Version upped

use $INPUT for access to $_SERVER. fixes #131

Version upped

fix audio captcha. closes #115

It seems browsers pass different accept-encoding headers now for the
audio request, breaking auth_browseruid()

fix form handling

The recent login protect change actually influenced all forms instead
only applying to the login form

Version upped

fix failed login counter. closes #129

Fixes two problems:

* every request was counted as a failed login because $_REQUEST[u] is
nearly always set (to an empty string)
* the captcha entry was disp

fix failed login counter. closes #129

Fixes two problems:

* every request was counted as a failed login because $_REQUEST[u] is
nearly always set (to an empty string)
* the captcha entry was displayed one request too late, because the
event registration happened before the login fail counting

show more ...

translation update

translation update

translation update

Version upped

translation update

added bruteforce protection on login

The new default for protecting the login now takes failed logins from
the originating IP into account.

auto reformat code

translation update

translation update

Version upped

add compatibility for new FORM_* events

Version upped

update tests

fix deprecated use of curly braces

Version upped

In the registration form, I've picked "question" and added HTML to the question, to link to the answer (because the question is kind of arcane). However, clicking the link does nothing. Inspecting th

In the registration form, I've picked "question" and added HTML to the question, to link to the answer (because the question is kind of arcane). However, clicking the link does nothing. Inspecting the page, I found JS code that tries to extract the link to the audio snipped from an anchor tag, and then attaches a hander to the anchor that starts playing the audio and stop event processing. About line 16 in script.js

This change makes the JS code more specific.

show more ...

translation update

Curly braces changed to brackets