slawkens
ac9303402d
Merge branch 'main' into feature/refactor-account-lost
2025-09-28 19:14:24 +02:00
slawkens
d0112d1a67
Fix exception when email cannot be send on create account
2025-09-23 21:45:32 +02:00
slawkens
523210c5b7
Refactor
...
Add missing password check
Formatting
2025-09-15 20:04:21 +02:00
slawkens
05b5e703ed
Refactor code, better $error messages
2025-09-14 20:49:14 +02:00
slawkens
849944ff20
[WIP] Add csrfProtect()
2025-09-14 20:47:28 +02:00
slawkens
413ad42afa
Remove duplicated code - extract lostAccountCooldown function
2025-09-14 20:03:03 +02:00
slawkens
233bf001ce
Set $title to 'Lost Account'
2025-09-14 19:49:26 +02:00
slawkens
25695a039d
[WIP] Refactor account/lost
2025-09-14 17:41:53 +02:00
slawkens
e27d974c46
Merge branch 'main' into feature/refactor-account-lost
2025-09-14 13:02:41 +02:00
slawkens
caf326a658
Refactor to use HAS_ACCOUNT_COINS
...
$db->hasColumn('accounts', 'coins') -> HAS_ACCOUNT_COINS
2025-07-22 21:44:09 +02:00
slawkens
7d27e5a0ba
New setting: Default Account Transferable Coins
2025-07-22 21:32:51 +02:00
slawkens
c720ccc451
Add missing csrf()
2025-06-15 19:35:12 +02:00
slawkens
835dda9659
Remove duplicated code - account redirect, already in account/manage
2025-06-05 19:08:53 +02:00
slawkens
28886551e8
feat: Add new account coins setting
2025-05-28 13:33:36 +02:00
slawkens
6eda38603c
Protect against csrf in more places (accounts & guilds pages)
2025-05-24 09:52:56 +02:00
slawkens
1e9b10d648
Fix twig variables: logged + account_logged being not set directly after login
2025-05-15 19:11:20 +02:00
slawkens
16671ea40b
Fix change sex price deducted
2025-01-09 09:44:12 +01:00
slawkens
da1816cc13
use https
2024-12-20 22:42:46 +01:00
slawkens
783d96fc65
Set default_socket_timeout for ipinfo.io checkup
2024-12-20 22:42:35 +01:00
slawkens
941846605c
Prefer get_browser_real_ip() over REMOTE_ADDR
2024-11-12 20:59:51 +01:00
slawkens
a0f1971583
Fix login if limiter is disabled
2024-10-25 19:01:28 +02:00
slawkens
7161678c4b
Add missing Validator::characterName check
2024-09-12 09:40:01 +02:00
slawkens
67f54eacbc
Merge branch 'develop' into feature/refactor-account-lost
2024-09-12 08:24:06 +02:00
slawkens
93641fc68a
New hooks in account manage + create
2024-09-08 15:03:18 +02:00
Gabriel Pedro
327dcb5f87
feat: ratelimit ( #267 )
...
* feat: rate limit settings
* fix: section label
* fix: real ip
* fix: real ip
2024-08-26 14:53:09 +02:00
slawkens
50a8b8169f
[WIP] Account Lost refactor
2024-07-10 18:08:21 +02:00
slawkens
203e411b62
Allow account_create_character_create even if account_mail_verify is activated
2024-07-09 23:06:12 +02:00
slawkens
fcb13f3c0f
Fixes to account verify - do not allow login without verified email (Thanks @anyeor)
2024-07-09 23:05:36 +02:00
slawkens
bdc0c43d3f
Refactor account routes into sub folders
2024-06-13 22:23:43 +02:00
slawkens
3fadf87a7a
Fix title on login page
2024-06-11 13:14:15 +02:00
slawkens
c24576165c
login.php early exit + fix title
2024-06-11 12:55:02 +02:00
slawkens
a1bcb217ec
Fixes regarding not working google recaptcha (+few previous commits)
2024-05-30 17:36:07 +02:00
slawkens
8cf4e3da02
Fix change_info if account_country is disabled
2024-04-15 21:54:18 +02:00
slawkens
d5915df37e
Fix redirects in forum + polls
2024-04-14 16:06:57 +02:00
slawkens
eb0c2a7674
Post-fix redirect
2024-04-14 16:02:55 +02:00
slawkens
c92a410209
Don't allow redirect to external website
2024-04-08 19:08:21 +02:00
Slawomir Boczek
fe7ad61abe
phpstan support ( #250 )
...
