Commit Graph

61 Commits

Author SHA1 Message Date
Alex
0ffa12a201 Fix password reset email domain name (#7676)
$domain_name is undefined since it was replaced with $password_reset_domain
2025-12-23 11:13:49 -07:00
FusionPBX
4ee3927c0f Update login.php 2025-09-04 10:42:38 -06:00
FusionPBX
a4f83539ba Update login.php 2025-01-28 12:54:09 -07:00
fusionate
e58a55df97 Password Reset: Adjustment to re-enable password match indication. 2025-01-20 09:10:04 -07:00
FusionPBX
3f186d90cc Fix the forget password feature 2025-01-16 21:49:56 -07:00
frytimo
2cbb4dbc31 remove instances where a pointer is used in a foreach loop for value (#7108) 2024-08-22 12:41:10 -06:00
frytimo
d7bbcd89f5 Use magic constant dir (#6711)
* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__

* use magic constant __DIR__ to load only functions.php

* replace spaces with tab character

* update dirname command to use levels instead of nesting

* use magic constant __DIR__

* update dirname command to use levels instead of nesting

* Update access_control_edit.php

* Update access_control_import.php

* Update access_controls.php

* Update dnd.php

* Update access_controls_reload.php

* Update call_center_agents.php

* Update call_center_agents.php

* Update fax_queue.php

* Update login.php

* Update pdo.php

* Update pdo_vm.php

* Update switch.php

* Update index.php

* Update css.php

* Update v_mailto.php

* Update fax_to_email.php

---------

Co-authored-by: FusionPBX <markjcrane@gmail.com>
2023-06-15 11:28:23 -06:00
frytimo
fef8165be2 Frytimo pr patches for php8.1 (#6630)
* Passing null to parameter #2 ($string) of type string is deprecated

* Passing null to parameter #1 ($string) of type string is deprecated

* php 8.1 fixes

* php 8.1 fixes - replace strlen($var) > 0 with !empty($var)

* php 8.1 fixes - replace ${var} with {$var}

* php 8.1 fixes - replace ${var} with {$var}

* php 8.1 fixes - replace ${var} with {$var}

* php 8.1 fixes - replace ${var} with {$var}

* php 8.1 fixes - strlower with null

* php 8.1 fixes - strreplace with null

* php 8.1 fixes - passing null to base64_decode

* php 8.1 fixes - check for false and check for null on $this->dir

* php 8.1 fixes - remove assignment of $db variable to modules object

* php 8.1 fixes - avoid sending null to substr

* php 8.1 fixes - change ${var} to {$var}

* php 8.1 fixes - check for null before preg_replace

* php 8.1 fixes - remove setting db variable on domains object

* php 8.1 fixes - set empty string if $row['domain_setting_subcategory'] is null

* php 8.1 fixes - set empty string if $_REQUEST['show'] is not available

* php 8.1 fixes

* php 8.1 fixes - correct $_POST checking syntax

* php 8.1 fixes - correct $_POST variables

* php 8.1 fixes

* Use brackets consistently

* Update user_setting_edit.php

* Change to not empty

* Update device.php

* Update text.php

---------

Co-authored-by: Tim Fry <tim@voipstratus.com>
Co-authored-by: FusionPBX <markjcrane@gmail.com>
2023-05-05 10:46:37 -06:00
fusionate
9f7133ac4f Login: Change destination setting type. 2023-01-28 00:19:00 +00:00
FusionPBX
80d25cc088 Minor change from spaces to tabs 2022-10-10 19:37:47 -06:00
FusionPBX
83d2f4fe2c Update login.php 2022-10-10 16:59:20 -06:00
agree
81666dd882 [login] fix url redirection (#6325)
* prevent open redirection attack
2022-03-10 20:10:16 -07:00
FusionPBX
af3c1bb193 Update the URL to the dashboard 2021-11-13 15:28:42 -07:00
markjcrane
cb2a37bf6a Santize the login destination url that is picked up from the database 2021-07-25 14:14:53 -06:00
markjcrane
c3b811393d Fix XSS on login page by removing $_REQUEST[path] 2021-07-25 13:59:10 -06:00
mhoogveld
5373e97b40 Bugfixes (#5949)
* Added missing parameter to send_email()

