Commit Graph
57 Commits
Author SHA1 Message Date
cigamit 80b483b559 more prepared statements
preparing for turning off magic quotes
2016-08-27 17:26:53 -05:00
cigamit 63f80ec9d6 formatting 2016-05-22 10:16:08 -05:00
cigamit 37dfdb2edc change password redirection not working 2016-05-09 19:36:18 -05:00
Browniebraun 61d9812fbb i18n updates 2016-04-26 21:59:46 +02:00
Micke2k 9cf968a76c Fix for addparser error in auth_changepassword 2016-03-23 22:24:09 +04:00
cigamit 4451d8fb2a support strong password when changing passwords
correct a few spacing issues as well
2016-03-20 14:19:57 -05:00
Micke2k 0fe822a949 Added tooltip to changepassword
Fixed "ok" message when changing passwords.

Somethings that still needs to be looked at

1. can i read the friendly_name of the array with read_config_option? I want to read it from the array instead of typing it:

                    "Require Mix Case: " .read_config_option('secpass_reqmixcase') . "<br>" .

2. Because this function it still forces you to use a new password even to secpass_history default is set to 0. Change secpass_history default to 1 and remove it?

    if ($user['password'] == md5(get_nfilter_request_var('password'))) {
        $bad_password = true;
        $errorMessage = "<span color='#FF0000'>Your new password can not be the same as the old password.  Please try again.</span>";
    }

3. I had to add font-awesome since it wasn't referenced anywhere in themes. Better way to do it?

Any input is welcome!
2016-03-19 20:23:52 +04:00
cigamit f2edfcbe53 update theme to a user setting 2016-02-14 10:48:34 -06:00
cigamit 26053b7527 replace deprecated get_request_var_post() with get_nfilter_request_var()
replace the deprecated calls and also start developer mode injection
checking
2016-02-11 16:46:14 -06:00
cigamit 2387bd4a08 removing many $_GET, $_REQUEST, and $_POST variable usage
There are still three steps to go in this overall.  The first is to
replace all the page filtering session storing and validation functions
and the second is to propagate those changes into various areas of the
lib directory that include the use of the various variables, lastly,
developer mode will have to be enable to see if there are any variables
used in the code that have not been sanitized.  Note, at this point the
develop branch should be thought of as slightly unstable
2016-02-07 12:51:49 -06:00
Linegod 8dadf2d9a9 first pass of _POST to get_request_var_post 2016-02-06 10:44:05 -06:00
Linegod dabfabf219 replace ['action'] with set_default_action 2016-02-06 09:57:05 -06:00
Micke2k d188f1631d Change Copyright year 2015 -> 2016 2016-01-29 21:46:02 +04:00
cigamit 253b34c591 Remove <strong> tags where prudent 2015-09-07 21:30:04 -05:00
cigamit 4547bdafc0 Resolving issues with password management
Create a 'Change Password' user option in user_auth table
Don't show 'Change Password' unless user is in Local realm and has
permission
Move $auth_realms function to a library call
Add message when a user attempts to access auth_changepassword.php
incorrectly
2015-08-08 22:28:37 -05:00
cigamit f49357c71b HTML5 Support
changes to support html5
2015-05-15 22:29:42 -05:00
Jimmy Conner 5bde3da972 1) Update Copyright Years Correct a few minor CY Issues
2) Allow Locking/UnLocking of Graphs
3) ToolTips
4) Correct Minor Issues with Login/Out/Permission associated with Theme JS
5) Upgrade jQuery which has Fixes for Major issue in Safari 7/8.1

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7662 860744bd-22fc-0310-8c96-e9fe5004b5ca
2015-01-04 01:52:50 +00:00
Jimmy Conner 3cc4018310 Integrate Secpass plugin into the core
Add function to installer to allow easy adding of columns, just like plugins have

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7633 860744bd-22fc-0310-8c96-e9fe5004b5ca
2014-12-30 05:53:31 +00:00
Jimmy Conner 5646c33484 A little bit of cleanup
Change double quotes to single quotes where possible
Move to prepared statements were possible
Fix line endings on a few files

