Andy Staudacher 1470b99d1f Protect REST login controller from brute force attacks too. ...

And make the REST auth token less predictable by using a better source for randomness.

2010-01-30 21:42:57 -08:00

..

akismet

Clean up form validation code.

2010-01-29 10:54:59 -08:00

comment

Strongly type the argument list to the model::validate method.

2010-01-29 14:04:27 -08:00

digibug

Fix #992: Digibug pops up a blank page and doesn't allow printing

2010-01-30 16:05:20 -08:00

exif

Convert __toString() to use (string) cast instead.

2010-01-27 21:58:06 -08:00

forge/libraries

Modify Forge to accept multiple hidden params (this was broken by an

2009-12-31 15:49:43 -08:00

g2_import

Oops, forgot to bump the version to 2 in install().

2010-01-29 14:12:07 -08:00

gallery

Protect REST login controller from brute force attacks too.

2010-01-30 21:42:57 -08:00

gallery_unit_test

Reload items after saving so that we convert their members to strings.

2010-01-22 01:10:52 -08:00

image_block

Do a better job of guarding against missing images.

2010-01-19 21:27:54 -08:00

info

Revert "Simplify the maintenance of the xss golden file by having each module contibute its own golden file to a consolidated one. This will make it easier for -contrib modules or themes to be included in the xss security test w/o having to keep modifying a central golden file."

2009-11-18 10:54:01 -08:00

kohana23_compat

Change merge_where() and merge_or_where() to ignore empty tuples so that chaining is easier.

2010-01-08 11:47:00 -08:00

notification

Add the active notifications and rest api key to user profile page.

2010-01-24 20:14:01 -08:00

organize

Convert __toString() to use (string) cast instead.

2010-01-27 21:58:06 -08:00

recaptcha

Work around a weirdness where empty() doesn't work on input values.

2010-01-29 11:23:28 -08:00

rest

Protect REST login controller from brute force attacks too.

2010-01-30 21:42:57 -08:00

rss

Overload url::current() and url::merge() to make the current url XSS

2010-01-18 11:10:37 -08:00

search

Fix for ticket #972 and more. In Kohana 2.4, ORM::delete_all ignores any where

2010-01-09 23:57:16 -08:00

server_add

cast $task->done to bool so that it doesn't show up as "0" to the JS,

2010-01-28 20:38:48 -08:00

slideshow

Change the check_environment method in the module helper and the module installers to can_activate to reflect that it is doing more than just checking the environment.

2010-01-22 12:30:17 -08:00

tag

The user must have some edit permission somewhere to create a tag

2010-01-30 11:48:43 -08:00

unit_test

Fix the translation keys to not require "unit_test." as a prefix.

2009-12-21 12:07:20 -08:00

user

Don't override the password in the database if it's empty in the form.

2010-01-30 20:43:53 -08:00

watermark

Use "(string) $form" instead of "$form->__toString()"

2010-01-16 22:42:02 -08:00