Commit Graph

53 Commits

Author SHA1 Message Date
fusionate
9f7133ac4f Login: Change destination setting type. 2023-01-28 00:19:00 +00:00
FusionPBX
80d25cc088 Minor change from spaces to tabs 2022-10-10 19:37:47 -06:00
FusionPBX
83d2f4fe2c Update login.php 2022-10-10 16:59:20 -06:00
agree
81666dd882 [login] fix url redirection (#6325)
* prevent open redirection attack
2022-03-10 20:10:16 -07:00
FusionPBX
af3c1bb193 Update the URL to the dashboard 2021-11-13 15:28:42 -07:00
markjcrane
cb2a37bf6a Santize the login destination url that is picked up from the database 2021-07-25 14:14:53 -06:00
markjcrane
c3b811393d Fix XSS on login page by removing $_REQUEST[path] 2021-07-25 13:59:10 -06:00
mhoogveld
5373e97b40 Bugfixes (#5949)
* Added missing parameter to send_email()

* Preserving the call-center queue_record_template value when saving

* Removed unused declarations using the commented-out $last_offered_call

* Fix for redirecting to previous page after login, if set

* Removed duplicate bugfix in /resources/login.php
2021-05-28 20:56:25 -06:00
fusionate
be28ab7af4 Theme: Add Default Setting to control button color in (Password Reset) emails. 2020-12-30 17:01:07 -07:00
fusionate
aa1569d8eb Password Reset: Use email template based on user language, if set. 2020-11-27 12:09:14 -07:00
FusionPBX
b0c8b2be4c Update login.php
Minor changes add new line and is_array.
2020-11-07 12:14:31 -07:00
Nate
bc69b99cb0 Password Reset: Adjust username check when username_format set to email. 2020-10-29 15:51:31 -06:00
Nate
54ae9e2e13 Login: Adjust Password Reset feature to support using a specific or dynamic domain in the reset link sent. 2020-10-13 15:10:07 -06:00
Nate
d725808820 Login: Mitigate invalid token message. 2020-05-19 16:16:28 -06:00
Nate
1b104aa3dc Template: Restore proper format of non-authenticated pages and menus. 2020-03-21 22:33:35 -06:00
Nate
0df02b95dd Template: Convert to Smarty syntax. 2020-03-17 20:31:29 -06:00
Nate
e8494facee Multiple: Add IDs to form tags, remove empty action attributes. 2020-03-05 10:02:25 -07:00
Nate
1189e7d7b9 Login: Simplify javascript. 2020-03-04 18:05:18 -07:00
FusionPBX
6b5c926924 Update login.php 2020-03-02 13:33:41 -07:00
agree
d19d3722d2 Update login.php (#5172) 2020-03-02 13:26:25 -07:00
Nate
35045a8260 Password Reset: Update to work for Users on any domain. 2020-02-06 13:51:40 -07:00
Nate
38e8a69bf9 Login: Add window title. 2020-01-06 13:14:07 -07:00
FusionPBX
fdb7c419fd Update login.php 2019-12-28 00:18:09 -07:00
agree
5bbe08c69d Fixed reset password (#4821)
* Update login.php

* Update login.php
2019-11-03 19:13:24 -07:00
Nate
04c2f7a132 Misc: Database class integration. 2019-08-28 17:53:34 -06:00
Nate
733ba98dc6 Update to Bootstrap v4.3.1, jQuery 3.4.1. Adjustments to support updates. 2019-08-20 18:15:50 -06:00
FusionPBX
7546868875 Update login.php 2019-08-18 00:54:21 -06:00
FusionPBX
13eb769959 Update login.php 2019-08-18 00:45:07 -06:00
FusionPBX
df7f61fcea Update login.php 2019-08-18 00:34:16 -06:00
FusionPBX
ac384790e4 Update login.php 2019-07-29 10:28:51 -06:00
Nate
a35f618ec2 Password Reset: Add email message to Email Templates. 2019-03-13 23:30:39 -06:00
Nate
12726e4289 Password Reset: Always set valid domain session var. 2019-02-28 22:13:54 -07:00
Nate
dd0ae9c41f Fix bug in Password Reset feature, remove usage of md5. 2019-02-28 22:03:19 -07:00
Nate
d799d42e1f Modify en/decryption functions to be openssl-based - mcrypt_* functions are now deprecated as of PHP 7.1.0 2019-02-28 18:22:34 -07:00
Nate
36b32599f1 Restore Login Reset Password functionality, adjust default SMTP debug level. 2019-02-28 17:32:27 -07:00
FusionPBX
c64a93f84e Update login.php 2018-06-02 16:17:16 -06:00
FusionPBX
1826b851d4 Update login.php 2018-06-02 16:15:36 -06:00
FusionPBX
4e6c464dc7 Update login.php 2016-12-13 08:56:02 -07:00
FusionPBX
5540f0013e Update login.php
Possible vulnerability in password reset not taking chances removing the code until it has been analyzed and fixed.
2016-07-29 03:22:27 -06:00
reliberate
0f07828d0c Security: Integrate Settings and necessary functions to enforce password complexity requirements.
Theme: Add basic password strength indicator bar.
Default Settings: Also verify correct Type (name) on Upgrade > App Defaults.
User: Show Nickname in Contact select if no Given or Family name.
Password Reset: Integrate hide and convert password fields method to prevent browser prompt.
2016-06-02 18:26:32 -06:00
reliberate
e31985db96 Login: Add IDs to submit buttons. 2016-04-13 16:32:40 -06:00
reliberate
8b0c01c772 Theme: Integrate settings to control button styles and form input styles.
Dashboard: Remove table row hover and pointer cursor if not linked.
2016-04-11 17:52:58 -06:00
reliberate
a887eab36a Fun Stuff: http://pasteboard.co/1ormWYp.png
Login: Add settings to style Reset Password (and related) text links, add (disabled) settings to display domain name field.
Theme: Add settings to control login box border size, color, radius and padding.  Explicitly defined placeholder text color/opacity (where possible).
2016-04-07 19:35:39 -06:00
Nate Jones
bde5e3c6c7 Login: Minor fix to sql query in Password Reset feature. 2015-04-04 19:43:51 +00:00
Nate Jones
2448ab3a8e Use the new multi-lingual code on misc files. 2015-01-18 10:33:34 +00:00
Nate Jones
d46e9aa7a1 Default Login: JS issues, minor tweaks. 2014-12-09 05:17:36 +00:00
Nate Jones
0147c9bf2f Login (Default): Password Reset functionality (requires PHP mcrypt library, Enhanced & Minimized themes only, enable in Default Settings). 2014-12-06 17:53:29 +00:00
Nate Jones
56fea0db60 Enhanced Theme: Implemented new icons for Domain Selector and Logout in header. Hover to see current user/domain and active domain.
Domain Selector: Now includes and highlights active domain in domain list.
2014-08-17 03:30:28 +00:00
luis daniel lucio quiroz
b96d8bdb52 dropdown into login screen too 2014-08-06 02:39:47 +00:00
Nate Jones
b244cd2c91 Login Changes:
If visiting /index.php and /themes/[theme]/index.php exists, will load it.
If visiting /index.php and /themes/[theme]/login.php exists, will load it.
If NEITHER exist, will load /resources/login.php.

If visiting /login.php and /themes/[theme]/login.php exists, will load it.
If DOESN'T exist, will load /resources/login.php/

/resources/login.php reworked, Enhanced theme reworked.
2014-07-27 00:13:52 +00:00