Commit Graph

17 Commits

Author SHA1 Message Date
wrongecho
badda09245 Prevent users disabling MFA when it is enforced 2025-01-29 21:29:04 +00:00
johnnyq
52ad2ba322 Reworked the MFA Enforcement 2025-01-28 18:57:04 -05:00
johnnyq
9ea5fdf425 Further improve the MFA process, now when verification fails the modal will stay open and the secret remain the same 2025-01-28 16:34:07 -05:00
johnnyq
39adab734b Enhanced the MFA Setup Flow 2025-01-27 23:26:10 -05:00
johnnyq
f29d122376 Move totp.php out of functions folder into plugins then removed functions folder 2025-01-24 21:07:01 -05:00
johnnyq
8e04e10753 Combine base32static.php and rfc6238.php into 1 file called totp.php and place it into the functions folder 2025-01-24 20:26:46 -05:00
johnnyq
d80d4803db Moved TOTP dependent files rfc6238.php and base32static.php to /includes folder and updated links in pages 2025-01-24 19:20:49 -05:00
johnnyq
2c51289d75 Remove mysqli connection vars when passing mail data to addToMailQueue Function 2025-01-22 20:56:24 -05:00
wrongecho
a67de7a8f1 Prevent post pages being accessed directly 2025-01-09 16:09:39 +00:00
johnnyq
a31387720c Fix self avatar uploading 2024-11-27 13:34:39 -05:00
johnnyq
b7163dad6d Add isset check on file upload 2024-11-19 11:59:52 -05:00
johnnyq
ff3df12523 allow webp for users and profile 2024-11-18 18:19:57 -05:00
johnnyq
34e09f32e0 Remove unessesary check if file has been uploaded as the function already does that 2024-11-18 16:29:42 -05:00
johnnyq
c5aa22a832 Updated profile post to use new logAction function, tidy and added more details to logging 2024-11-12 18:26:04 -05:00
wrongecho
334829c23e Force setup of MFA on login 2024-10-28 21:01:55 +00:00
johnnyq
d01d912154 Move logout to a file logout.php in /post fixes issue where one cant logout if in admin section, also redirect to login page with or without login key if set 2024-10-18 00:12:08 -04:00
Marcus Hill
6363d265ca Refactor POST handling.
- Split into admin and user handlers, each admin page gets its own file now
- Enforce role access once for admin POST requests
- Automatically load POST logic for admin-based requests based on the referring page, otherwise automatically load all user request logic
- Add support for using custom POST handlers
2024-09-29 19:02:28 +01:00