| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-07-12 | Move side effects out of the 'Sessions' constructor. | wn_ | |
| 2024-07-11 | Add and use the 'Sessions' class. | wn_ | |
| 2024-07-05 | Switch to the non-deprecated form of 'session_set_save_handler'. | wn_ | |
| As of PHP 8.4 the form with more than 2 arguments is deprecated. This also does some initial work to make the functions behave closer to what SessionHandlerInterface describes. * https://php.watch/versions/8.4/session_set_save_handler-alt-signature-deprecated * https://wiki.php.net/rfc/deprecate_functions_with_overloaded_signatures * https://www.php.net/manual/en/class.sessionhandlerinterface.php | |||
| 2024-04-20 | Move 'include/functions.php' require into Composer autoloader. | wn_ | |
| Autoloader regenerated with 'composer dump-autoload --optimize'. | |||
| 2024-02-21 | add HOOK_VALIDATE_SESSION | Andrew Dolgov | |
| 2024-01-08 | Clean up some unused variables. | wn_ | |
| This is essentially https://gitlab.tt-rss.org/wn/tt-rss/-/commit/1ccc0c8c1af04dd9654b585c6d07e3a75d944a0c without the renames and some other things related to Psalm. | |||
| 2021-11-11 | Address PHPStan warnings in 'include/sessions.php'. | wn_ | |
| 2021-11-10 | add two helper account access levels: | Andrew Dolgov | |
| - read only - can't subscribe to more feeds, feed updates are skipped - disabled - can't login define used access levels as UserHelper constants and refactor code to use them instead of hardcoded numbers | |||
| 2021-06-25 | prolong PHP session cookie automatically to stop hard logouts after ↵ | Andrew Dolgov | |
| SESSION_COOKIE_LIFETIME expires | |||
| 2021-05-11 | use database-backed sessions in single user mode | Andrew Dolgov | |
| 2021-03-05 | sessions: stop validating against hash of user agent because chromium is sending | Andrew Dolgov | |
| different agent headers for whatever reason, example: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.192 Safari/537.36 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.104 Safari/537.36 seems to be related, at least, to App.postOpenWindow() hack. | |||
| 2021-03-04 | bring back web dbupdate using new migrations system | Andrew Dolgov | |
| 2021-03-04 | sessions: don't check schema version | Andrew Dolgov | |
| 2021-03-01 | userhelper: use orm for a few more user-related things | Andrew Dolgov | |
| 2021-03-01 | move startup checks to Config, set a bunch of @deprecated annotations | Andrew Dolgov | |
| 2021-02-25 | cache schema version better | Andrew Dolgov | |
| 2021-02-25 | stop caching schema version entirely, fix some session_start() related warnings | Andrew Dolgov | |
| 2021-02-23 | rename TTRSS_SESSION_NAME to SESSION_NAME | Andrew Dolgov | |
| 2021-02-23 | cleanup some defined-stuff | Andrew Dolgov | |
| 2021-02-22 | don't include config.php everywhere | Andrew Dolgov | |
| 2021-02-22 | wip: initial for config object | Andrew Dolgov | |
| 2021-02-22 | fix several issues reported by phpstan | Andrew Dolgov | |
| 2021-02-16 | move session-related functions to their own namespace | Andrew Dolgov | |
| 2021-02-15 | remove the rest of db.php; rename some leftover methods in feeds | Andrew Dolgov | |
| 2021-02-12 | add HTTP_ACCEPT_LANGUAGE handling for php8 | Andrew Dolgov | |
| 2021-02-08 | remove PHPMD.UnusedFormalParameter | Andrew Dolgov | |
| 2021-02-06 | more php8 fixes mostly related to login | Andrew Dolgov | |
| 2020-09-30 | set session.cookie_lifetime to 0 initially instead of a rather useless min() | Andrew Dolgov | |
| 2020-09-17 | rename gettext.inc to gettext.inc.php (cosmetic) | Andrew Dolgov | |
| 2019-12-18 | remove version.php and VERSION global constant, do version-related things in ↵ | Andrew Dolgov | |
| a slightly less ridiculous way | |||
| 2019-04-11 | add hidden _SKIP_SESSION_UA_CHECKS tunable | Andrew Dolgov | |
| 2018-10-16 | fix session write handler always assuming that database entry exists and ↵ | Andrew Dolgov | |
| failing silently if it doesn't; remove session cookie-related hacks | |||
| 2018-10-16 | remove session REMOTE_ADDR checks | Andrew Dolgov | |
| 2018-10-15 | do not use separate _ssl cookie for secure sessions | Andrew Dolgov | |
| 2018-10-15 | force regenerate session id on successful login, remove previous blank SID check | Andrew Dolgov | |
| 2018-10-15 | if empty session is autostarted because of a cookie, immediately destroy it | Andrew Dolgov | |
| 2018-10-15 | validate_session: bring back IP session binding (enabled by default) and UA ↵ | Andrew Dolgov | |
| checking | |||
| 2017-12-01 | sessions: PDO | Andrew Dolgov | |
| 2017-07-17 | sessions: use is_server_https() for secure cookie setting | Andrew Dolgov | |
| 2017-07-17 | $_SERVER['HTTPS'] can be exists and 'off' for non-https connectios | Natan Frei | |
| 2017-07-13 | rework previous 32 bit session stuff | Andrew Dolgov | |
| 2017-07-13 | sessions: clip max expiry value to a 32bit integer | Andrew Dolgov | |
| 2017-04-26 | remove some redundant php closing tags | Andrew Dolgov | |
| 2017-04-26 | fix various issues reported by static analysis | Andrew Dolgov | |
| update gitlab-ci config | |||
| 2015-12-07 | ttrss_gc: return true | Andrew Dolgov | |
| 2015-08-21 | remove SESSION_CHECK_ADDRESS | Andrew Dolgov | |
| 2015-01-31 | session: don't try to validate session schema version on empty sessions | Andrew Dolgov | |
| 2015-01-30 | do not invalidate session when version_static and user agent changes | Andrew Dolgov | |
| 2013-07-06 | better error reporting in session validation | Andrew Dolgov | |
| 2013-04-24 | use static version for session checking, show latest changeset for git ↵ | Andrew Dolgov | |
| version instead of head date | |||