Dries Buytaert
|
1a0778d1f6
|
- Patch #855394 by aspilicious: fix newlines in session.inc.
|
2010-07-16 02:53:02 +00:00 |
Dries Buytaert
|
5a904b80c1
|
- Patch #846330 by JacobSingh, Gábor Hojtsy: impossible to log in with default PHP settings due to cookie lifetime.
|
2010-07-07 13:52:00 +00:00 |
Dries Buytaert
|
8ef7c6fb8d
|
- Patch #801278 by mfb, marcingy: authenticated users getting 'less random' session IDs.
|
2010-06-27 20:55:14 +00:00 |
Dries Buytaert
|
1cd8bc5a00
|
- Patch #813492 by chx, Damien Tournoud, justinrandell: HTTPS sessions use an invalid merge query.
|
2010-06-14 12:31:46 +00:00 |
Dries Buytaert
|
8fb6adbc21
|
- Patch #742246 by jbrown, noahb, aspilicious, alexanderpas, rfay:handle uncaught exceptions.
|
2010-06-05 13:30:42 +00:00 |
Dries Buytaert
|
71713081a2
|
- Patch #723802 by pwolanin, grendzy: convert to sha-256 and hmac from md5 and sha1.
|
2010-05-01 08:12:23 +00:00 |
Dries Buytaert
|
06fe6cae2d
|
- Patch #763048 by catch: critical bug: remove drupal_unpack()() due to namespacing collisions.
|
2010-04-13 15:13:41 +00:00 |
Dries Buytaert
|
ff301288f2
|
- Patch #348448 by mfb, c960657, marvil07, cdale, jpmckinney: fixed PHP strict warnings when running tests and for PHP 5.3.
|
2010-04-11 18:33:44 +00:00 |
Dries Buytaert
|
bead28a4cd
|
- Patch #721436 by catch, chx, sun, eojthebrave, David_Rothstein, moshe weitzman: remove magical fairy saving of cruft from user_save().
|
2010-04-07 13:49:21 +00:00 |
Dries Buytaert
|
d2f6d6a0c3
|
- Patch #578212 by marcvangend, scor: fixed SA-CORE-2010-001, blocked user session regeneration.
|
2010-03-09 03:52:02 +00:00 |
Angie Byron
|
8d01aeb428
|
#710142 by Berdir, moshe weitzman, chx: Handle exceptions in shutdown functions (with tests). Hopefully the last of these weird 'Stack frame in Unknown line 0' errors.
|
2010-02-17 22:44:52 +00:00 |
Dries Buytaert
|
af3f94b37e
|
- Patch #693614 by asimmonds: fixed PHPDoc spelling typos.
|
2010-01-25 10:38:35 +00:00 |
Angie Byron
|
1c2cda2d7c
|
#681134 by moshe weitzman: Fixed stop issuing headers to CLI clients.
|
2010-01-14 02:05:34 +00:00 |
Dries Buytaert
|
949ccddb91
|
- Patch #666024 by boombatower, mcrittenden: code and documentation clean-ups.
|
2009-12-30 08:16:55 +00:00 |
Dries Buytaert
|
00f122cd7b
|
- Patch #655212 by chx: remove unused and broken drupal_session_count().
|
2009-12-12 20:55:18 +00:00 |
Angie Byron
|
36adc757f9
|
#575280 follow-up by mfb and chx: Fixed impersonation attack when an https session exists.
|
2009-11-04 05:05:52 +00:00 |
Dries Buytaert
|
67f2c101c1
|
- Patch #584966 by mr.baileys, sun: add doxygen group for PHP function wrappers in Drupal.
|
2009-09-28 22:22:54 +00:00 |
Dries Buytaert
|
6586b76465
|
- Patch by #1577 by chx, boombatower, Bèr Kessels, kkaefer: made SSL support a bit easier by providing two cookies and ... hook_goto_alter.
|
2009-09-05 13:05:31 +00:00 |
Dries Buytaert
|
5962cc5ab2
|
- Patch #477944 by DamZ: more streamlining and clean-up of session handling code.
|
2009-07-01 12:47:30 +00:00 |
Dries Buytaert
|
e474fbbd6c
|
- Patch #477944 by Damien Tournoud: fix and streamline page cache and session handling.
|
2009-06-02 06:58:17 +00:00 |
Dries Buytaert
|
ce4df7b66b
|
- Patch #422374 by JamesAn: convert to use the new static caching API.
|
2009-04-03 17:41:32 +00:00 |
Angie Byron
|
665c9fdc2c
|
Roll-back of users -> user table name change in #330983: Broken pgsql is no fun.
|
2009-02-26 07:30:29 +00:00 |
Angie Byron
|
ff9e842730
|
#330983 by recidive and boombatower: Rename users/users_roles tables to user/user_role for consistency.
|
2009-02-18 15:19:57 +00:00 |
Dries Buytaert
|
d20e457121
|
- Patch #201122 by c960657, Moshe Weitzman: never write anonymous sessions, unless something has been written to . This is an important performance improvements -- as long as you use modules that use carefully. It might be good to report some analytics about this in the performance settings page so administrators can see if there is a 'broken' module.