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7609 860744bd-22fc-0310-8c96-e9fe5004b5ca
2014-12-25 07:00:57 +00:00
Jimmy Conner f15161aba2 1) Correct change password redirect loop.
2) Remove 'legacy_menu_nav' option in settings
3) Add 'placeholder' as a form option
4) Fix undefined variable when logging in using authentication tokens
5) Convert Cacti to use PHPMailer Class
6) Add option to send emails through secure connections SSL/TLS
7) Minor form Cleanup
8) Add SMTP Ping Function for Quick Tests
9) Minor CSS change in Classic mode

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7607 860744bd-22fc-0310-8c96-e9fe5004b5ca
2014-12-24 19:55:18 +00:00
Jimmy Conner a3424967e4 1) Reverted cacti login image (attached)
2) Change password now requests current password too
3) Place 'Change Password' link on page if auth_method==1.  Thinking that this should be a user_profile.php page instead....


git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7585 860744bd-22fc-0310-8c96-e9fe5004b5ca
2014-12-22 01:56:46 +00:00
Tony Roman 65be30ffe0 Update copyright to 2014
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7437 860744bd-22fc-0310-8c96-e9fe5004b5ca
2014-03-30 19:54:50 +00:00
Tony Roman ce40281901 Update copyright to 2013 for 0.8.8
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7386 860744bd-22fc-0310-8c96-e9fe5004b5ca
2013-07-21 23:00:42 +00:00
Tony Roman a257958a0b Update copyright to 2012
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@7016 860744bd-22fc-0310-8c96-e9fe5004b5ca
2012-02-27 07:04:37 +00:00
Tony Roman 2d039dd7db Merge PIA into 0.8.7 branch
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@7006 860744bd-22fc-0310-8c96-e9fe5004b5ca
2012-02-27 01:14:45 +00:00
Tony Roman 4ea04c2d1a Fix issue with forced password change not working corrrectly Bug:1998
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@6380 860744bd-22fc-0310-8c96-e9fe5004b5ca
2011-06-06 01:52:46 +00:00
Reinhard Scheck d94dbd9850 -bug#0001967: Reflected XSS on Cacti 0.8.7g
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@6355 860744bd-22fc-0310-8c96-e9fe5004b5ca
2011-03-27 08:11:30 +00:00
Tony Roman 9acba795fe Update copyright to 2011
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@6233 860744bd-22fc-0310-8c96-e9fe5004b5ca
2011-01-27 03:44:05 +00:00
Larry Adams ca27b126b3 -bug#0001773: character encoding problem after upgrade to 0.8.7f
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@5981 860744bd-22fc-0310-8c96-e9fe5004b5ca
2010-06-06 16:23:06 +00:00
Larry Adams 53cb8a11b5 QA: Adding form actions
QA: Removing height,width elements
QA: Removing some absmiddle
QA: Resolving some duplicated elements issues
QA: Resolving several CSS warnings

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@5865 860744bd-22fc-0310-8c96-e9fe5004b5ca
2010-05-04 18:29:29 +00:00
Larry Adams c3c831c1b5 QA: Background color's missing #
QA: Several lists missing "<ul></ul>" tags
QA: Message manipulation feature
QA: HtmlSpecialChars almost everywhere
QA: Removed some proprietary 'background' statements
QA: Went "almost" transitional.  Export forces not.
QA: Some issues with user_admin.php

