Shaarli - The personal, minimalist, super-fast, database free, bookmarking service

	Commit message (Collapse)	Author	Age	Files	Lines
*	Optimize and cleanup imports	VirtualTam	2019-01-13	1	-2/+2
\| \| \| \|	Signed-off-by: VirtualTam <virtualtam@flibidi.net>
*	lint: apply phpcbf to tests/	VirtualTam	2018-12-02	1	-1/+0
\| \| \| \|	Signed-off-by: VirtualTam <virtualtam@flibidi.net>
*	Add test coverage for LoginManager methods	VirtualTam	2018-06-02	1	-1/+1
\| \| \| \|	Signed-off-by: VirtualTam <virtualtam@flibidi.net>
*	SessionManager: remove unused UID token	VirtualTam	2018-06-02	1	-13/+0
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	There already are dedicated tokens for: - CSRF protection - user stay-signed-in feature, via cookie This token was most likely intended as a randomly generated, server-side, secret key to be used when generating hashes. See http://sebsauvage.net/wiki/doku.php?id=php:session [FR] Relevant section: Une clé secrète unique aléatoire est générée côté serveur (et jamais envoyée). Elle peut servir pour signer les formulaires (HMAC) ou générer des token de formulaires (protection contre XSRF). Voir $_SESSION['uid']. Translation: A unique, server-side secret key is randomly generated (and never transmitted). It can be used to sign forms (HMAC) or generate form tokens (protection against XSRF). See $_SESSION['uid'] Signed-off-by: VirtualTam <virtualtam@flibidi.net>
*	Refactor session and cookie timeout control	VirtualTam	2018-06-02	1	-22/+159
\| \| \| \|	Signed-off-by: VirtualTam <virtualtam@flibidi.net>
*	Move LoginManager and SessionManager to the Security namespace	VirtualTam	2018-06-02	1	-0/+149
	Signed-off-by: VirtualTam <virtualtam@flibidi.net>