Commit Graph

6 Commits

Author SHA1 Message Date
albert
f52181db94 Major revamp of security. Passwords are first SHA1 hashed and then
that hash is bcrypted.  Bcrypted hashes are stored in a new column on
users.  This separate column is only to allow for rollbacks,
eventually the old SHA1 hash column will be removed.  Sensitive cookie
details are now encrypted to prevent user tampering and more stringent
checks on secret_token and session_secret_key are enforced.
2013-03-04 22:55:41 -05:00
albert
bae5835cff add script for fixing password hashes 2013-03-03 16:28:44 -05:00
albert
586c9a7258 fix favcount 2013-02-23 19:46:32 -05:00
albert
6db391f6a2 fixes to post flag logic 2013-02-22 21:13:11 -05:00
albert
4203f344c0 fix for mod queue logic 2013-02-22 20:59:21 -05:00
albert
e0dfd14804 add fix script 2013-02-22 16:58:05 -05:00