• last updated 22 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Add files missed by last commit

    • -0
    • +11
    /openacs-4/packages/acs-admin/www/auth/login-attempts.adp
    • -0
    • +67
    /openacs-4/packages/acs-admin/www/auth/login-attempts.tcl
- Add new feature to prevent/slowdown brute force attacks on login by counting the number of

failed consecutive login attempts based on ip-address and subsite.

- Add new package dependency: package "acs-admin" now requires "acs-authentication"

Reduce stress on util_memoize_cache by removing the - by far - most often reused

item in the cache (apm_package_installed_p_not_cached ref-timezones). Instead,

we fall back to the (per-thread) caching of apm_package_id_from_key.

Whitesepace cleanup

white space cleanup and removal of unneeded line

- make sure that length timitation of tsearch vector does not raise errors

- refactor code to avoid redundant logic

- bump version number to 5.10.0d2

Improve handling of unauthorized cases via exception handling

Improve performance of ::xowiki::datasource, especially for huge text/plain xowiki::Files

complete truncated file

factor out naviserver and aolserver specific code

Factor out code for navisever and aolserver

    • -220
    • +1
    /openacs-4/packages/acs-tcl/tcl/memoize-procs.tcl
fix adp expression

reduce error-message swallowing: remove catch operations to trigger error messages, when something goes wrong on the OS-level

fix internal redirection to beautified error pages in connection with host-node-mapped subsites

clean up expression: no need to use backslashes in tcl expression

Upgrade fix

Execute cleanup only if explicitly uncommented, as might have performance implications.

Also, correct unaligned constraint names in old instances upgraded incrementally over the years.

Fix current date UTC query

Add missing change in the data model from previous commit

Portrait management reform and correction

Moved logics to create a portrait in a proc in order to reuse it in other places

such as picture retrieval services (e.g. Bach picture retrieval at WU). Turns out

we were not doing our homeworks here: when the portrait is created into CR, a

cr_child_rel is created. When the portrait was erased though, this was not cleaned

up propely, leaving dangling acs_objects with no reference in cr_child_rels table.

On busy sites, this can grow in the ten thousands order of magnitude. Changes include

also fix for this behavior and tuples cleanup.

avoid errors, when connection is already closed

fix more spelling issues

remove spurious "expr" in "expr"

simplfy expressions (no need for backslash), standardize writing of RFC

fix spelling

Apply pachtes #960, #961, #962 and #963 from Ben Brink, bump version number to 5.10.0d3 such that changes in .info file get picked up

provide templated error pages for subsite. without this, error pages for host-node-mapped subsites are a pain

CVS: ----------------------------------------------------------------------

    • -0
    • +5
    /openacs-4/packages/acs-subsite/www/shared/403.adp
    • -0
    • +4
    /openacs-4/packages/acs-subsite/www/shared/404.adp
    • -0
    • +5
    /openacs-4/packages/acs-subsite/www/shared/500.adp
    • -0
    • +5
    /openacs-4/packages/acs-subsite/www/shared/503.adp
fix for bug #3338

fix ad_form definition (moved redirect in after_submit block, ad_return_template at the end of template outside the ad_form) (thanks to Felix Moedritscher)

Improve HTML

modernize Tcl code