banananetwork
/
postfixadmin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
postfixadmin_3.2
master
feature-php-crypt-prefix
gh-pages
postfixadmin-2.3
release-2020-05-22-11-27
postfixadmin-1.3.7
postfixadmin-1.4.0
postfixadmin-1.5.0
postfixadmin-1.5.1
postfixadmin-1.5.2
postfixadmin-1.5.3
postfixadmin-1.5.4
postfixadmin-2.0.0
postfixadmin-2.0.1
postfixadmin-2.0.2
postfixadmin-2.0.3
postfixadmin-2.0.4
postfixadmin-2.0.5
postfixadmin-2.1.0
postfixadmin-2.2.0
postfixadmin-2.2.1
postfixadmin-2.2.1.1
postfixadmin-2.3.3
postfixadmin-2.3.4
postfixadmin-2.3.5
postfixadmin-2.3.6
postfixadmin-2.3.7
postfixadmin-2.3beta
postfixadmin-2.3rc1
postfixadmin-2.3rc2
postfixadmin-2.3rc3
postfixadmin-2.3rc4
postfixadmin-2.3rc5
postfixadmin-2.3rc6
postfixadmin-2.3rc7
postfixadmin-2.91
postfixadmin-3.0.2
postfixadmin-3.1
postfixadmin-3.2
postfixadmin-3.2.1
postfixadmin-3.2.2
postfixadmin-3.2.3
postfixadmin-3.2.4
push
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '768d29623e'
${ noResults }
postfixadmin/templates
History
Sylvain Tissot ffb84283c2
Harden password reset process 
The improvements are:

- Die with an explicit message when a user is trying to reset his lost password and the option is disabled in config
- Redirect user to main page after password change using relative URL
- Don't leak info whether user exists or has recovery info defined
- Throttle password reset requests to prevent brute force attacks
- Show phone/alt email fields in mailbox/admin edit form only when the password reset option is enabled
- Make database upgrade code compatible with other databases types
- Use the existing password generator to generate OTP. It is now stored in database, unique to each user, valid only for 1 hour and can only by used once.
 		7 years ago
..
backupwarning.tpl backup.php: 11 years ago
broadcast-message.tpl Fix issue with checkbox in broadcast 8 years ago
editform.tpl Add CSRF protection for POST requests 8 years ago
flash_error.tpl flash_error.tpl: 13 years ago
footer.tpl Links with target="_blank" should have rel="noopener" 7 years ago
header.php - accidentially deleted header.php. Needed for setup 15 years ago
header.tpl header.tpl: 11 years ago
index.tpl Allows a user or admin to reset his/her forgotten password with a code sent by email/SMS #18 7 years ago
list-virtual.tpl list-virtual.tpl: add missing "download as CSV" for mailboxes 8 years ago
list-virtual_alias.tpl Use list.tpl to display the alias list 10 years ago
list-virtual_alias_domain.tpl list-virtual_alias_domain: 9 years ago
list-virtual_mailbox.tpl migrate search input field to use search[_], and use list.tpl for alias domains 10 years ago
list.tpl list.tpl: 9 years ago
login.tpl Harden password reset process 7 years ago
main.tpl *.lang: 11 years ago
menu.tpl Switch config item for broadcast. 8 years ago
message.tpl message.tpl: 13 years ago
password-change.tpl Allows a user or admin to reset his/her forgotten password with a code sent by email/SMS #18 7 years ago
password-recover.tpl Allows a user or admin to reset his/her forgotten password with a code sent by email/SMS #18 7 years ago
password.tpl Add CSRF protection for POST requests 8 years ago
sendmail.tpl Add CSRF protection for POST requests 8 years ago
users_edit-alias.tpl Add CSRF protection for POST requests 8 years ago
users_main.tpl added config option to disable "edit_alias" function for users 8 years ago
users_menu.tpl added config option to disable "edit_alias" function for users 8 years ago
vacation.tpl Add CSRF protection for POST requests 8 years ago
viewlog.tpl use $CONF[page_size] in viewlog.php 8 years ago