4 Commits

Author	SHA1	Message	Date
Matias Griese	aa4f80eec1	Greatly improve login related actions for Admin ... * Better isolate admin to prevent session related vulnerabilities * Removed support for custom login redirects for improved security * Shorten forgot password link lifetime from 7 days to 1 hour * Fixed login related pages being accessible from admin when user has logged in * Fixed admin user creation and password reset allowing unsafe passwords * Fixed missing validation when registering the first admin user * Fixed reset password email not to have session specific token in it	2021-03-26 14:39:37 +02:00
Matias Griese	8b6679855c	Fixed proxy/browser caching issues in admin pages	2020-09-14 13:46:59 +03:00
Lionel Salabartan	b59b9ea8ad	Use of language strings for placeholder in forms.	2016-03-15 01:02:44 +01:00
Gert	f085f8438b	forgot password [fixes #28]	2015-04-20 16:01:20 +02:00