zoneminder/web
Isaac Connor 5561829450 fix: include username in auth relay and fix stale auth in stream restart
- Add user= parameter to get_auth_relay() so zms can use the indexed
  Username column instead of iterating all users to validate the hash
- Apply the same fix to Event.php getStreamSrc() and getThumbnailSrc()
- Tighten Monitor.php from isset() to !empty() for consistency
- In MonitorStream.js start(), check if the auth hash in the img src
  matches the current auth_hash before resuming via CMD_PLAY. If stale,
  fall through to rebuild the URL with fresh auth_relay. This prevents
  long-running montage pages from spawning zms with expired credentials.
- Downgrade zms auth failure from Error to Warning

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-16 10:01:47 -04:00
..
ajax Move tag related commands to canView(Events) instead of canEdit(Events) 2026-03-12 15:03:29 -04:00
api fix: harden web interface against injection and SSRF vulnerabilities 2026-03-08 23:30:49 -04:00
css
fonts
graphics
includes fix: include username in auth relay and fix stale auth in stream restart 2026-03-16 10:01:47 -04:00
js fix: include username in auth relay and fix stale auth in stream restart 2026-03-16 10:01:47 -04:00
lang Merge pull request #4689 from Simpler1/clear_logs 2026-03-07 17:17:02 -05:00
skins/classic Merge branch 'master' of github.com:ZoneMinder/zoneminder 2026-03-15 17:25:17 -04:00
sounds feat(): Custom snapp.ogg sound for ZoneMinder 2024-03-02 10:15:44 -05:00
vendor
views fix: harden web interface against injection and SSRF vulnerabilities 2026-03-08 23:30:49 -04:00
.editorconfig
.gitignore
.travis.yml
CMakeLists.txt Install the web/sounds directory 2025-03-03 13:49:14 -05:00
README.md
composer.json build(deps): bump firebase/php-jwt from 6.0.0 to 7.0.0 in /web 2026-02-23 18:16:55 -05:00
composer.lock build(deps): bump firebase/php-jwt from 6.0.0 to 7.0.0 in /web 2026-02-23 18:16:55 -05:00
index.php Don't add postLoginQuery to url if it is empty 2026-03-12 15:03:45 -04:00
robots.txt

README.md

Modern ZoneMinder Skin

This web frontend to ZoneMinder is a complete rewrite of the classic frontend, based on CakePHP.