|
2009-01-19 10:46:52 +00:00 |
Dries Buytaert
|
96dc47665e
|
- Patch #280934 by pwolanin, swentel, et al: harden session regeneration. It took a while, but it comes with tests and extra features now.
|
2008-11-24 06:12:46 +00:00 |
Dries Buytaert
|
bd108c7f10
|
- Patch #299778 by hswong3i, Arancaytar, Dave Reid et al: code clean-up.
|
2008-11-11 16:49:38 +00:00 |
Dries Buytaert
|
c2a4b9c19f
|
- Patch #297860 by Damien Tournoud: converted session.inc to the new database abstraction layer.
|
2008-11-01 21:27:38 +00:00 |
Angie Byron
|
cede322c1b
|
#293612 by egfrith: user_authenticate() should work when is empty.
|
2008-10-11 16:37:38 +00:00 |
Dries Buytaert
|
9f3d9f1115
|
- Patch #161301 by Eaton, Sun, moshe and webchick: make checking for node edit forms easier. DX improvement.
|
2008-09-27 20:37:01 +00:00 |
Dries Buytaert
|
8fc581d4d7
|
- Patch #309488 by kbahey: correct capitalization of TRUE and FALSE.
|
2008-09-19 07:53:59 +00:00 |
Dries Buytaert
|
7f29b14277
|
- Patch #305645 by pwolanin: ['REQUEST_TIME'] -> REQUEST_TIME. Improved developer experience.
|
2008-09-17 07:11:59 +00:00 |
Angie Byron
|
161a9970f7
|
#308534 by Dave Reid: Remove stray whitespace core-wide.
|
2008-09-15 20:48:10 +00:00 |
Dries Buytaert
|
312b97e9e9
|
- Patch #253702 by Damien Tournoud et al: further clean-up of the session handling code.
|
2008-09-15 15:18:59 +00:00 |
Dries Buytaert
|
a1d73f1342
|
- Patch #253702 by jscheel, gpk: clarified session handling functions.
|
2008-09-08 21:08:24 +00:00 |
Dries Buytaert
|
e5b0e5f76c
|
- Patch #302763 by Dave Reid, Rob Loach: replace time() by ['REQUEST_TIME'] as per Rasmus' suggestion. Removed drupal_referrer() for consistency.
|
2008-09-06 08:36:22 +00:00 |
Angie Byron
|
c63992027b
|
#297860 by catch: Reverting reversion to reverted DBTNG stuff. Tests should pass now.
|
2008-08-31 12:50:45 +00:00 |
Dries Buytaert
|
71f0176beb
|
- Patch #297860 by Damien Tournoud: sess_write should use a db_merge().
|
2008-08-23 07:13:49 +00:00 |
Dries Buytaert
|
69e6f411a9
|
- Patch #225450 by Crell, chx, bjaspan, catch, swentel, recidive et al: next generation database layer for Drupal 7.
|
2008-08-21 19:36:39 +00:00 |
Dries Buytaert
|
021be926d4
|
- Patch #293421 by Bart Jansens: fixed documentation of sess_count().
|
2008-08-12 10:28:33 +00:00 |
Dries Buytaert
|
75e9494f73
|
- Patch #213699 by Damien Tournoud, c960657: fixed race condition in sess_write().
|
2008-07-11 10:14:27 +00:00 |
Dries Buytaert
|
76151a8bc9
|
- Patch #245504 by catch, David_Rothstein, Freso, et al: removed the throttle module from Drupal core.
|
2008-04-16 11:35:52 +00:00 |
Dries Buytaert
|
56d2664a90
|
- Patch #245115 by kkaefer, John Morahan, JohnAlbin et al: after a long discussion we've decided to make the concatenation operator consistent with the other operators.
|
2008-04-14 17:48:46 +00:00 |
Dries Buytaert
|
70eb02dfc9
|
- Patch #218116 by greggles: document session_save_session().
|
2008-02-17 20:03:42 +00:00 |
Dries Buytaert
|
210311903e
|
- Patch #221364 by chx: removed PHP 4.3 workaround. Oh, yeah.
|
2008-02-14 18:43:32 +00:00 |
Gábor Hojtsy
|
ac4c8f7ab0
|
#203274 by Pasqualle: remove excessive witespace from our code (minor)
|
2007-12-22 23:24:26 +00:00 |
Gábor Hojtsy
|
afe3f4318d
|
security fixes forward ported from Drupal 5.2 - previously not committed parts of http://drupal.org/cvs?commit=74833
|
2007-12-05 19:12:59 +00:00 |
Dries Buytaert
|
b134b023e1
|
- Patch #163191 by hswong3i: removed db_num_rows() for compatibility with Oracle and DB2. Also a performance improvement.
|
2007-08-12 15:55:36 +00:00 |
Dries Buytaert
|
772a2d39d2
|
- Patch #40545 by Moshe: reduces contention in the users table.
|
2007-07-23 07:29:29 +00:00 |
Dries Buytaert
|
4a6f5869e5
|
- Patch #142773 by kbahey: made Drupal work correctly when behind a reverse proxy.
|
2007-05-25 15:04:42 +00:00 |
Dries Buytaert
|
301c6e7539
|
- Patch #139517 by Grugnog2: improved code comment.
|
2007-04-27 07:47:38 +00:00 |