albert
f52181db94
Major revamp of security. Passwords are first SHA1 hashed and then
...
that hash is bcrypted. Bcrypted hashes are stored in a new column on
users. This separate column is only to allow for rollbacks,
eventually the old SHA1 hash column will be removed. Sensitive cookie
details are now encrypted to prevent user tampering and more stringent
checks on secret_token and session_secret_key are enforced.
2013-03-04 22:55:41 -05:00
albert
bae5835cff
add script for fixing password hashes
2013-03-03 16:28:44 -05:00
albert
880a7c5324
add bcrypt gem
2013-03-03 16:17:50 -05:00
albert
427e90bafb
switch version to 2.1.0
2013-03-03 16:14:03 -05:00
albert
23f9c2396f
fixes #729
2013-03-03 16:05:47 -05:00
albert
f11069a34a
fixes #738
2013-03-03 16:01:05 -05:00
albert
7c4e933bea
potential fix for #737
2013-03-03 15:51:57 -05:00
albert
37f26f179f
fixes #735
2013-03-03 15:44:42 -05:00
albert
91ca67e9a1
potential fix for #734
2013-03-03 15:40:30 -05:00
albert
caacd3f86f
fixes #733
2013-03-03 15:37:20 -05:00
albert
2c270e09e2
fixes #731
2013-03-03 15:34:23 -05:00
albert
a214c12e5c
fixes #730
2013-03-03 15:33:36 -05:00
albert
0137f7ff79
fix logic for source searches
2013-03-03 14:56:39 -05:00
albert
89c0ab86a8
add default queue
2013-03-03 01:21:00 -05:00
albert
f0b29fc3ba
more intelligent queuing of async jobs
2013-03-03 01:12:31 -05:00
albert
b55d40e70a
changes to tag sub processing
2013-03-02 23:52:07 -05:00
albert
d6af03a7b6
change tag date sorting criteria to use id instead
2013-03-02 23:36:05 -05:00
albert
a5a2bedc52
fixes #717
2013-03-02 23:29:10 -05:00
albert
bf0f8997d8
addresses #711
2013-03-02 23:22:42 -05:00
albert
0e973ce1a7
fixes #709
2013-03-02 23:19:54 -05:00
albert
49a45a1c2f
fixes #708
2013-03-02 22:55:26 -05:00
albert
58605f7fa4
fixes #707
2013-03-02 22:54:28 -05:00
albert
68ac05e31c
fixes #705
2013-03-02 22:45:15 -05:00
albert
ed182f4cac
fixes #703
2013-03-02 22:32:50 -05:00
albert
bf44bbb112
fixes #702
2013-03-02 22:22:57 -05:00
albert
7300dc3c97
fixes #701
2013-03-02 22:16:23 -05:00
albert
b874f2d73f
fixes #699
2013-03-02 22:13:55 -05:00
albert
f7a4b2e3fa
fixes #698
2013-03-02 22:12:14 -05:00
albert
136199d942
should fix #696
2013-03-02 21:36:08 -05:00
albert
442b411b62
fixes #695
2013-03-02 21:31:12 -05:00
albert
857b86fabe
fixes #694
2013-03-02 21:27:04 -05:00
albert
3a262d0d50
fixes #693
2013-03-02 21:23:37 -05:00
albert
b3ab52e889
fixes #692
2013-03-02 21:18:57 -05:00
albert
7ca8635051
fixes #691
2013-03-02 21:13:21 -05:00
albert
43a32efdc5
better error message when searching comments with metatags
2013-03-02 20:55:46 -05:00
albert
c6c1da5de0
fix
2013-03-02 20:40:03 -05:00
albert
c602624ed5
fix
2013-03-02 20:37:57 -05:00
albert
70e8635d33
bug fix
2013-03-02 20:35:07 -05:00
albert
54f3610e51
better logic
2013-03-02 20:32:34 -05:00
albert
b34080d0af
more aggressive timeout constraints for loose source queries
2013-03-02 20:30:59 -05:00
albert
b9b92b6264
fixes #477
2013-03-02 19:21:39 -05:00
albert
5ece9fe99a
add js for scrolling to error/notice
2013-03-02 19:15:53 -05:00
albert
e28c786fa1
fixes #684
2013-03-02 18:18:51 -05:00
albert
1136dc6dfa
fixes #690
2013-03-01 07:47:55 -08:00
albert
6c0f0aca2c
fixes #689
2013-03-01 07:46:01 -08:00
albert
876c2c5c88
fixes #686
2013-03-01 07:42:24 -08:00
albert
6a1db1197b
fixes #670
2013-03-01 07:33:19 -08:00
albert
35724bef5c
fixes #682
2013-03-01 07:06:35 -08:00
albert
ecd7870826
fixes #679
2013-03-01 07:02:52 -08:00
albert
9101fb0f23
fixes #676
2013-03-01 06:52:03 -08:00