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@5856 860744bd-22fc-0310-8c96-e9fe5004b5ca
2010-05-04 08:35:24 +00:00
Larry Adams c5403f3844 QA: Update copyrights
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@5806 860744bd-22fc-0310-8c96-e9fe5004b5ca
2010-04-28 03:48:09 +00:00
Tony Roman 26d1957d62 Update copyright to 2009
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@4931 860744bd-22fc-0310-8c96-e9fe5004b5ca
2009-02-11 22:53:50 +00:00
Tony Roman de5abe2b98 0001238: Guest user has access to change password
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@4695 860744bd-22fc-0310-8c96-e9fe5004b5ca
2008-09-04 01:08:15 +00:00
Larry Adams 22f9e12ddb Update Copyright Notice for 2008.
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@4434 860744bd-22fc-0310-8c96-e9fe5004b5ca
2008-01-29 00:40:43 +00:00
Tony Roman 4fe05b968b Altered config.php, and include/config_* to include/global_*
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/branches/BRANCH_0_8_6/cacti@4007 860744bd-22fc-0310-8c96-e9fe5004b5ca
2007-07-05 04:45:43 +00:00
Larry Adams fa96f3aea8 simple cleanup.
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/branches/BRANCH_0_8_6/cacti@3993 860744bd-22fc-0310-8c96-e9fe5004b5ca
2007-06-25 16:46:43 +00:00
Tony Roman e625781ec6 Typos suck and I'm glad I have a script to update copyrights
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/branches/BRANCH_0_8_6/cacti@3898 860744bd-22fc-0310-8c96-e9fe5004b5ca
2007-03-04 20:17:57 +00:00
Tony Roman 8ff975973a Proper date range needed in copyright
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/branches/BRANCH_0_8_6/cacti@3896 860744bd-22fc-0310-8c96-e9fe5004b5ca
2007-03-04 20:11:14 +00:00
Tony Roman e116f23ff7 Copyright update for php files
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/branches/BRANCH_0_8_6/cacti@3894 860744bd-22fc-0310-8c96-e9fe5004b5ca
2007-03-04 19:30:21 +00:00
Tony Roman fb00dc5bc4 fixed access denied problem when user doesn't have console access
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/branches/BRANCH_0_8_6/cacti@2299 860744bd-22fc-0310-8c96-e9fe5004b5ca
2004-11-24 01:53:42 +00:00
Ian Berry 9014054837 updated the copyright to 2004
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/trunk/cacti@1469 860744bd-22fc-0310-8c96-e9fe5004b5ca
2004-01-19 06:05:14 +00:00
Ian Berry 96e9807b81 get rid of session_start() call
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/trunk/cacti@1363 860744bd-22fc-0310-8c96-e9fe5004b5ca
2003-11-11 01:10:42 +00:00
Ian Berry fb72824f09 add basename() to all PHP_SELF references to stick to relative hrefs
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/trunk/cacti@1303 860744bd-22fc-0310-8c96-e9fe5004b5ca
2003-10-28 05:19:40 +00:00
Ian Berry 39866609d3 unified all edit form code; updated references to the new 'lib/' directory
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/trunk/cacti@1228 860744bd-22fc-0310-8c96-e9fe5004b5ca
2003-09-22 04:31:58 +00:00
Ian Berry 284cf7db75 redirect to the correct page after a forced password change
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/trunk/cacti@1107 860744bd-22fc-0310-8c96-e9fe5004b5ca
2003-07-14 21:46:18 +00:00
Ian Berry 7a3e79946b changed $_SERVER["SCRIPT_NAME"] to $_SERVER["PHP_SELF"]
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/trunk/cacti@1023 860744bd-22fc-0310-8c96-e9fe5004b5ca
2003-06-08 14:47:59 +00:00
Ian Berry 5c9f69d06c fixed use of register_globals var
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/trunk/cacti@1010 860744bd-22fc-0310-8c96-e9fe5004b5ca
2003-05-31 19:46:25 +00:00
Ian Berry 575e8fd81a fixed two undefined variable references
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/trunk/cacti@801 860744bd-22fc-0310-8c96-e9fe5004b5ca
2003-04-01 06:52:52 +00:00
Ian Berry 2d9df225b9 replaced use of session_unregister() with kill_session_var()
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/trunk/cacti@782 860744bd-22fc-0310-8c96-e9fe5004b5ca
2003-03-27 03:56:19 +00:00