Subject | Hash | Author | Date (UTC) |
---|---|---|---|
Prevent bots to create accounts | 3eacd8103e9a039f3f8585a59c27fdff6fd66ca4 | Catalin(ux) M. BOIE | 2020-07-08 05:25:37 |
css: Force the footer to the bottom using flex | f89dddc9fa6b2c131448996cc51349e00224eea6 | Catalin(ux) M. BOIE | 2020-07-04 04:15:03 |
docs: css tweaks | d270a286b160bb5de39ade5d99a58fe26e03b2d5 | Catalin(ux) M. BOIE | 2020-06-30 17:21:02 |
Improved admin report | 9fa82cc2878886c2195cdd3f334dd532b3ea6a22 | Catalin(ux) M. BOIE | 2020-06-28 10:19:24 |
First version of artifacts | ad6b6c75aab8d485ea45c1d851f23d83587d6931 | Catalin(ux) M. BOIE | 2020-06-27 13:11:17 |
Allow adding bugs for public repos + small fixes | e67955ce3360c8c003a718e01844b3d8effa74a6 | Catalin(ux) M. BOIE | 2020-06-25 16:05:54 |
History updates | 4c4aef444bbd1149f2c02b6da620f184aae1eed6 | Catalin(ux) M. BOIE | 2020-06-16 05:53:14 |
Allow cron to execute sub-tasks in parallel - we missed stats | f65c76714cf349a53f584c8e65d9e89c24a4fa69 | Catalin(ux) M. BOIE | 2020-06-12 06:50:40 |
bug: search: fixed the override of some global variables | 82e251ea883e50b8d1476530e0268fd5770fbf41 | Catalin(ux) M. BOIE | 2020-06-10 21:29:03 |
If a repo is non-existent, we should not try to use the id | bcb08f74e21556aa750920335ebec2f965e72f36 | Catalin(ux) M. BOIE | 2020-06-10 08:05:43 |
If no activity, average elap is not computed correctly | a7d4f0042c912d29f7943e0446820a477f42d6f7 | Catalin(ux) M. BOIE | 2020-06-09 07:03:21 |
When a user is requesting an e-mail confirmation operation, ignore if the e-mail was confirmed | 62c387ed431d0c46d16e534cc1c954557ee389f7 | Catalin(ux) M. BOIE | 2020-06-08 06:42:22 |
Reverse test messed the creation of partition tables; more debugging | d820816c2624549e0b0e1634523717cda0b7ba66 | Catalin(ux) M. BOIE | 2020-06-05 17:33:08 |
We need to prepare the partition tables before some inserts | 07a12d1c79104b4707a9d43463fa9c11a4697293 | Catalin(ux) M. BOIE | 2020-06-05 15:55:43 |
.spec updates | 5fe0aca1b4a3bfd8c1c8db95409faf512ad09b43 | Catalin(ux) M. BOIE | 2020-06-04 22:03:57 |
Switch to Podman (because of Fedora 32) and fix the worker service in the spec file | 05b3866cd09b0aa8367d3b5755f45ea7274658de | Catalin(ux) M. BOIE | 2020-06-04 15:50:41 |
Added sample configuration for workers | df36ccd20e40987a4ca2355062ee1312aa2ee3a2 | Catalin(ux) M. BOIE | 2020-06-04 15:14:52 |
Avoid complains from install for systemd daemon-reload | 683a92542cc0608293ceefc111a05e1eb328a2d8 | Catalin(ux) M. BOIE | 2020-06-04 15:09:57 |
Small stuff | e64a838d032e54587ab3110ab8bb04a0cde78231 | Catalin(ux) M. BOIE | 2020-06-04 14:49:56 |
Lots of changes | b8164d9e1e263eb4db75e32430f0753b63d0028e | Catalin(ux) M. BOIE | 2020-06-04 07:14:35 |
File | Lines added | Lines deleted |
---|---|---|
inc/user.inc.php | 17 | 1 |
root/themes/default/user/add_edit.html | 1 | 0 |
File inc/user.inc.php changed (mode: 100644) (index 13bca3e..c47072a) | |||
... | ... | function rg_user_edit_high_level($db, &$rg) | |
1957 | 1957 | } | } |
1958 | 1958 | } | } |
1959 | 1959 | ||
1960 | $v = microtime(TRUE); | ||
1961 | $gen1 = sprintf("%u", $v); | ||
1962 | $gen2 = sprintf("%03u", ($v - intval($v)) * 1000); | ||
1963 | |||
1960 | 1964 | $errmsg = array(); | $errmsg = array(); |
1961 | 1965 | $load_form = TRUE; | $load_form = TRUE; |
1962 | 1966 | while (1) { | while (1) { |
... | ... | function rg_user_edit_high_level($db, &$rg) | |
1990 | 1994 | } | } |
1991 | 1995 | } | } |
1992 | 1996 | ||
1997 | // We try to prevent bots to create accounts | ||
1998 | $gen = rg_var_str('gen'); | ||
1999 | $xgen1 = substr($gen, 3); | ||
2000 | $xgen2 = substr($gen, 0, 3); | ||
2001 | $diff = ($gen1 - $xgen1) * 1000 + $gen2 - $xgen2; | ||
2002 | if ($diff < 2000) { | ||
2003 | rg_log('Bot tried to create account in ' . $diff . 'ms'); | ||
2004 | $errmsg[] = 'invalid token; try again'; | ||
2005 | break; | ||
2006 | } | ||
2007 | |||
1993 | 2008 | if ($ui['tos'] != 1) { | if ($ui['tos'] != 1) { |
1994 | 2009 | $errmsg[] = rg_template('user/tos_deny.html', $rg, TRUE /*xss*/); | $errmsg[] = rg_template('user/tos_deny.html', $rg, TRUE /*xss*/); |
1995 | 2010 | break; | break; |
... | ... | function rg_user_edit_high_level($db, &$rg) | |
2055 | 2070 | "rights", $ui['rights']); | "rights", $ui['rights']); |
2056 | 2071 | $rg['HTML:errmsg'] = rg_template_errmsg($errmsg); | $rg['HTML:errmsg'] = rg_template_errmsg($errmsg); |
2057 | 2072 | $rg['rg_form_token'] = rg_token_get($db, $rg, 'user_edit_hl'); | $rg['rg_form_token'] = rg_token_get($db, $rg, 'user_edit_hl'); |
2058 | $ret .= rg_template("user/add_edit.html", $rg, TRUE /* xss */); | ||
2073 | $rg['gen'] = $gen2 . $gen1; | ||
2074 | $ret .= rg_template("user/add_edit.html", $rg, TRUE /*xss*/); | ||
2059 | 2075 | } | } |
2060 | 2076 | ||
2061 | 2077 | return $ret; | return $ret; |
File root/themes/default/user/add_edit.html changed (mode: 100644) (index 8dcce44..2e10206) | |||
8 | 8 | <input type="hidden" name="uid" value="@@uid@@" /> | <input type="hidden" name="uid" value="@@uid@@" /> |
9 | 9 | <input type="hidden" name="doit" value="1" /> | <input type="hidden" name="doit" value="1" /> |
10 | 10 | <input type="hidden" name="token" value="@@rg_form_token@@" /> | <input type="hidden" name="token" value="@@rg_form_token@@" /> |
11 | <input type="hidden" name="gen" value="@@gen@@" /> | ||
11 | 12 | ||
12 | 13 | <p> | <p> |
13 | 14 | <label for="username">User name (public)</label><br /> | <label for="username">User name (public)</label><br /> |