1. 08 Apr, 2008 1 commit
    • Dries's avatar
      - Patch #228594 by catch et al: removed access rule functionality from core. · 08aa2322
      Dries authored
        The access rules capability of user module has been stripped down to a
        simple method for blocking IP addresses. E-mail and username restrictions
        are now available in a contributed module. IP address range blocking is
        no longer supported and should be done at the server level.
      
        This patch is partly motiviated by the fact that at the usability testing,
        it frequently came up that users went to "access rules" when trying to
        configure their site settings.
      08aa2322
  2. 31 Mar, 2008 1 commit
    • Dries's avatar
      - Patch #29706 by pwolanin, solardiz, et al: more secure password hashing. · ed59911f
      Dries authored
        This is a big and important patch for Drupal's security.  We are switching
        to much stronger password hashes that are also compatible with the Portable
        PHP password hashing framework.
      
        The new password hashes defeat a number of attacks, including:
      
        - The ability to try candidate passwords against multiple hashes at once.
        - The ability to use pre-hashed lists of candidate passwords.
        - The ability to determine whether two users have the same (or different)
          password without actually having to guess one of the passwords.
      
        Also implemented a pluggable password hashing API (similar to how an alternate
        cache mechanism can be used) to allow developers to readily substitute an
        alternative hashing and authentication scheme.
      
        Thanks all!
      ed59911f
  3. 17 Mar, 2008 1 commit
  4. 11 Mar, 2008 1 commit
  5. 20 Feb, 2008 1 commit
  6. 19 Feb, 2008 1 commit
  7. 17 Feb, 2008 1 commit
  8. 03 Feb, 2008 1 commit
  9. 30 Jan, 2008 2 commits
  10. 27 Jan, 2008 1 commit
  11. 21 Jan, 2008 1 commit
  12. 17 Jan, 2008 2 commits
  13. 10 Jan, 2008 2 commits
  14. 29 Dec, 2007 1 commit
  15. 26 Dec, 2007 1 commit
  16. 20 Dec, 2007 2 commits
  17. 19 Dec, 2007 1 commit
  18. 05 Dec, 2007 2 commits
  19. 26 Nov, 2007 1 commit
  20. 21 Nov, 2007 2 commits
  21. 19 Nov, 2007 1 commit
  22. 14 Nov, 2007 1 commit
  23. 11 Nov, 2007 1 commit
  24. 09 Nov, 2007 1 commit
  25. 25 Oct, 2007 1 commit
  26. 17 Oct, 2007 3 commits
  27. 10 Oct, 2007 1 commit
  28. 02 Oct, 2007 1 commit
  29. 15 Sep, 2007 1 commit
  30. 14 Sep, 2007 2 commits
  31. 12 Sep, 2007 1 commit