Bharat Mediratta db1f6e3e35 Don't ask for csrf when we're resetting passwords. They're not gonna have one. Duh! ...

Fixes #642.

2009-08-27 14:56:07 -07:00

..

admin_users.php

Clean up user form events. Thanks to Ben Smith (glooper).

2009-07-29 17:43:12 -07:00

login.php

Fix a bunch of XSS vulnerabilities turned up by manual inspection

2009-07-01 17:57:39 -07:00

logout.php

In the logout link, urlencode the continue url so that ampersands, etc

2009-07-21 13:02:20 -07:00

password.php

Don't ask for csrf when we're resetting passwords. They're not gonna have one. Duh!

2009-08-27 14:56:07 -07:00

users.php

Add form processing events:

2009-07-23 10:35:52 -07:00