19 Commits

Author SHA1 Message Date
Remy Sharp
c238e6ea51 Move to using PATH instead of ROOT. Fixes #173 2012-06-08 00:01:59 +01:00
Remy Sharp
f3f2952dc2 Fixed both history preview url, and always format with /1 if no rev.
Note that there's a bug ref #172
2012-06-04 22:28:25 +02:00
Remy Sharp
c7b18cc2ad Fixed log in in PHP version. 2012-06-04 20:31:24 +02:00
Aron Carroll
382f8575ff URL's returned by PHP app no longer have broken urls 2012-06-03 22:47:31 +01:00
Aron Carroll
a4f23881cb Fixed loading of custom CSS into PHP application 2012-05-27 12:28:05 +01:00
Remy Sharp
ff77251ba7 Add root to the edit path 2012-05-25 17:02:37 +01:00
Aron Carroll
54bdaa6280 Merge branch 'next/3' into 'feature/node'
Massive merge I'm sure nearly everything is broken :)

Conflicts:
	config.default.php
	index.php
	js/chrome/download.js
	public/app.php
	public/font/fontawesome-webfont.eot
	public/font/fontawesome-webfont.svg
	public/font/fontawesome-webfont.svgz
	public/font/fontawesome-webfont.ttf
	public/font/fontawesome-webfont.woff
	public/font/pictos-web.eot
	public/font/pictos-web.svg
	public/font/pictos-web.ttf
	public/font/pictos-web.woff
	public/js/chrome/login.js
	public/js/chrome/navigation.js
	public/js/jsbin.js
2012-05-25 14:17:32 +01:00
Aron Carroll
20d6eebd31 Refactor downloads in PHP app
Now download is accessed via GET request and a download action. Also
removed all download logic from the save code (wooo).
2012-05-25 13:24:03 +01:00
Aron Carroll
438514ec95 Use the html title first when extracting a title for a bin
Not sure why it doesn't do this by default. It seems more consistent to
use the title.
2012-05-18 14:47:50 +01:00
Aron Carroll
3da0afb6ec Improved session security in the PHP app
Each session cookie is now prefixed with a hash. If the contents of the
cookie is changed then the hash will not validate on read and it's
contents will not be used.
2012-05-18 14:24:57 +01:00
Aron Carroll
3e4131e8d7 Implement logout in the PHP app 2012-05-18 14:24:35 +01:00
Aron Carroll
0aa08cdd34 Bins saved by the PHP app apply ownership correctly
This was caused by the old validation failing. We no longer check for
the users key when saving bins. This means that the cookies can be
altered to save bins under another users name.
2012-05-18 13:50:11 +01:00
Aron Carroll
3591549eac PHP application now updates "last_login" on login 2012-05-06 18:36:52 +01:00
Aron Carroll
c3a2f92f68 Update PHP app to upgrade existing passwords 2012-05-06 18:31:01 +01:00
Aron Carroll
96ea2f5aa4 Update PHP app to use Bcrypt for hashing passwords
Also creates a session cookie on the sever side. No longer uses the
cookies set on the client side.
2012-05-06 18:12:17 +01:00
Aron Carroll
2bdce61b96 Add CSRF support to the PHP app. Ticket #153
This is hacky, please please refactor if the opportunity arises.
2012-05-05 17:19:27 +01:00
Aron Carroll
80b2a4c078 Merge branch 'next/3' into feature/node
Conflicts:
	index.php
2012-04-20 17:53:54 +01:00
Aron Carroll
21cf908a84 Update codebase to use new ROOT and PATH constants
Hopefully doesn't break anything…
2012-04-17 15:36:43 +01:00
Aron Carroll
ef05666727 Move PHP codebase into ./public directory
Updated all relevant paths to point to new locations. Webs servers will
need to be updated to point to ./public. The build script remains in the
root and will work as before.
2012-04-17 11:38:35 +01:00