Aymeric Augustin [Sat, 25 Oct 2008 21:23:29 +0000 (23:23 +0200)]
Working OpenId implementation, including basic security features
Still needs code improvements, error handling, and testing
Change path for OpenId library and update Makefile
Create a spool for the OpenId library with the Makefile
Aymeric Augustin [Sat, 25 Oct 2008 12:51:31 +0000 (14:51 +0200)]
XRDS for ID provider and user
Change path to library to simplify includes
Aymeric Augustin [Sat, 25 Oct 2008 11:02:47 +0000 (13:02 +0200)]
Create an openid discovery page for each user
Aymeric Augustin [Sat, 25 Oct 2008 09:08:33 +0000 (11:08 +0200)]
Add a Makefile task to download the JanRain openid library into the include folder
Ignore that folder in git
Fix mixed space/tabs in Makefile
Vincent Zanotti [Sat, 25 Oct 2008 21:06:36 +0000 (23:06 +0200)]
Adds support of plat/al's aliases in Google Apps.
It will solve the issue of the "Sender:" header being added to outgoing mails on GoogleApps GMail.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 25 Oct 2008 17:23:59 +0000 (19:23 +0200)]
Fixes the include path for some of our scripts (platal/core split).
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Florent Bruneau [Thu, 23 Oct 2008 18:48:43 +0000 (20:48 +0200)]
Transition code from old validation request format.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Wed, 22 Oct 2008 19:54:19 +0000 (21:54 +0200)]
Modules MUST NOT try to reproduce authentication stuff from platal.php.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Wed, 22 Oct 2008 11:09:42 +0000 (13:09 +0200)]
Typos and text improvement.
Florent Bruneau [Tue, 21 Oct 2008 07:46:27 +0000 (09:46 +0200)]
With fixed seed, change the page every month.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 22:03:16 +0000 (00:03 +0200)]
The domain of the email must be included in the poisonous source file.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 21:33:12 +0000 (23:33 +0200)]
Don't get obfuscated.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 21:25:50 +0000 (23:25 +0200)]
Oops, don't activate this one.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 21:24:50 +0000 (23:24 +0200)]
Add poisonous email injector.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 19 Oct 2008 12:40:43 +0000 (14:40 +0200)]
Add mYk's poisonous email generator.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Vincent Zanotti [Sun, 19 Oct 2008 03:15:06 +0000 (05:15 +0200)]
Merge branch 'platal-0.9.17'
Vincent Zanotti [Sat, 18 Oct 2008 17:20:37 +0000 (19:20 +0200)]
Fixes an invalid submit button in GoogleApps password change box.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 18 Oct 2008 15:01:24 +0000 (17:01 +0200)]
Update ChangeLog.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 18 Oct 2008 14:58:34 +0000 (16:58 +0200)]
Migrates hruid upgrade script to version 0.9.18.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 18 Oct 2008 14:56:46 +0000 (16:56 +0200)]
Merge commit 'origin/hruid'
Vincent Zanotti [Sat, 18 Oct 2008 14:56:11 +0000 (16:56 +0200)]
Update core.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:19:45 +0000 (16:19 +0200)]
Use last version of core.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:18:15 +0000 (16:18 +0200)]
Removes 'bestalias' and 'forlife' from the session.
This switches the hruid branch to the "let's fix things that have been broken" mode.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:17:19 +0000 (16:17 +0200)]
Converts various user of the in-session 'bestalias' and 'forlife' values to hruid.
Vincent Zanotti [Sun, 12 Oct 2008 14:13:11 +0000 (16:13 +0200)]
Converts the Platal module to hruid (mainly two FIXME).
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:12:34 +0000 (16:12 +0200)]
Converts the remaining bits of the Profile module to hruid.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 03:50:08 +0000 (05:50 +0200)]
Migrates to hruid a few pages (axletter admin, ipwatch, search).
Adds a few TODO for forlife uses that are to be fixed later.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 03:48:13 +0000 (05:48 +0200)]
Migrates the PlSet views to hruid.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 02:12:37 +0000 (04:12 +0200)]
Converts the Events module to hruid. Rewrites the birthday/stale-profile code.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 18:58:47 +0000 (20:58 +0200)]
Fixes a security hole that did allow a third party website to reuse a valid
(challenge, response) pair. This pair, obtainable externally from an approved
groupex website, enabled it to discover personal information from Xs with a
permanent/valid cookie on Xorg.
The fix forces return url to match a defined regexp; backward compatibility is
retained, though the hole won't be fixed until all entries in groupex_auth are
added a non-empty return url regexp.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 18:24:44 +0000 (20:24 +0200)]
Converts auth-groupex to hruid; this doesn't fix the problem of the 'username' value, which will soon not be translatable to a valid email address anymore.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 17:40:09 +0000 (19:40 +0200)]
Converts module Carnet to the new hruid/User model.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 17:21:03 +0000 (19:21 +0200)]
Merge commit 'origin/master' into hruid
Conflicts:
modules/email.php
templates/emails/redirect.tpl
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 17:13:06 +0000 (19:13 +0200)]
Fixes use of object User in module GoogleApps.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Florent Bruneau [Mon, 6 Oct 2008 15:19:16 +0000 (17:19 +0200)]
Last version of core (again).
