Commit Graph

192 Commits

Author SHA1 Message Date
nuxsmin
7ee9c1004c * [MOD] Related #637. Improved random bytes generation to prevent cache-timing attacks (this does not affec to to cryptographic functions, which were already safe). Thanks to @LeSuisse for the feedback.
* [MOD] Temporary master password will never be saved in the event log.
2017-06-15 15:07:44 +02:00
nuxsmin
35a65affff * [FIX] Fixes #638. Aggressive replacement when URL params are being used in HTML markup.Thanks to @LeSuisse for the feedback. 2017-06-15 14:22:48 +02:00
nuxsmin
b6c8e11af0 * [FIX] Fixes #521. Accounts actions were not displayed if the request button was displayed. Thanks to @johnnyhotpants for the feedback and testing 2017-05-03 09:32:55 +02:00
nuxsmin
620a78da5f * [FIX] Wrong config behavior while saving "LDAP enabled" attribute. Thanks to @finalbeta for the feedback 2017-04-25 11:06:01 +02:00
nuxsmin
738db5e892 * [FIX] Enforced readonly user login for LDAP users 2017-04-21 11:03:58 +02:00
nuxsmin
2d1f664bc6 * [MOD] Improved ldap import process by adding the username attribute to get from the LDAP server. Solves #544. Thanks to @jdanielcano for the feedback
* [MOD] Updated translations.
2017-04-20 17:12:20 +02:00
nuxsmin
fcec2a68d6 * [MOD] Improve item actions filtering. Actions can be filtered out by several source values. 2017-04-20 16:13:03 +02:00
nuxsmin
aafe0caa8a * [MOD] Improve elapsed time calc and code refactoring. 2017-04-20 13:31:49 +02:00
nuxsmin
78d024d805 * [MOD] UI tweaks and set user preferences precedence over global settings. Closes #528 2017-04-20 12:06:53 +02:00
nuxsmin
33013b0afe * [MOD] Code tweaks 2017-04-20 08:49:25 +02:00
nuxsmin
7dad1b1fcb * [FIX] Solves #533. Fixed capitalized multibyte characters that weren't encoded properly. Thanks to @NickWoo33 for the feedback. 2017-04-18 17:20:29 +02:00
nuxsmin
b60f8d03a8 * [MOD] Set default user's preferences on demo mode 2017-04-13 21:03:19 +02:00
nuxsmin
3452048297 * [FIX] Fixed "Invalid action" when an exception is thrown and the security token is not refreshed. Related #519
* [FIX] Fixed untranslated notice string when master key is changed.
2017-04-13 14:33:01 +02:00
nuxsmin
67a88c6bcd * [FIX] Fixed wrong key length when submitted from login form, it was cutted down to 80 characters. #519 Thanks to @derStephan for feedback and testing 2017-04-13 12:26:03 +02:00
nuxsmin
0e91d4f7cf * [ADD] Added new feature to allow users added in secondary groups to access to the accounts where the secondary group is granted. Solves #521. Thanks to @johnnyhotpants for the feedback. 2017-04-03 18:04:58 +02:00
nuxsmin
50111abdb4 * [ADD] Added the ability to enable/disable PHP session encryption. This would increase the app overall performance and prevent some issues when copying to clipboard. Related #524, #523, #500, #486
* [MOD] Bump version&build number
2017-04-03 13:38:35 +02:00
nuxsmin
3dc624eba8 * [MOD] Updated jQuery version (work in progress)
* [MOD] UI tweaks
2017-03-23 01:25:23 +01:00
nuxsmin
aab802a92e * [FIX] Related #503. Fixed issue when clearing search data. Favorite icon was not reset. Thanks to @k-s-dean for the feedback
* [FIX] Fixed issue when saving user's password when login through LDAP
2017-03-16 01:45:39 +01:00
nuxsmin
373ba30161 * [FIX] Fixes #504. Added an option to select which attribute should be used for user's login when importing from LDAP. Thanks to @maxdie for the feedback 2017-03-15 23:20:22 +01:00
nuxsmin
07e62d4fba * [MOD] Layout drawer is now closed when clicking on action. Closes #483. Thanks to @basil-twisleton for the feedback
* [MOD] Changed layout distribution by placing session buttons on top within a menu. Related #453. Thanks to @basil-twisleton for the feedback
2017-03-14 00:42:43 +01:00
nuxsmin
0339013b47 * [FIX] Parse forwarded IP addresses when getting client IP address. Related #498 2017-03-13 12:01:08 +01:00
nuxsmin
4c91a0a264 * [MOD] Log invalid IP address. Related #498 2017-03-13 08:47:33 +01:00
nuxsmin
a8040ce03b * [FIX] Fixed hashing issue on user's password reset. Related #474 2017-03-06 22:40:14 +01:00
nuxsmin
d9cb088de6 * [ADD] Added the ability to generate random password with only numbers. Solves #472.
