360 Commits

Author	SHA1	Message	Date
calzoneman	3a7acd0526	Implement new session system ... I replaced the old login system with a more secure one. Instead of storing cookies containing the username and plaintext password, the password is submitted once to obtain a session hash, which is valid for a given length of time. Registering and logging in is now done via an iframe, which prevents custom javascript from having access to the password field. Site admins need to run the following SQL before updating, or else all of your logins/registrations will fail: ALTER TABLE `registrations` ADD `session_hash` VARCHAR( 64 ) NOT NULL , ADD `expire` BIGINT NOT NULL	2013-04-25 22:50:12 -05:00
calzoneman	a88088f2d6	Continue working on API	2013-04-25 16:16:53 -05:00
calzoneman	57475d5d3d	Show name of who added something (Issue #50) ... Hovering over a queue item will now show the name of the person who added it. If it was added by a guest, or if it was added while the server was running a previous version, it will show up as "unknown".	2013-04-24 13:10:08 -05:00
calzoneman	0d7da77715	Add version update script	2013-04-23 16:16:43 -05:00
calzoneman	ce34a3efe0	Tweak express instance to support /r/channel form ... This means it is no longer necessary to perform a .htaccess hack if you want nice URLs. By default, hostname:port/r/channel acts the same as hostname:port/index.html?channel=channel.	2013-04-22 14:42:39 -05:00
Calvin Montgomery	bb019deeb7	Implement ACL for channel owners (Issue #42)	2013-04-22 22:28:40 +04:00
calzoneman	7b6bba3697	Fix version number	2013-04-20 20:21:03 -05:00
calzoneman	9338905519	Minor fix- greentext and escaping youtube queries	2013-04-17 23:24:37 -05:00
calzoneman	a93e7fe3c2	Switch from connect to express	2013-04-17 13:42:29 -05:00
calzoneman	e8dfb616ea	Add package.json	2013-04-14 18:16:48 -05:00