mango r106 - in trunk: . lib www



Author: ovitters
Date: 2007-09-27 18:05:26 +0100 (Thu, 27 Sep 2007)
New Revision: 106
ViewCVS link: http://svn.gnome.org/viewcvs/mango?rev=106&view=rev

Modified:
   trunk/ChangeLog
   trunk/lib/user.php
   trunk/www/common.php
   trunk/www/login.php
   trunk/www/new_user.php
Log:
	Be more paranoid.
	* lib/user.php: Check for valid user.
	* www/common.php: Change session settings to be more secure.
	* www/login.php:  Avoid session fixation attacks by use of
	session_regenerate_id.
	* www/new_user.php: Use update_status instead of obsolete
	update_verdict.






[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]