Commit Graph

87 Commits (a94519077bae9c7a38c20cd8d46dc76805110ad1)

Author SHA1 Message Date
Dries Buytaert 1a0778d1f6 - Patch #855394 by aspilicious: fix newlines in session.inc. 2010-07-16 02:53:02 +00:00
Dries Buytaert 5a904b80c1 - Patch #846330 by JacobSingh, Gábor Hojtsy: impossible to log in with default PHP settings due to cookie lifetime. 2010-07-07 13:52:00 +00:00
Dries Buytaert 8ef7c6fb8d - Patch #801278 by mfb, marcingy: authenticated users getting 'less random' session IDs. 2010-06-27 20:55:14 +00:00
Dries Buytaert 1cd8bc5a00 - Patch #813492 by chx, Damien Tournoud, justinrandell: HTTPS sessions use an invalid merge query. 2010-06-14 12:31:46 +00:00
Dries Buytaert 8fb6adbc21 - Patch #742246 by jbrown, noahb, aspilicious, alexanderpas, rfay:handle uncaught exceptions. 2010-06-05 13:30:42 +00:00
Dries Buytaert 71713081a2 - Patch #723802 by pwolanin, grendzy: convert to sha-256 and hmac from md5 and sha1. 2010-05-01 08:12:23 +00:00
Dries Buytaert 06fe6cae2d - Patch #763048 by catch: critical bug: remove drupal_unpack()() due to namespacing collisions. 2010-04-13 15:13:41 +00:00
Dries Buytaert ff301288f2 - Patch #348448 by mfb, c960657, marvil07, cdale, jpmckinney: fixed PHP strict warnings when running tests and for PHP 5.3. 2010-04-11 18:33:44 +00:00
Dries Buytaert bead28a4cd - Patch #721436 by catch, chx, sun, eojthebrave, David_Rothstein, moshe weitzman: remove magical fairy saving of cruft from user_save(). 2010-04-07 13:49:21 +00:00
Dries Buytaert d2f6d6a0c3 - Patch #578212 by marcvangend, scor: fixed SA-CORE-2010-001, blocked user session regeneration. 2010-03-09 03:52:02 +00:00
Angie Byron 8d01aeb428 #710142 by Berdir, moshe weitzman, chx: Handle exceptions in shutdown functions (with tests). Hopefully the last of these weird 'Stack frame in Unknown line 0' errors. 2010-02-17 22:44:52 +00:00
Dries Buytaert af3f94b37e - Patch #693614 by asimmonds: fixed PHPDoc spelling typos. 2010-01-25 10:38:35 +00:00
Angie Byron 1c2cda2d7c #681134 by moshe weitzman: Fixed stop issuing headers to CLI clients. 2010-01-14 02:05:34 +00:00
Dries Buytaert 949ccddb91 - Patch #666024 by boombatower, mcrittenden: code and documentation clean-ups. 2009-12-30 08:16:55 +00:00
Dries Buytaert 00f122cd7b - Patch #655212 by chx: remove unused and broken drupal_session_count(). 2009-12-12 20:55:18 +00:00
Angie Byron 36adc757f9 #575280 follow-up by mfb and chx: Fixed impersonation attack when an https session exists. 2009-11-04 05:05:52 +00:00
Dries Buytaert 67f2c101c1 - Patch #584966 by mr.baileys, sun: add doxygen group for PHP function wrappers in Drupal. 2009-09-28 22:22:54 +00:00
Dries Buytaert 6586b76465 - Patch by #1577 by chx, boombatower, Bèr Kessels, kkaefer: made SSL support a bit easier by providing two cookies and ... hook_goto_alter. 2009-09-05 13:05:31 +00:00
Dries Buytaert 5962cc5ab2 - Patch #477944 by DamZ: more streamlining and clean-up of session handling code. 2009-07-01 12:47:30 +00:00
Dries Buytaert e474fbbd6c - Patch #477944 by Damien Tournoud: fix and streamline page cache and session handling. 2009-06-02 06:58:17 +00:00
Dries Buytaert ce4df7b66b - Patch #422374 by JamesAn: convert to use the new static caching API. 2009-04-03 17:41:32 +00:00
Angie Byron 665c9fdc2c Roll-back of users -> user table name change in #330983: Broken pgsql is no fun. 2009-02-26 07:30:29 +00:00
Angie Byron ff9e842730 #330983 by recidive and boombatower: Rename users/users_roles tables to user/user_role for consistency. 2009-02-18 15:19:57 +00:00
Dries Buytaert d20e457121 - Patch #201122 by c960657, Moshe Weitzman: never write anonymous sessions, unless something has been written to . This is an important performance improvements -- as long as you use modules that use carefully. It might be good to report some analytics about this in the performance settings page so administrators can see if there is a 'broken' module. 2009-01-19 10:46:52 +00:00
