| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Track if we are accessed via HTTP or HTTPS, and the server name.
Track cookies.
HEAD method.
Various security clean ups.
Force HTTPS for account.html.
Poor mans Bobby Tables protection.
Security token.
Validate inputs. Looking up the DNS records for email domain name.
Don't allow creation of accounts with god names, leave that for the
console. Check if created user name exists already. Double check the
passwords and emails.
Error messages on dynamic pages.
Various clean ups.
TODO++
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
First and last names merged into one name.
Is name two words check, a suprisingly effective spam blocker.
Poor mans Bobby Tables protection.
Various other input checking.
Added account creation confirmation page.
Some text and length tweaks.
|
| | |
|
| |
|
|
|
|
|
|
|
| |
Sanatize the path.
Add support for Last-Modified, If-Modified-Since, and Cache-Control:
no-cache.
Teach the base server about more binary content types.
|
|
|
Just a name change.
|
