Subject | Hash | Author | Date (UTC) |
---|---|---|---|
Fixed form generation test | b1ca5d96c15271fbe8a595a22227d15f917779dc | Catalin(ux) M. BOIE | 2020-08-17 06:46:56 |
Do not allow adding bugs if not logged in | 32db254689f7419fcea479985bbeff5cc579f7e7 | Catalin(ux) M. BOIE | 2020-08-17 06:45:46 |
markdown format improvements | bc1cc389bc851af6d0fb186bcfaf47525e235b6b | Catalin(ux) M. BOIE | 2020-08-17 06:45:01 |
Set the user's last IP also if she never logged in | 556ff3e7df07863f977caac1cb25906f8c307583 | Catalin(ux) M. BOIE | 2020-08-17 06:44:03 |
Cosmetic | d2a744bd020154afa13961f9d3d3da4c51853ff4 | Catalin(ux) M. BOIE | 2020-08-17 06:42:23 |
Improved nginx ssl configuration (mostly stapling) | a029f78cc3f66605dd95dfcc2abc9976ee1f7076 | Catalin(ux) M. BOIE | 2020-08-06 05:05:49 |
Tutorials updates (artifacts and CI) | 36ee6f7b792f32a8567c3f2f31088559ab6cd27a | Catalin(ux) M. BOIE | 2020-08-05 06:16:33 |
Added Markdown test | 23455db9b6ce8a82245f06de6e3d7c7e6b706464 | Catalin(ux) M. BOIE | 2020-07-31 05:41:46 |
Some SELinux cosmetic | 3bafeaa06231a67dcc66d37b50a6f5411b2bfbf9 | Catalin(ux) M. BOIE | 2020-07-31 05:41:28 |
Mostly cosmetic plus some tests | 1a538fff7a4886395612471211eeca0c091e6864 | Catalin(ux) M. BOIE | 2020-07-31 05:41:02 |
Added a custom Markdown parser | 67b9687fb858ba1018d58edd276836a0411acd1e | Catalin(ux) M. BOIE | 2020-07-31 05:39:49 |
Add an index variable to rg_template_table | f310f34a6c9a2a029d479d14d86e8ea2393ee3dd | Catalin(ux) M. BOIE | 2020-07-31 05:39:29 |
Mostly cosmetic in Source page | cac471307a58104fbfa7838b34a7e2ffd2e05260 | Catalin(ux) M. BOIE | 2020-07-31 05:38:48 |
Do not log bots connections | ef9cdff6a0cbd559f1833e46a66cbbbe726d3d99 | Catalin(ux) M. BOIE | 2020-07-31 05:38:13 |
Comparison update | b67344452d66b2ed8ef53f65470d53f8b40fe59e | Catalin(ux) M. BOIE | 2020-07-31 05:37:38 |
Minor fix for a variable type mismatch | a0680065333729b91558e77a6df4403ce8f5b1a5 | Catalin(ux) M. BOIE | 2020-07-31 05:37:20 |
Minor git fixes | a21b35cd0f87b844fe5ce4b8b2e14fab2506296e | Catalin(ux) M. BOIE | 2020-07-31 05:36:43 |
Docker updates | d3e9cd4e358cac2d4018dcf7dc681288445a679f | Catalin(ux) M. BOIE | 2020-07-31 05:36:08 |
Admin report improvements | b527baab12e2e08998672559b0f33fc6df15e74c | Catalin(ux) M. BOIE | 2020-07-31 05:35:25 |
Cosmetic | 30c879d625b094a33bd9a2165c67a8a11e802f42 | Catalin(ux) M. BOIE | 2020-07-31 05:34:19 |
File | Lines added | Lines deleted |
---|---|---|
inc/user.inc.php | 7 | 3 |
tests/http_confirm.php | 3 | 0 |
File inc/user.inc.php changed (mode: 100644) (index 26c4e2c..c554045) | |||
... | ... | function rg_user_edit_high_level($db, &$rg) | |
1998 | 1998 | ||
1999 | 1999 | // We try to prevent bots to create accounts | // We try to prevent bots to create accounts |
2000 | 2000 | $gen = rg_var_str('gen'); | $gen = rg_var_str('gen'); |
2001 | $xgen1 = substr($gen, 3); | ||
2002 | $xgen2 = substr($gen, 0, 3); | ||
2003 | $diff = ($gen1 - $xgen1) * 1000 + $gen2 - $xgen2; | ||
2001 | if (empty($gen)) { | ||
2002 | $diff = 0; | ||
2003 | } else { | ||
2004 | $xgen1 = substr($gen, 3); | ||
2005 | $xgen2 = substr($gen, 0, 3); | ||
2006 | $diff = ($gen1 - $xgen1) * 1000 + $gen2 - $xgen2; | ||
2007 | } | ||
2004 | 2008 | if ($diff < 2000) { | if ($diff < 2000) { |
2005 | 2009 | rg_log('Bot tried to create account in ' . $diff . 'ms'); | rg_log('Bot tried to create account in ' . $diff . 'ms'); |
2006 | 2010 | $errmsg[] = 'invalid token; try again'; | $errmsg[] = 'invalid token; try again'; |
File tests/http_confirm.php changed (mode: 100644) (index e77331c..865d8b2) | |||
... | ... | if ($r === FALSE) { | |
30 | 30 | exit(1); | exit(1); |
31 | 31 | } | } |
32 | 32 | $good_token = $r['tokens']['user_edit_hl']; | $good_token = $r['tokens']['user_edit_hl']; |
33 | $gen = $r['inputs']['gen']; | ||
33 | 34 | rg_log_exit(); | rg_log_exit(); |
34 | 35 | ||
35 | 36 | ||
... | ... | $data['pass2'] = $uniq; | |
42 | 43 | $data['plan_id'] = 0; | $data['plan_id'] = 0; |
43 | 44 | $data['tos'] = 1; | $data['tos'] = 1; |
44 | 45 | $data['force_confirm'] = 1; | $data['force_confirm'] = 1; |
46 | $data['gen'] = $gen; | ||
45 | 47 | $data['doit'] = 1; | $data['doit'] = 1; |
46 | 48 | $headers = array(); | $headers = array(); |
49 | sleep(3); // we need to sleep, else we will trigger the bot protection | ||
47 | 50 | $r = do_req($test_url . '/op/create_account?t=create_account', $data, $headers); | $r = do_req($test_url . '/op/create_account?t=create_account', $data, $headers); |
48 | 51 | if (!strstr($r['body'], 'Your account has been successfully created')) { | if (!strstr($r['body'], 'Your account has been successfully created')) { |
49 | 52 | rg_log_ml('body: ' . print_r($r['body'], TRUE)); | rg_log_ml('body: ' . print_r($r['body'], TRUE)); |