* Preserving the call-center queue_record_template value when saving

* Removed unused declarations using the commented-out $last_offered_call

* Fix for redirecting to previous page after login, if set

* Removed duplicate bugfix in /resources/login.php
2021-05-28 20:56:25 -06:00
fusionate
be28ab7af4 Theme: Add Default Setting to control button color in (Password Reset) emails. 2020-12-30 17:01:07 -07:00
fusionate
aa1569d8eb Password Reset: Use email template based on user language, if set. 2020-11-27 12:09:14 -07:00
FusionPBX
b0c8b2be4c Update login.php
Minor changes add new line and is_array.
2020-11-07 12:14:31 -07:00
Nate
bc69b99cb0 Password Reset: Adjust username check when username_format set to email. 2020-10-29 15:51:31 -06:00
Nate
54ae9e2e13 Login: Adjust Password Reset feature to support using a specific or dynamic domain in the reset link sent. 2020-10-13 15:10:07 -06:00
Nate
d725808820 Login: Mitigate invalid token message. 2020-05-19 16:16:28 -06:00
Nate
1b104aa3dc Template: Restore proper format of non-authenticated pages and menus. 2020-03-21 22:33:35 -06:00
Nate
0df02b95dd Template: Convert to Smarty syntax. 2020-03-17 20:31:29 -06:00
Nate
e8494facee Multiple: Add IDs to form tags, remove empty action attributes. 2020-03-05 10:02:25 -07:00
Nate
1189e7d7b9 Login: Simplify javascript. 2020-03-04 18:05:18 -07:00
FusionPBX
6b5c926924 Update login.php 2020-03-02 13:33:41 -07:00
agree
d19d3722d2 Update login.php (#5172) 2020-03-02 13:26:25 -07:00
Nate
35045a8260 Password Reset: Update to work for Users on any domain. 2020-02-06 13:51:40 -07:00
Nate
38e8a69bf9 Login: Add window title. 2020-01-06 13:14:07 -07:00
FusionPBX
fdb7c419fd Update login.php 2019-12-28 00:18:09 -07:00
agree
5bbe08c69d Fixed reset password (#4821)
* Update login.php

* Update login.php
2019-11-03 19:13:24 -07:00
Nate
04c2f7a132 Misc: Database class integration. 2019-08-28 17:53:34 -06:00
Nate
733ba98dc6 Update to Bootstrap v4.3.1, jQuery 3.4.1. Adjustments to support updates. 2019-08-20 18:15:50 -06:00
FusionPBX
7546868875 Update login.php 2019-08-18 00:54:21 -06:00
FusionPBX
13eb769959 Update login.php 2019-08-18 00:45:07 -06:00
FusionPBX
df7f61fcea Update login.php 2019-08-18 00:34:16 -06:00
FusionPBX
ac384790e4 Update login.php 2019-07-29 10:28:51 -06:00
Nate
a35f618ec2 Password Reset: Add email message to Email Templates. 2019-03-13 23:30:39 -06:00
Nate
12726e4289 Password Reset: Always set valid domain session var. 2019-02-28 22:13:54 -07:00
Nate
dd0ae9c41f Fix bug in Password Reset feature, remove usage of md5. 2019-02-28 22:03:19 -07:00
Nate
d799d42e1f Modify en/decryption functions to be openssl-based - mcrypt_* functions are now deprecated as of PHP 7.1.0 2019-02-28 18:22:34 -07:00
Nate
36b32599f1 Restore Login Reset Password functionality, adjust default SMTP debug level. 2019-02-28 17:32:27 -07:00
FusionPBX
c64a93f84e Update login.php 2018-06-02 16:17:16 -06:00
FusionPBX
1826b851d4 Update login.php 2018-06-02 16:15:36 -06:00
FusionPBX
4e6c464dc7 Update login.php 2016-12-13 08:56:02 -07:00
FusionPBX
5540f0013e Update login.php
Possible vulnerability in password reset not taking chances removing the code until it has been analyzed and fixed.
2016-07-29 03:22:27 -06:00
reliberate
0f07828d0c Security: Integrate Settings and necessary functions to enforce password complexity requirements.
Theme: Add basic password strength indicator bar.
Default Settings: Also verify correct Type (name) on Upgrade > App Defaults.
User: Show Nickname in Contact select if no Given or Family name.
Password Reset: Integrate hide and convert password fields method to prevent browser prompt.
2016-06-02 18:26:32 -06:00
reliberate
e31985db96 Login: Add IDs to submit buttons. 2016-04-13 16:32:40 -06:00
reliberate
8b0c01c772 Theme: Integrate settings to control button styles and form input styles.
Dashboard: Remove table row hover and pointer cursor if not linked.
2016-04-11 17:52:58 -06:00