Michal Čihař c83b2b0872 Use hash_equals for checking username ...

This makes the comparison happen in constant time and makes it
impossible to use it to guess stored usernames.

Signed-off-by: Michal Čihař <michal@cihar.com>

2016-08-18 09:41:21 +02:00

..

recaptcha

Update ReCaptcha library to 1.1.2

2016-07-18 15:51:44 +02:00

AuthenticationConfig.php

Remove some unnecessary string concatenations

2015-12-06 08:01:07 -05:00

AuthenticationCookie.php

Use hash_equals for checking username

2016-08-18 09:41:21 +02:00

AuthenticationHttp.php

Use hash_equals for checking username

2016-08-18 09:41:21 +02:00

AuthenticationSignon.php

Avoid double redirects in signon auth on logout

2016-05-23 13:23:16 +02:00