Improve administrator menu #256

johanjanssens · 2015-10-27T23:48:11Z

Resolves #248

$im is a leftover variable when this line was removed: `$im = $user->authorise('core.manage', 'com_installer');` See SHA: 44f6d87

Undefined variable $im when editing plugin

Merged events dispatching inconsistencies fixes

If auto_start is disabled a session will only start when a session cookie is found.

Backport JSession::fork() from Joomla 1.5 to make sure the session ID gets regenerated and the data is copied over into the new session

…er actions" This reverts commit 74d6afb. The JSession::checkToken() method will return true if the session is not active. Conflicts: app/administrator/components/com_users/controllers/session.php

Backport security fixes from Joomla v3.4.5

Disable anonymous sessions

This reverts commit 3f24f5b.

Fix session fixation vulnerability

- Remove 'manager' from the menu items and pluralise the menu items. - Rename 'access levels' to 'presets' - Re-arrange the menu order, move system last and add settings to system - Rename 'global configuration' to 'system settings'. - Rename 'Configuration' and 'Options' to 'Settings' - Move 'disabled' and 'enabled' templates into single template to ease overrides - Remove the 'permission settings note' ` - Basic language file cleanup

raeldc and others added 18 commits September 29, 2015 21:04

Re #242: Removed undefined variable $im

ddcae51

$im is a leftover variable when this line was removed: `$im = $user->authorise('core.manage', 'com_installer');` See SHA: 44f6d87

Merge pull request #243 from joomlatools/feature/242-undefined-var

db3ce69

Undefined variable $im when editing plugin

#164 Merged events dispatching inconsistencies fixes

5fb7ecc

Merge pull request #245 from joomlatools/feature/164-events

1ecc478

Merged events dispatching inconsistencies fixes

#249 - Apply patch to JModelList to include filter blacklist

54ee9a3

#251 - Don't perform a token check on logins, password reminder actions

74d6afb

#251 - Add session_autostart option

7b51eb7

If auto_start is disabled a session will only start when a session cookie is found.

#251 - Return true in JSession::checkToken if session is not active

a07e0cc

#251 - Always autostart session in administrator

53ac37a

#251 - Prevent session fixation by fixing fork() method

3f24f5b

Backport JSession::fork() from Joomla 1.5 to make sure the session ID gets regenerated and the data is copied over into the new session

Revert "#251 - Don't perform a token check on logins, password remind…

4d5d5d9

…er actions" This reverts commit 74d6afb. The JSession::checkToken() method will return true if the session is not active. Conflicts: app/administrator/components/com_users/controllers/session.php

#251 - Remove fork() call

0dc0064

Merge pull request #250 from joomlatools/feature/249-patch

2e07565

Backport security fixes from Joomla v3.4.5

Merge pull request #252 from joomlatools/feature/251-autostart

185682c

Disable anonymous sessions

Revert "#251 - Prevent session fixation by fixing fork() method"

0e0c8ee

This reverts commit 3f24f5b.

#253 - Prevent session fixation by forking active sessions on login

648ed92

Merge pull request #254 from joomlatools/feature/253-fork

bf8fda0

Fix session fixation vulnerability

johanjanssens added the refactor label Oct 27, 2015

johanjanssens added this to the 1.0.1 milestone Oct 27, 2015

johanjanssens assigned stevenrombauts and unassigned stevenrombauts Oct 27, 2015

johanjanssens closed this Oct 27, 2015

johanjanssens removed this from the 1.0.1 milestone Oct 27, 2015

johanjanssens added invalid and removed refactor labels Oct 27, 2015

johanjanssens deleted the feature/248-menu branch October 28, 2015 13:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Improve administrator menu #256

Improve administrator menu #256

johanjanssens commented Oct 27, 2015

Improve administrator menu #256

Improve administrator menu #256

Conversation

johanjanssens commented Oct 27, 2015