Changeset 421 for trunk/lib/Auth_SQL.inc.php

Timestamp:

Jul 8, 2013 4:31:19 PM (11 years ago)

Author:

anonymous

Message:

Added switch for login_form_allow_autocomplete

File:

• trunk/lib/Auth_SQL.inc.php (modified) (2 diffs)

trunk/lib/Auth_SQL.inc.php

@@ -116 +116 @@
         // Use a db_login_table to detect excessive logins. This requires blocking to be enabled.
         'abuse_detection' => false,
+
+        // Allow users to save login form passwords in their browser? Setting to 'true' may pose a potential security risk.
+        'login_form_allow_autocomplete' => false,
     );
 
@@ -303 +306 @@
             ");
         }
-        $_SESSION['_auth_sql'][$this->_ns] = array('authenticated' => false);
+        $_SESSION['_auth_sql'][$this->_ns] = array(
+            'authenticated'         => false,
+            'user_id'               => null,
+            'username'              => null,
+            'login_datetime'        => null,
+            'last_access_datetime'  => null,
+            'remote_ip'             => getRemoteAddr(),
+            'login_abuse_exempt'    => null,
+            'match_remote_ip_exempt'=> null,
+            'user_data'             => null,
+        );
     }