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 6 Oct 2008 15:17:13 +0000 (17:17 +0200)]
Use last version of core.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 6 Oct 2008 15:16:22 +0000 (17:16 +0200)]
Merge branch 'platal-0.9.17'
Conflicts:
plugins/compiler.checkpasswd.php
templates/events/rss.tpl
templates/xnetgrp/announce-rss.tpl
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 6 Oct 2008 15:10:42 +0000 (17:10 +0200)]
Better fix for RSS validation.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Sat, 27 Sep 2008 16:59:42 +0000 (18:59 +0200)]
Uses trig utilities whenever it is possible.
Vincent Zanotti [Sun, 28 Sep 2008 11:25:13 +0000 (13:25 +0200)]
Fixes hruid-incompatible changes from last merge.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 28 Sep 2008 11:14:11 +0000 (13:14 +0200)]
Merge commit 'origin/master' into hruid
Vincent Zanotti [Sun, 28 Sep 2008 10:26:54 +0000 (12:26 +0200)]
Updates the GoogleApps password, if required, when an above-10-chars password was successfuly detected and stored in the database.
Follow-up to
2b18a8ff and
79afc233.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Stéphane Jacob [Sat, 27 Sep 2008 15:48:51 +0000 (17:48 +0200)]
Adds labels around checkbox and radio inputs.
Stéphane Jacob [Sat, 27 Sep 2008 13:22:38 +0000 (15:22 +0200)]
Ajusts text for password changing according to
2b18a8ff.
Stéphane Jacob [Sat, 27 Sep 2008 13:08:17 +0000 (15:08 +0200)]
A few typos.
Florent Bruneau [Fri, 26 Sep 2008 06:35:12 +0000 (08:35 +0200)]
Don't send transition data if new_pass === old_pass.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Thu, 25 Sep 2008 19:34:49 +0000 (21:34 +0200)]
Remove MD5 -> SHA1 password transition and replace it by (10 characters -> 256 characters)
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Olivier Le Floch [Wed, 24 Sep 2008 19:15:40 +0000 (21:15 +0200)]
In the marketing administration page, fix display of marketings done by the mass-marketing script, which does not define a sender
- The query uses a LEFT JOIN in case sender is not a valid uid,
- If the sender is not found, then the template does not fill in his name in the output table.
Florent Bruneau [Tue, 23 Sep 2008 06:57:30 +0000 (08:57 +0200)]
No HTTPS for cyber_return and paypal_return.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Vincent Zanotti [Sun, 21 Sep 2008 20:24:50 +0000 (22:24 +0200)]
Merge commit 'origin/master' into hruid
Conflicts:
include/emails.inc.php
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 21 Sep 2008 20:09:09 +0000 (22:09 +0200)]
Merge commit 'origin/master' into hruid
Conflicts:
classes/xnetsession.php
include/validations/medals.inc.php
include/validations/nomusage.inc.php
include/validations/photos.inc.php
include/vcard.inc.php
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Florent Bruneau [Thu, 18 Sep 2008 13:48:41 +0000 (15:48 +0200)]
Race condition.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Wed, 27 Aug 2008 19:51:50 +0000 (21:51 +0200)]
Displays the list's full name in the confirmation mail.
Florent Bruneau [Thu, 4 Sep 2008 06:31:30 +0000 (08:31 +0200)]
Fix some issues with opt-in on rewrite.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Wed, 3 Sep 2008 21:17:24 +0000 (23:17 +0200)]
Opt-in for email rewriting.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Wed, 3 Sep 2008 19:09:05 +0000 (21:09 +0200)]
Change the text of the submit button when the password is not valid.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 1 Sep 2008 19:32:50 +0000 (21:32 +0200)]
Merge branch 'platal-0.9.17'
Vincent Zanotti [Sun, 10 Aug 2008 22:54:31 +0000 (00:54 +0200)]
Adds a missing xsrf token in lists moderator removal.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Florent Bruneau [Mon, 1 Sep 2008 19:22:00 +0000 (21:22 +0200)]
To avoid support requests, show an explicite message when the event exists but you don't have sufficient permissions to subscribe.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Mon, 1 Sep 2008 12:52:59 +0000 (14:52 +0200)]
Improves slightly the Minifiche and updates default skin accordingly (Closes #874).
Stéphane Jacob [Mon, 1 Sep 2008 09:38:53 +0000 (11:38 +0200)]
Helps users to give a proper url on .net (Closes #884).
Vincent Zanotti [Mon, 1 Sep 2008 00:18:53 +0000 (02:18 +0200)]
Updates core to latest version.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Mon, 1 Sep 2008 00:16:58 +0000 (02:16 +0200)]
Converts module Email to the new User/hruid model.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Florent Bruneau [Sun, 31 Aug 2008 19:40:24 +0000 (21:40 +0200)]
new PlArrayIterator is deprecated.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 31 Aug 2008 16:45:23 +0000 (18:45 +0200)]
XnetSession inherits XorgSession.
