Commit Graph

142 Commits

Author SHA1 Message Date
westi 42aaa50b6f Fix notice in check_admin_referrer.
git-svn-id: http://svn.automattic.com/wordpress/trunk@9026 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-09-28 21:08:25 +00:00
ryan d3abd242b0 Don't append HTTPOnly if cookie domain is empty. see #7677
git-svn-id: http://svn.automattic.com/wordpress/trunk@8811 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-09-05 05:35:58 +00:00
ryan 49fe9a77a4 No HTTPOnly for Safari
git-svn-id: http://svn.automattic.com/wordpress/trunk@8810 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-09-05 00:10:34 +00:00
ryan b4de7baf2a HttpOnly for PHP < 5.2. Props _ck_. see #7677
git-svn-id: http://svn.automattic.com/wordpress/trunk@8808 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-09-04 19:55:30 +00:00
ryan c38f460aa6 Try out httponly for auth cookies. see #7677
git-svn-id: http://svn.automattic.com/wordpress/trunk@8798 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-09-03 18:24:28 +00:00
ryan 37d88adaff Don't ignore scheme when cookie value is empty. Props bendalton. fixes #7521
git-svn-id: http://svn.automattic.com/wordpress/trunk@8731 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-25 21:09:26 +00:00
ryan 8dfd6d050f Do secure redirect only for admin destinations. see #7561
git-svn-id: http://svn.automattic.com/wordpress/trunk@8730 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-25 20:40:34 +00:00
ryan dccf7edf8e wp_rand() - more randy rands
git-svn-id: http://svn.automattic.com/wordpress/trunk@8728 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-25 17:52:28 +00:00
ryan 203086a4de Option to force SSL. see #7561
git-svn-id: http://svn.automattic.com/wordpress/trunk@8701 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-21 17:40:38 +00:00
ryan 01e3a5ec79 Some cookie validation hooks. fixes #7440
git-svn-id: http://svn.automattic.com/wordpress/trunk@8696 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-21 00:08:25 +00:00
westi bfa931c5d1 alt attibutes for get_avatar(). Fixes #7523 props Speedboxer.
git-svn-id: http://svn.automattic.com/wordpress/trunk@8661 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-17 11:23:49 +00:00
ryan 35b18e5034 Trailing whitespace cleanup
git-svn-id: http://svn.automattic.com/wordpress/trunk@8600 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-09 05:36:14 +00:00
ryan 642c8d9b54 Fix Text/Diff includes. Props codestyling. fixes #7391 for trunk
git-svn-id: http://svn.automattic.com/wordpress/trunk@8581 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-07 21:02:07 +00:00
markjaquith 74c46749cb Cast to array when using foreach(). Props santosj (and thanks for your perseverance!). fixes #2784
git-svn-id: http://svn.automattic.com/wordpress/trunk@8572 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-06 20:31:54 +00:00
azaozz dc9f3139a1 Revert 8562
git-svn-id: http://svn.automattic.com/wordpress/trunk@8564 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-06 00:44:40 +00:00
azaozz 0c6394a0b9 Stop fatal error in post revisions when setting the include path is disabled. Props santosj, for 2.7
git-svn-id: http://svn.automattic.com/wordpress/trunk@8562 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-08-05 23:56:52 +00:00
westi f69ddab179 Make lost password admin notification pluggable. Fixes #7430 props error.
git-svn-id: http://svn.automattic.com/wordpress/trunk@8489 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-07-29 20:21:34 +00:00
ryan 8750ed2ea1 Workaround PHP parse_url() bug. Props azaozz. fixes #7288
git-svn-id: http://svn.automattic.com/wordpress/trunk@8324 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-07-13 05:16:54 +00:00
ryan 775ea980f3 Set auth cookie for plugins directory to support direct load plugin files that call auth_redirect(). see #7001
git-svn-id: http://svn.automattic.com/wordpress/trunk@8209 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-06-27 22:54:21 +00:00
ryan 63b5bd26fe Only use SSL for login POST links if SSL logins are forced. Clear old cookies. see #7001
git-svn-id: http://svn.automattic.com/wordpress/trunk@8197 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-06-26 16:40:04 +00:00
ryan 636c562256 SSL fixes. see #7001
git-svn-id: http://svn.automattic.com/wordpress/trunk@8190 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-06-24 22:19:27 +00:00
ryan 683acd8245 phpdoc updates from jacobsantos. see #7038
git-svn-id: http://svn.automattic.com/wordpress/trunk@8164 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-06-22 20:23:23 +00:00
ryan f5e12d887b Handle cc and bcc. Props MattyRob. fixes #6899
git-svn-id: http://svn.automattic.com/wordpress/trunk@8098 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-06-16 20:02:10 +00:00
ryan 6adcab8b27 Introduce logged_in cookie. Deliver auth cookies only to wp-admin. see #7001
git-svn-id: http://svn.automattic.com/wordpress/trunk@8069 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-06-11 17:25:55 +00:00
ryan c790febe36 More use of site_url(), admin_url(), and site_url(). Force login and admin links to be https if FORCE_SSL_LOGIN. see #7001
git-svn-id: http://svn.automattic.com/wordpress/trunk@8058 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-06-06 07:39:11 +00:00