* [FIX] Fixed issues when importing/exporting data in sysPass XML format.
2017-03-06 20:53:59 +01:00
nuxsmin
19e8b4dc0e * [ADD] Added session data encryption.
* [MOD] Improved version control. Related #276
2017-03-06 00:57:33 +01:00
nuxsmin
2a1a22a75f * [ADD] Added session data encryption. 2017-03-05 08:35:36 +01:00
nuxsmin
27189e6cc5 * [FIX] Fixed blank account name when deleted 2017-03-02 22:46:58 +01:00
nuxsmin
e97a9c5b16 * [FIX] Fixed duplicated user login when adding/updating an LDAP user record during log in. Solves #468. Thanks to @zulink 2017-03-02 13:46:54 +01:00
nuxsmin
e76c819273 * [FIX] Fixed issue when user changes its password
* [FIX] Fixed issue when using temporary master password
* [MOD] Updated translations
2017-03-01 03:25:19 +01:00
nuxsmin
71ed889da3 * [ADD] Added live update for master key changing process. 2017-03-01 01:22:26 +01:00
nuxsmin
167fb6e1a1 * [MOD] Improved upgrading process. 2017-02-27 18:12:26 +01:00
nuxsmin
29ef10f946 * [ADD] Added live update for master key changing process. 2017-02-27 03:48:58 +01:00
nuxsmin
ea241cd3b3 * [ADD] Added wrong logins tracking to deny access when max number of attempts are reached. It has been implemented for log in and API requests. DB upgrade needed
* [MOD] Updated translations.
2017-02-26 13:50:13 +01:00
nuxsmin
adb891687d * [MOD] Improved API auth security. There is no need to provide the user's password, it will ask for a token password when generating it. 2017-02-23 11:26:44 +01:00
nuxsmin
526ca3c9e9 * [MOD] Improved API auth security. There is no need to provide the user's password, it will ask for a token password when generating it. 2017-02-23 01:46:51 +01:00
nuxsmin
49ba3d8bfb * [MOD] Improved public links security by encrypting the whole account data 2017-02-22 21:36:42 +01:00
nuxsmin
508fd7c2b2 * [ADD] New encryption schema by using Defuse/php-encryption library. WARNING: work in progress
* [ADD] Improved upgrading process. Now it uses AJAX.
2017-02-22 17:52:06 +01:00
nuxsmin
b982f00008 * [ADD] New encryption schema by using Defuse/php-encryption library. WARNING: work in progress 2017-02-22 01:37:51 +01:00
nuxsmin
69f8614c7b * [ADD] New encryption schema by using Defuse/php-encryption library. WARNING: work in progress 2017-02-22 01:14:08 +01:00
nuxsmin
29700924c8 * [ADD] New encryption schema by using Defuse/php-encryption library. WARNING: work in progress
* [ADD] Improved upgrading process. Now it uses AJAX.
2017-02-21 18:51:24 +01:00
nuxsmin
07c8a2b1f1 * [ADD] New encryption schema by using Defuse/php-encryption library. WARNING: work in progress 2017-02-21 00:46:30 +01:00
nuxsmin
f173ea262b * [ADD] New encryption schema by using Defuse/php-encryption library. WARNING: work in progress 2017-02-20 12:48:29 +01:00
nuxsmin
7acc5a84b5 * [ADD] New encryption schema by using Defuse/php-encryption library. WARNING: work in progress 2017-02-20 12:48:11 +01:00
nuxsmin
23f3717db8 * [FIX] Fixed wrong user/group when importing items. Thanks to @wernerreuser and @davidkast for the feedback. Solves #436
* [MOD] Updated build number
2017-02-20 02:30:46 +01:00
nuxsmin
6ee88bff04 * [ADD] New encryption schema by using Defuse/php-encryption library. WARNING: work in progress 2017-02-19 23:31:04 +01:00
nuxsmin
2f01390c5f * [ADD] New encryption schema by using Defuse/php-encryption library. WARNING: work in progress 2017-02-17 13:12:41 +01:00
nuxsmin
fd25415e3b * [ADD] New encryption schema by using Defuse/php-encryption library. WARNING: work in progress 2017-02-17 09:06:41 +01:00
nuxsmin
96ba94bb69 * [FIX] Solves #428. Forced password change didn't redirect to the password change page. Thanks to @k-s-dean for the feedback. 2017-02-16 01:48:33 +01:00
nuxsmin
b175350429 * [FIX] Related #441. Fixed issue when performing an upgrade to 2.0 version, because some item constraints becomes invalid. It will require alternative IDs for those items that doesn't exist.
* [FIX] Fixed language issue when an error is thrown when performing config checks. Solves #434
2017-02-15 18:04:46 +01:00
nuxsmin
e01319c5e0 * [FIX] Solves #428. Forced user's password change should not rely on sending email. 2017-02-14 23:29:56 +01:00