Maurício Meneghini Fauth
e330402b5b
Refactor the core functions into static methods
...
Signed-off-by: Maurício Meneghini Fauth <mauriciofauth@gmail.com >
2017-06-03 00:52:22 -03:00
Michal Čihař
073a26b0da
Use Util::generateRandom for generating CSRF token
...
- We reuse existing code for that.
- The token string is now shorter as it can contain any ASCII char,
compared to hex digits previously.
Signed-off-by: Michal Čihař <michal@cihar.com >
2017-06-01 14:40:26 +02:00
Michal Čihař
d798ef6c7b
Merge branch 'QA_4_6'
2016-05-23 15:01:09 +02:00
Michal Čihař
6408c367fa
Do not try to secure session in testsuite
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-05-23 15:00:57 +02:00
Michal Čihař
a3eb37b5d7
Move token check to PMA_generateToken
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-03-03 08:23:19 +01:00
Michal Čihař
b856502d64
Prefer phpseclib if avaible
...
It does better decisions about which backend to use than simply using
openssl.
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-03-01 15:49:05 +01:00
Michal Čihař
380deb4f39
Share code for generating token
...
There is no need to have two copies of that.
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-03-01 15:47:20 +01:00
Michal Čihař
ac9714cf6a
Autoloading for phpseclib
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-02-01 21:53:53 +01:00
Michal Čihař
7b58acf62e
Merge branch 'QA_4_5'
2016-02-01 21:46:33 +01:00
Michal Čihař
072ff0b38a
Remove checks for PHP versions we no longer support
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-01-28 16:08:47 +01:00
Michal Čihař
e95bb0e361
Remove own code for generating numeric PHP version
...
Since PHP 5.2.7 there is PHP_VERSION_ID for it.
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-01-28 14:53:58 +01:00
Michal Čihař
ed96969ff9
Merge branch 'QA_4_5'
2016-01-28 09:23:27 +01:00
Hugues Peccatte
dffc8c34e9
Remove logic code in declaration files.
...
Move declaration out of logic file.
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com >
2015-10-27 18:56:39 +01:00