Changeset 550 for trunk/lib/Auth_SQL.inc.php

Timestamp:

Nov 24, 2015 5:38:54 PM (8 years ago)

Author:

anonymous

Message:

Escaped quotes from email from names.
Changed logMsg string truncation method and added version to email log msg.
Better variable testing in carry queries.
Spelling errors.
Added runtime cache to Currency.
Added logging to form validation.
More robust form validation.
Added json serialization methond to Version.

File:

• trunk/lib/Auth_SQL.inc.php (modified) (7 diffs)

trunk/lib/Auth_SQL.inc.php

@@ -32 +32 @@
 class Auth_SQL
 {
-
     // Available hash types for class Auth_SQL.
     const ENCRYPT_PLAINTEXT = 1;
@@ -70 +69 @@
 
         // The type of hash to use for passwords stored in the db_table. Use one of the Auth_SQL::ENCRYPT_* types specified above.
-        // Hardened password hashes rely on the same key/salt being used to compare hashs.
+        // Hardened password hashes rely on the same key/salt being used to compare hashes.
         // Be aware that when using one of the hardened types the App signing_key or $more_salt below cannot change!
         'hash_type' => self::ENCRYPT_MD5,
@@ -176 +175 @@
             }
 
-            // The minimal columns for a table compatable with the Auth_SQL class.
+            // The minimal columns for a table compatible with the Auth_SQL class.
             $db->query("CREATE TABLE IF NOT EXISTS " . $db->escapeString($this->getParam('db_table')) . " (
                 " . $this->getParam('db_primary_key') . " MEDIUMINT UNSIGNED NOT NULL PRIMARY KEY AUTO_INCREMENT,
@@ -475 +474 @@
                 switch ($user_data['blocked_reason']) {
                     case 'account abuse' :
-                        $app->raiseMsg(sprintf(_("This account has been blocked due to possible account abuse. Please contact us to reactivate."), null), MSG_WARNING, __FILE__, __LINE__);
+                        $app->raiseMsg(sprintf(_("This account has been blocked due to possible account abuse. Please contact an administrator to reactivate."), null), MSG_WARNING, __FILE__, __LINE__);
                         break;
                     default :
@@ -507 +506 @@
                 if ($this->get('abuse_warning_level') < $this->_params['login_abuse_warnings']) {
                     // Warn the user with a password reset.
-                    $this->resetPassword(null, _("This is a security precaution. We have detected this account has been accessed from multiple computers simultaneously. It is against policy to share login information with others. If further account abuse is detected this account will be blocked."));
+                    $this->resetPassword(null, _("This is a security precaution. We have detected this account has been accessed from multiple computers simultaneously. It is against policy to share credentials with others. If further account abuse is detected this account will be blocked."));
                     $app->raiseMsg(_("Your password has been reset as a security precaution. Please check your email for more information."), MSG_NOTICE, __FILE__, __LINE__);
                     $app->logMsg(sprintf('Account abuse detected for user_id %s (%s) from IP %s', $this->get('user_id'), $this->get('username'), $this->get('remote_ip')), LOG_WARNING, __FILE__, __LINE__);
@@ -652 +651 @@
             if (strtotime($_SESSION['_auth_sql'][$this->_ns]['last_access_datetime']) > (time() - 43200)) {
                 // Only raise message if last session is less than 12 hours old.
-                $app->raiseMsg(_("Your session has expired. You need to log-in again."), MSG_NOTICE, __FILE__, __LINE__);
+                $app->raiseMsg(sprintf(_("For your safety we logged you out after being idle for %s. Please log in again."), humanTime($this->_params['idle_timeout'], 'hour', '%01.0f')), MSG_NOTICE, __FILE__, __LINE__);
             }
 
@@ -1044 +1043 @@
             $email = new Email(array(
                 'to' => $user_data['email'],
-                'from' => sprintf('%s <%s>', $app->getParam('site_name'), $app->getParam('site_email')),
+                'from' => sprintf('"%s" <%s>', addcslashes($app->getParam('site_name'), '"'), $app->getParam('site_email')),
                 'subject' => sprintf('%s password change', $app->getParam('site_name'))
             ));