11 ans |
|
Ryan Parrish
|
7081aaa09b
add missing gettext libs
|
il y a 11 ans |
|
Andrew Dolgov
|
837ec70e3e
validate_session: check for user agent
|
il y a 11 ans |
|
Andrew Dolgov
|
e9b7469233
validate session on startup
|
il y a 11 ans |
|
Andrew Dolgov
|
8f49a2257b
fix stuff broken by previous pull
|
il y a 11 ans |
 all
|
48ec0b8526
Check that $_SESSION["uid"] is defined before checking value
|
il y a 11 ans |
|
Andrew Dolgov
|
2137d67496
sessions: properly check for cookie being set
|
il y a 11 ans |
|
Andrew Dolgov
|
6cfd3c149c
remove SESSION_EXPIRE_TIME
|
il y a 11 ans |
|
Andrew Dolgov
|
f231f438ba
reimplement remember_me
|
il y a 11 ans |
|
Andrew Dolgov
|
60ed4c9ad5
add yet another workaround for stuck login due to session cookies
|
il y a 11 ans |