ryan 9771ec5110 First cut and better admin SSL support. see #7001
git-svn-id: http://svn.automattic.com/wordpress/trunk@7998 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-05-27 17:46:01 +00:00
ryan c85f779dbb gettext fix from thenlich. fixes #6993 for trunk
git-svn-id: http://svn.automattic.com/wordpress/trunk@7996 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-05-27 11:42:32 +00:00
ryan 129d030c20 Move autosave to post revisions. Props mdawaffe. see #6775
git-svn-id: http://svn.automattic.com/wordpress/trunk@7907 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-05-08 17:25:07 +00:00
ryan 76dfbdfb11 Add blank to default avatars. Rename default to Mystery Man. see #6802
git-svn-id: http://svn.automattic.com/wordpress/trunk@7886 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-05-04 18:05:20 +00:00
ryan fbcbedc4f0 Default avatar selector. Props Viper007Bond. see #6802
git-svn-id: http://svn.automattic.com/wordpress/trunk@7879 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-05-03 00:56:16 +00:00
ryan 87b1154989 Add arg to make special chars optional when generating passwords. fixes #6842 for trunk
git-svn-id: http://svn.automattic.com/wordpress/trunk@7836 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-04-25 17:12:25 +00:00
ryan 76a87862bf Add some sanity checks
git-svn-id: http://svn.automattic.com/wordpress/trunk@7821 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-04-25 06:20:18 +00:00
ryan 0101f8809d strlen - 1. Props mdawaffe. see #6146
git-svn-id: http://svn.automattic.com/wordpress/trunk@7802 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-04-24 01:13:35 +00:00
ryan eb9c8420db hash_hmac is always available. Drop function_exists check
git-svn-id: http://svn.automattic.com/wordpress/trunk@7797 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-04-24 00:30:49 +00:00
ryan 4680f8f084 Add length arg to wp_generate_password() and lengthen secret. Props tellyworth. fixes #6146 for trunk
git-svn-id: http://svn.automattic.com/wordpress/trunk@7796 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-04-24 00:19:09 +00:00
ryan 35086b850f Post revisions from mdawaffe. see #6775
git-svn-id: http://svn.automattic.com/wordpress/trunk@7747 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-04-18 23:38:21 +00:00
ryan 36c9588f08 phpdoc typo fix from filosofo. fixes #6712 for trunk
git-svn-id: http://svn.automattic.com/wordpress/trunk@7642 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-04-14 15:53:09 +00:00
ryan 77d5b58105 Rehash old md5 hashes inside of wp_check_password() to make hashing more pluggable.
git-svn-id: http://svn.automattic.com/wordpress/trunk@7555 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-27 22:44:47 +00:00
ryan 8dcc9e02fa Close img tag. Props Otto42. fixes #6339
git-svn-id: http://svn.automattic.com/wordpress/trunk@7461 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-21 21:39:28 +00:00
markjaquith 15b17df867 moderation.php is no more. All hail edit-comments.php?comment_status=moderated
git-svn-id: http://svn.automattic.com/wordpress/trunk@7391 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-18 23:24:04 +00:00
ryan cd4894370a More nonce renewals from andy. fixes #6266
git-svn-id: http://svn.automattic.com/wordpress/trunk@7376 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-18 04:59:54 +00:00
ryan 34d67f9907 Renew autosave nonce. Props andy. fixes #6266
git-svn-id: http://svn.automattic.com/wordpress/trunk@7375 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-18 02:43:20 +00:00
westi ef53fc4b54 Give the default avatar some class.
git-svn-id: http://svn.automattic.com/wordpress/trunk@7333 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-16 16:55:31 +00:00
westi b871aff737 Allow plugins to filter the redirect status as well as the location. See #4790.
git-svn-id: http://svn.automattic.com/wordpress/trunk@7319 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-15 20:50:49 +00:00
westi 6c14cad3c9 Change the default size avatar back to 96 now we are using the new gravatar.com api which supports bigger sizes.
git-svn-id: http://svn.automattic.com/wordpress/trunk@7308 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-15 08:27:28 +00:00
markjaquith df240cb60c Use newer Gravatar URL style. props link2caro. fixes #6229
git-svn-id: http://svn.automattic.com/wordpress/trunk@7306 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-15 02:23:27 +00:00
ryan 5ca43fe40b Update get_avatar() phpdoc
git-svn-id: http://svn.automattic.com/wordpress/trunk@7158 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-04 22:52:36 +00:00
ryan bf8f7b0f28 Make sure avatar size is numeric. Props Martin2006. fixes #6069
git-svn-id: http://svn.automattic.com/wordpress/trunk@7132 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-02 21:41:35 +00:00
ryan 04c9051a7d Remove trailing whites.
git-svn-id: http://svn.automattic.com/wordpress/trunk@7130 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-03-02 20:17:30 +00:00
ryan 259bc26542 urlencode only when needed. Props spikeyslam. see #5775
git-svn-id: http://svn.automattic.com/wordpress/trunk@7096 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-02-28 22:01:56 +00:00