Dries Buytaert 96dc47665e - Patch #280934 by pwolanin, swentel, et al: harden session regeneration. It took a while, but it comes with tests and extra features now. 2008-11-24 06:12:46 +00:00
Dries Buytaert bd108c7f10 - Patch #299778 by hswong3i, Arancaytar, Dave Reid et al: code clean-up. 2008-11-11 16:49:38 +00:00
Dries Buytaert c2a4b9c19f - Patch #297860 by Damien Tournoud: converted session.inc to the new database abstraction layer. 2008-11-01 21:27:38 +00:00
Angie Byron cede322c1b #293612 by egfrith: user_authenticate() should work when is empty. 2008-10-11 16:37:38 +00:00
Dries Buytaert 9f3d9f1115 - Patch #161301 by Eaton, Sun, moshe and webchick: make checking for node edit forms easier. DX improvement. 2008-09-27 20:37:01 +00:00
Dries Buytaert 8fc581d4d7 - Patch #309488 by kbahey: correct capitalization of TRUE and FALSE. 2008-09-19 07:53:59 +00:00
Dries Buytaert 7f29b14277 - Patch #305645 by pwolanin: ['REQUEST_TIME'] -> REQUEST_TIME. Improved developer experience. 2008-09-17 07:11:59 +00:00
Angie Byron 161a9970f7 #308534 by Dave Reid: Remove stray whitespace core-wide. 2008-09-15 20:48:10 +00:00
Dries Buytaert 312b97e9e9 - Patch #253702 by Damien Tournoud et al: further clean-up of the session handling code. 2008-09-15 15:18:59 +00:00
Dries Buytaert a1d73f1342 - Patch #253702 by jscheel, gpk: clarified session handling functions. 2008-09-08 21:08:24 +00:00
Dries Buytaert e5b0e5f76c - Patch #302763 by Dave Reid, Rob Loach: replace time() by ['REQUEST_TIME'] as per Rasmus' suggestion. Removed drupal_referrer() for consistency. 2008-09-06 08:36:22 +00:00
Angie Byron c63992027b #297860 by catch: Reverting reversion to reverted DBTNG stuff. Tests should pass now. 2008-08-31 12:50:45 +00:00
Dries Buytaert 71f0176beb - Patch #297860 by Damien Tournoud: sess_write should use a db_merge(). 2008-08-23 07:13:49 +00:00
Dries Buytaert 69e6f411a9 - Patch #225450 by Crell, chx, bjaspan, catch, swentel, recidive et al: next generation database layer for Drupal 7. 2008-08-21 19:36:39 +00:00
Dries Buytaert 021be926d4 - Patch #293421 by Bart Jansens: fixed documentation of sess_count(). 2008-08-12 10:28:33 +00:00
Dries Buytaert 75e9494f73 - Patch #213699 by Damien Tournoud, c960657: fixed race condition in sess_write(). 2008-07-11 10:14:27 +00:00
Dries Buytaert 76151a8bc9 - Patch #245504 by catch, David_Rothstein, Freso, et al: removed the throttle module from Drupal core. 2008-04-16 11:35:52 +00:00
Dries Buytaert 56d2664a90 - Patch #245115 by kkaefer, John Morahan, JohnAlbin et al: after a long discussion we've decided to make the concatenation operator consistent with the other operators. 2008-04-14 17:48:46 +00:00
Dries Buytaert 70eb02dfc9 - Patch #218116 by greggles: document session_save_session(). 2008-02-17 20:03:42 +00:00
Dries Buytaert 210311903e - Patch #221364 by chx: removed PHP 4.3 workaround. Oh, yeah. 2008-02-14 18:43:32 +00:00
Gábor Hojtsy ac4c8f7ab0 #203274 by Pasqualle: remove excessive witespace from our code (minor) 2007-12-22 23:24:26 +00:00
Gábor Hojtsy afe3f4318d security fixes forward ported from Drupal 5.2 - previously not committed parts of http://drupal.org/cvs?commit=74833 2007-12-05 19:12:59 +00:00
Dries Buytaert b134b023e1 - Patch #163191 by hswong3i: removed db_num_rows() for compatibility with Oracle and DB2. Also a performance improvement. 2007-08-12 15:55:36 +00:00
Dries Buytaert 772a2d39d2 - Patch #40545 by Moshe: reduces contention in the users table. 2007-07-23 07:29:29 +00:00
Dries Buytaert 4a6f5869e5 - Patch #142773 by kbahey: made Drupal work correctly when behind a reverse proxy. 2007-05-25 15:04:42 +00:00
Dries Buytaert 301c6e7539 - Patch #139517 by Grugnog2: improved code comment. 2007-04-27 07:47:38 +00:00