Andy Staudacher cd98f85260 Fix for ticket 1010: Don't leak valid user names in "forgot password" form. ...

Includes fixes for user forms as well (edit user / email / password).

2010-02-11 13:11:31 -08:00

..

config

Move the default identity config into the users module and change the Identity constructor to look in module::get_var(gallery, identity_provider) for the current identity driver.

2009-10-18 08:00:33 -07:00

controllers

Fix for ticket 1010: Don't leak valid user names in "forgot password" form.

2010-02-11 13:11:31 -08:00

css

Remove g-dialog-link from special groups delete button (registered users, everybody), it's supposed to be disabled. Updated wording of headings and instructions.

2009-11-14 23:31:14 -07:00

helpers

Require the current password to change your password.

2010-02-02 21:36:01 -08:00

images

Move the password strength image out of css and into an images folder.

2009-11-14 13:23:23 -07:00

js

Add a password strength meter.

2009-10-27 12:23:48 -07:00

lib

Get rid of trailing whitespace in security preamble

2009-05-18 04:13:09 +00:00

libraries/drivers/IdentityProvider

Change IdentityProvider::create_user() to take $email as well, since that's a required

2010-01-17 20:37:25 -08:00

models

Fix a bug in valid_password() where an empty password was considered valid.

2010-02-02 21:34:20 -08:00

tests

Fix for ticket 1004: Replace all uses of split with explode (none actually required regular expressions). Thanks to Brian Hartsock for providing a patch!

2010-02-06 13:05:44 -08:00

views

Fix password reset confirmation

2010-02-09 02:16:49 -08:00

module.info

Force all non-guest users to have an email address since that's

2010-01-31 20:50:52 -08:00