moon
/
sync
mirror of https://github.com/calzoneman/sync.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,522 Commits 12 Branches 9 Tags 14 MiB
Commit Graph

114 Commits

Author SHA1 Message Date
calzoneman 5e5ff5f414 Fix chat antiflood (#56) 2013-04-27 12:13:37 -05:00
calzoneman d5fc0bb03d Fix 'that username is already taken' login bug 2013-04-26 12:50:31 -05:00
calzoneman 84fb4214d7 Fix cross-domain issues 2013-04-25 23:57:46 -05:00
calzoneman 087f612b37 Bugfixes for last commit 
- Fix race condition for login frame
- Fix guest logins
 2013-04-25 23:04:51 -05:00
calzoneman 3a7acd0526 Implement new session system 
I replaced the old login system with a more secure one.
Instead of storing cookies containing the username and plaintext password, the password
is submitted once to obtain a session hash, which is valid for a given length of time.
Registering and logging in is now done via an iframe, which prevents custom javascript from having access to the password field.
Site admins need to run the following SQL before updating, or else all of your logins/registrations will fail:

ALTER TABLE `registrations` ADD `session_hash` VARCHAR( 64 ) NOT NULL ,
ADD `expire` BIGINT NOT NULL
 2013-04-25 22:50:12 -05:00
calzoneman a88088f2d6 Continue working on API 2013-04-25 16:16:53 -05:00
calzoneman 57475d5d3d Show name of who added something (Issue #50) 
Hovering over a queue item will now show the name of the person who added it.
If it was added by a guest, or if it was added while the server was running a previous version, it will show up as "unknown".
 2013-04-24 13:10:08 -05:00
calzoneman 0d7da77715 Add version update script 2013-04-23 16:16:43 -05:00
calzoneman ce34a3efe0 Tweak express instance to support /r/channel form 
This means it is no longer necessary to perform a .htaccess hack if you want nice URLs.
By default, hostname:port/r/channel acts the same as hostname:port/index.html?channel=channel.
 2013-04-22 14:42:39 -05:00
Calvin Montgomery bb019deeb7 Implement ACL for channel owners (Issue #42) 2013-04-22 22:28:40 +04:00
calzoneman 7b6bba3697 Fix version number 2013-04-20 20:21:03 -05:00
calzoneman 9338905519 Minor fix- greentext and escaping youtube queries 2013-04-17 23:24:37 -05:00
calzoneman a93e7fe3c2 Switch from connect to express 2013-04-17 13:42:29 -05:00
calzoneman e8dfb616ea Add package.json 2013-04-14 18:16:48 -05:00