Avoid code duplication.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 31 Aug 2008 16:39:30 +0000 (18:39 +0200)]
List-RPC reads its host:port in configuration file.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 31 Aug 2008 11:50:54 +0000 (13:50 +0200)]
Some entries of geoloc_pays MUST NOT be used as a nationality.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 31 Aug 2008 09:25:18 +0000 (11:25 +0200)]
Merge branch 'platal-0.9.17'
Conflicts:
templates/events/rss.tpl
templates/xnetgrp/announce-rss.tpl
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 31 Aug 2008 09:21:17 +0000 (11:21 +0200)]
Fix a bug that breaks edit/emploi on IE.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sat, 30 Aug 2008 19:06:48 +0000 (21:06 +0200)]
Better error processing in list.rpc.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Thu, 28 Aug 2008 22:00:46 +0000 (00:00 +0200)]
Switch to the new VCard.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Aymeric Augustin [Wed, 27 Aug 2008 22:02:35 +0000 (00:02 +0200)]
Implement X.net ergonomy suggestions by BdB
Stéphane Jacob [Wed, 27 Aug 2008 19:51:50 +0000 (21:51 +0200)]
Displays the list's full name in the confirmation mail.
Stéphane Jacob [Wed, 27 Aug 2008 18:41:46 +0000 (20:41 +0200)]
Alters applis table to add MIA diploma.
Stéphane Jacob [Mon, 25 Aug 2008 07:51:13 +0000 (09:51 +0200)]
Changes sligthly the profile update display.
Vincent Zanotti [Sun, 24 Aug 2008 21:23:41 +0000 (23:23 +0200)]
Upgrades the profile to the new User/hruid model.
This is only a partial upgrade though, since the profile will benefit from the integration of all profile informations to the User object.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 21:18:49 +0000 (23:18 +0200)]
Updates User's fullName() to use nom_usage instead of nom when available.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 20:29:15 +0000 (22:29 +0200)]
Merge commit 'origin/master' into hruid
Vincent Zanotti [Sun, 24 Aug 2008 20:27:15 +0000 (22:27 +0200)]
Converts XnetList and the wiki to the new User/hruid model.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 20:24:06 +0000 (22:24 +0200)]
Converts the XnetGrp module to the new User/hruid model.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 18:32:02 +0000 (20:32 +0200)]
Converts the test_email smarty plugin to hruid.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 18:18:41 +0000 (20:18 +0200)]
Fixes a forlife issue in XorgSession::doAuth ('forlife' is know the full email address).
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 17:54:36 +0000 (19:54 +0200)]
Updates the cron scripts to the new User/Hruid model.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 17:38:46 +0000 (19:38 +0200)]
Updates the cron for homonymes, and its validation task.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 15:15:24 +0000 (17:15 +0200)]
Switches email related classes to the new User model.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 15:29:18 +0000 (17:29 +0200)]
Fixes non-referenced use of User, which would have led to a performance impact.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 15:32:59 +0000 (17:32 +0200)]
Updates hruid to latest version of core.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 14:02:15 +0000 (16:02 +0200)]
Migrates the validation architecture to an User-based model, instead of the deprecated uid-model.
Please note that this commit invalidates existing requests.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 00:29:30 +0000 (02:29 +0200)]
Removes the now unused make_forlife smarty function.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 24 Aug 2008 00:28:30 +0000 (02:28 +0200)]
Adds a security check on the existence of an hruid at registration time.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 23 Aug 2008 18:41:01 +0000 (20:41 +0200)]
Extends the user massadder to automatically set the hruid field, when a value can be computed.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 23 Aug 2008 18:04:53 +0000 (20:04 +0200)]
Updates minifiche template to use hruid instead of make_forlife and user_id (whenever possible).
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 23 Aug 2008 18:01:40 +0000 (20:01 +0200)]
Switches marketing/public and marketing/private pages to hruid based urls.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 23 Aug 2008 16:35:48 +0000 (18:35 +0200)]
Switches photo handler to new User model, and rewrites the method flow to handle in a better way non existant photos.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 23 Aug 2008 16:31:00 +0000 (18:31 +0200)]
Uses S::user()->login() instead of S::v('forlife') in all calls to PlUpload.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 23 Aug 2008 15:58:55 +0000 (17:58 +0200)]
Updates the test email sender method to the new User model.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 23 Aug 2008 15:53:06 +0000 (17:53 +0200)]
Updates implementation of User class to handle fields 'gender' and 'email_format'.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Florent Bruneau [Sat, 23 Aug 2008 15:44:52 +0000 (17:44 +0200)]
No more on_subscribe. It fortunately didn't work.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Vincent Zanotti [Sat, 23 Aug 2008 14:22:49 +0000 (16:22 +0200)]
Merge commit 'origin/master' into hruid
Conflicts:
classes/xnetsession.php
classes/xorgsession.php
core
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Florent Bruneau [Sat, 23 Aug 2008 13:40:25 +0000 (15:40 +0200)]
Update Makefile to build the core
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
projects / platal.git / log