15 Commits

Author SHA1 Message Date
nuxsmin
b3f064a461 * [FIX] Critical bugfix that prevents directory traversal in JS/CSS includes. Thanks to Jan Van for the notice 2016-12-24 13:02:48 +01:00
nuxsmin
d1e91ca68c * [MOD] Improved user migration handling.
* [MOD] All input strings are trimmed
2016-09-24 02:47:22 +02:00
nuxsmin
5b6232c08d * [FIX] Fixed issue when installing sysPass. Solves #272
* [FIX] Fixed issue when retrieving HTTP headers on non-Apache environments.
2016-09-18 00:56:47 +02:00
nuxsmin
4aa84023e9 * [FIX] Closes #221. Fixed missing apache_request_headers function. Thanks to @alexanderbuhler for the feedback. 2016-07-30 13:33:59 +02:00
nuxsmin
6fca361851 * [FIX] Minor bugfixes
* [ADD] Added temp master password counter (mas 100 attempts)
2016-05-04 08:25:54 +02:00
nuxsmin
f867611421 * [FIX] Fixes #166. Fixed number parsing by request analyzer. Thanks to @gabrielsoltz and @GastonLex 2015-12-12 07:46:56 +01:00
nuxsmin
0c031de9fe * [ADD] New language translation to Catalan. Thanks to @ferrergl
* [ADD] Added some user preferences like show optional actions and top navigation bar.
* [MOD] Updated German translation. Thanks to @wagnst and @ffflorian
* [MOD] Updated French translation. Thanks to jmrh, grandpas29 and julien
* [MOD] Fallback to plain passwords on forms when PKI is not available. It does not affect to the accounts.
* [FIX] Fixed language strings. Closes #147
* [FIX] Fixed master password changing issue that fails when no custom fields are defined.
* [FIX] Fixed redirection from 2FA page after login.
* [FIX] Fixed account main group saving.
2015-10-15 15:17:05 +02:00
nuxsmin
180ce5942f * [ADD] Page reloading detection to read the config again.
* [MOD] Add some error reporting on installation process.
* [MOD] Resized the main page sysPass logo.
2015-10-12 12:42:18 +02:00
nuxsmin
6e2c461d72 * [FIX] Fixed issue with master pass hash after upgrading from 1.1. WARNING: the accounts encryption have not changed, only the master pass hash that is used to verify the correct password. 2015-10-10 14:00:37 +02:00
nuxsmin
f49d6cce22 * [FIX] Fixed issue when checking ldap connection. Thanks to @JvdW
* [FIX] Fixed some forms issues
* [FIX] Fixed issue when checking user request for changing password
* [MOD] Improved forms passwords encryption.
2015-10-05 16:20:35 +02:00
nuxsmin
5f38a00900 * [ADD] New method to optimize/minimize CSS and JS files.
* [ADD] Temporary password can be viewed within session.
* [ADD] Old backup and export files are deleted when performing a new backup/export.
* [ADD] Added the ability to force the connection through HTTPS.
* [MOD] CSS and JS files are now minimized by default.
* [MOD] Updated translations.
* [MOD] UI tweaks.
* [FIX] Fixed issue on enabling secondary users/groups edit on accounts.
* [FIX] Fixed issue when sending email request to blank recipients.
2015-10-05 01:41:21 +02:00
nuxsmin
cac63e82a0 * [ADD] Switched to BCRYPT for hashing passwords and key derivation. WARNING: Master password should be reentered by users (you can use a temporary password)
* [MOD] Some tweaks on forms passwords decryption
* [FIX] Fixed issue when blank custom fields are retrieved for an item.
2015-09-30 03:20:56 +02:00
nuxsmin
9cafb219c5 * [ADD] New custom fields feature.
* [MOD] Minor UI tweaks
* [MOD] Updated English translation
* [FIX] Minor bugfixes
2015-08-17 19:38:39 +02:00
nuxsmin
9f00a62a39 * [MOD] Updated JQuery UI to latest version.
* [FIX] Fixed global search issues.
2015-07-18 14:33:23 +02:00
nuxsmin
7ba7c7e667 * [ADD] Profiles are stored as objects in DB, so it makes more flexible adding new modules without modifying the DB structure. DB upgrade required.
* [ADD] New log class for better action events handling.
* [ADD] New email class which uses Log class attributes for message composing.
* [ADD] New Request class for managing POST/GET requests.
* [MOD] Almost whole session vars are managed through Session class.
* [MOD] Minor fixes on templates
2015-06-29 00:31:50 +02:00