* phpstan v1 + workflow
* Fix intend
* More fixes
* Update phpstan.neon
* phpstan level 2
* Move errors ignoring into phpstan.neon
* phpstan level 3
* Don't ignore templates folder
* Something from level 4
* Update phpstan.neon
2024-02-18 14:59:25 +01:00
slawkens
9f3231fff6
Fix delete character exception
2024-02-16 20:27:48 +01:00
slawkens
3f5744964a
Get rid of ?subtopic=x links
2024-02-03 20:34:42 +01:00
slawkens
6494bd2c0c
Add optional $return = false parameter to the csrf function
2024-01-30 22:40:40 +01:00
slawkens
d71bab648d
Change hidden to hide (Eloquent blocked keyword)
2024-01-27 16:54:48 +01:00
slawkens
1a6fb8bee2
Refactoring classes into src/ folder, so they will be auto-loaded by composer
2024-01-27 00:36:49 +01:00
slawkens
a9fb5dffa3
Fix account manage redirect
2023-12-09 09:26:33 +01:00
slawkens
e17dde0dca
Fix session fixation
2023-11-27 23:52:36 +01:00
slawkens
48e9a1ed51
Fix account lost interface links
2023-11-25 15:44:34 +01:00
Slawomir Boczek
790d85a88a
CSRF Protection ( #235 )
...
* Fix alert class name
* feature: csrf protection
* Cosmetics
* Fix token generate
* Admin Panel: changelogs csrf protection
* news/id route
* Refactor admin newses + add csrf
* Use admin.links instead
* Admin panel: Pages csrf
* Menus: better csrf + add success message on reset colors
* Plugins csrf
* Move definitions
* add info function, same as note($message)
* Update mailer.php
* Fix new page/news links
* clear_cache & maintenance csrf
* Formatting
* Fix news type
* Fix changelog link
* Add new changelog link
* More info to confirm dialog
* This is always true
2023-11-11 10:57:57 +01:00
Kamil Grzechulski
26a80e0741
fix: password2 variable refactor to correct name ( #237 )
2023-10-06 07:52:21 +02:00
slawkens
9e2a87f448
Add forgotten prefix for some settings
2023-08-25 17:09:31 +02:00
slawkens
0746708743
Reviewed some settings again, fixing many glitches
2023-08-24 17:20:32 +02:00
Gabriel Pedro
a692607c5e
feat: replace POT Query Builder to Eloquent ORM ( #230 )
...
* wip
* wip
* wip
* wip
* wip
* fix: reusing pdo connection from pot
* wip
* wip
* wip
* wip
* move files
In future, all classes will be in src/ folder
* Replace namespace name, for future
* Remove duplicated exception
* Fix towns from db
* Fix spells page
* Add default FAQ question + FAQ model
* feat: reset colors in menus
* Add confirm + save button at the top (menus)
* Do not insert duplicated FAQ on install
* Refactor install menus
* Fix changelogs showing
* Fix menu update, only with specified template name
* Fix account create -> missing compat
* Fix bans_per_page
* banned_by is player_id. type = 2 is namelock in tfs 0.3
* Add getPlayerNameById, fix getPlayerNameByAccount
* Change link name
* Order by lastlogin
* fix: query optimize
* wip
* wip
* wip
* wip
* wip
* wip
* wip
* Refactor notepad.php, class was useless
* This is showing error, if the updated rows = 0
* Fix success & error class (bootstrap)
* Uncomment require migrate.php
* Some distro have owner_id
* Update Player.php
---------
Co-authored-by: slawkens <slawkens@gmail.com >
2023-08-21 10:16:58 +02:00
