17 Commits

Author SHA1 Message Date
Fraenkiman
e1988062f6 fix css
fix css
2023-10-02 01:13:45 +02:00
Fraenkiman
828408382b Duplicate name check removed
Duplicate name check removed
2023-10-01 22:42:45 +02:00
Fraenkiman
66ff2f76f1 Update main.lib.php 2023-09-30 21:33:55 +02:00
Fraenkiman
326f5aa163 - Error messages now multilingual
- Error messages are now supported in multiple languages
2023-09-01 23:09:33 +02:00
Fraenkiman
759a459e01 Update main.lib.php 2023-09-01 00:45:06 +02:00
Fraenkiman
36df32236c Update main.lib.php
- Username can only contain letters, numbers and 1 underscore.
2023-08-31 23:59:53 +02:00
Fraenkiman
f12ac4cc3a Update step2.lib.php
Adds the welcome entry to the Author FlatPress.
Also for the static pages menu and about.

See https://github.com/flatpressblog/flatpress/issues/99#issuecomment-1159540059
2023-03-27 01:41:31 +02:00
azett
5f23b4c2ea fixes #176, possible XSS in setup 2022-12-25 14:16:25 +01:00
azett
83e1644c0f Restored some changes from the last commit. Turns out, the HASHSALT_FILE is still used elsewhere ó_Ò 2020-12-19 19:25:52 +01:00
azett
f265b22b0b Fix for #59: Updated password hash algorithm from md5 to bcrypt (via password_hash() function). Thanks a lot, @axelhahn!
In detail: Added function io_delete_file(). Removed system_hashsalt_save(). Added password hash update mechanics to user_login().
2020-12-19 14:02:27 +01:00
azett
e1c47d5b8c Setup sets date and FP version for the freshly created static pages. 2020-04-16 14:15:22 +02:00
real_nowhereman
29a9e6bbd1 suppressing "file not found" errors for indices, fall back to 404 error; correctly return seek position when inserting into SBPlusTrees 2008-09-08 15:20:07 +00:00
real_nowhereman
c0642e4f0f huge security commit, this should be an almost hassle-free hash salt: the salt is created on setup and then STORED in fp-content/config/hashsalt.conf.php
(you can change the name of the file from defaults.php); 

as salt is based on the path on the server, if you had to move to another directory or to another server, then you wouldn't be able to login anymore and you had to reinstall, now this shouldn't be needed anymore; moreover as this is now safe in a file we can add additional security by
* concatenating the default paths+random blog id to another random number, which is not written anywhere else
* changing the contents with your very own salt string: then re-run setup and overwrite your old user: the hashsalt won't be overwritten (this needs testing)
2008-02-10 14:20:09 +00:00
real_nowhereman
fbe0b42e25 fixed write checks and error reporting 2008-01-01 19:58:10 +00:00
real_nowhereman
725a70f1d0 finally moved from simple md5 to salted wp_hash ; please remember to REINSTALL and OVERWRITE your old user in order to be able to login ! 2008-01-01 09:34:41 +00:00
real_nowhereman
6be77d10df added sample content generation to setup, fixed h4 in leggero/res/common.css 2007-11-02 16:54:01 +00:00
real_nowhereman
a68630bf35 First revision of FlatPress Crescendo+1 ( 0.703+n :) ) 2007-10-30 10:30:07 +00:00