Commit Graph

30 Commits

Author SHA1 Message Date
Jamie Cameron
910d011edd Make the banner cookie HTTPS only 2025-04-29 10:37:38 -07:00
Jamie Cameron
18a4c86e2f Work on forgotten password page 2025-04-12 11:00:30 -07:00
Jamie Cameron
a6c3cccbac Code cleanups 2025-04-11 22:11:59 -07:00
iliajie
e6a2bb15b0 Fix to test on a newly added API sub 2022-10-17 21:59:46 +03:00
iliajie
ae99d7a862 Fix to use a new sub to test default cert 2022-10-17 14:39:49 +03:00
iliajie
71fb561694 Fix to support displaying $miniserv::defcert warning message 2022-10-14 16:16:17 +03:00
Jamie Cameron
4effbdd722 Tag twofactor field 2022-08-23 19:48:57 -07:00
Ilia Rostovtsev
f69fa81e59 Fix to get safely using wrapper sub 2/2 2021-09-28 16:30:05 +03:00
Ilia Rostovtsev
1534428666 Fix not to "secure" already secured above (L27) 2020-06-14 15:27:00 +03:00
Jamie Cameron
c631538878 Make testing cookie secure https://github.com/webmin/webmin/issues/1245 2020-06-13 10:52:20 -07:00
Jamie Cameron
68f4a3269d Code cleanup - always explicitly open for read 2020-03-14 09:33:28 -07:00
Ilia Rostovtsev
4bd15b01dd Fix typo 2020-01-16 13:09:25 +03:00
Jamie Cameron
b776fad00a Fix more use of .. in include path 2018-07-04 12:24:02 -07:00
Jamie Cameron
16445b60e2 Disallow multiple field to keep PCI scanners happy https://github.com/webmin/webmin/issues/833 2018-03-08 21:50:39 -08:00
Matt N
30dd9d1fb4 Don't blank the password field on the login page
This interferes with password managers and the general consensus from the security community is that password managers improve security by encouraging stronger passwords and reducing password re-use.
2017-02-01 01:33:30 -08:00
Mads Mætzke Tandrup
30168f57bb Add httpOnly to cookies on login page. Solves #4565.
Add httpOnly to pam_login and session_login to avoid security scans reporting false positives on cookies without httpOnly
2015-04-01 14:37:02 +02:00
Jamie Cameron
7b95e948a3 Two-factor disenroll button, other fixes for authy support 2013-09-28 11:42:58 -07:00
Jamie Cameron
caaff31794 Two-factor integration with miniserv 2013-09-27 17:02:30 -07:00
Jamie Cameron
661346b6dc Close <p> tag http://virtualmin.com/node/29770 2013-08-31 20:51:58 -07:00
Jamie Cameron
134293d6a7 Disable autocomplete on login form if remembering login is disabled https://sourceforge.net/p/webadmin/bugs/4250/ 2013-06-06 10:26:28 -07:00
Jamie Cameron
4ade6db23c Show hostname in login page title if enabled http://www.virtualmin.com/node/15437 2012-09-19 16:29:48 -07:00
Jamie Cameron
6410b9cee9 Show page title on login page 2010-11-12 23:09:24 -08:00
Jamie Cameron
550b2b7976 Use new module in top-level CGIs 2009-03-01 07:49:56 +00:00
Jamie Cameron
2985c77717 Revert centering .. not needed 2008-12-17 07:48:39 +00:00
Jamie Cameron
cec85c6aa2 Fix alignment of post-login-window string 2008-12-17 07:03:33 +00:00
Jamie Cameron
ddda3b069f Remove theme-specific login form, and re-write with ui-lib.pl 2008-11-06 23:37:24 +00:00
Jamie Cameron
fc6eaabfb4 Committed missed files 2007-06-01 01:00:34 +00:00
Joe Cooper
18966d23de Make login form less ugly, and styleable. 2007-05-10 19:22:00 +00:00
Jamie Cameron
560f87794c Catalan translation, other random fixes 2007-05-05 04:25:27 +00:00
Jamie Cameron
fc1c1b243f Initial checkin of Webmin 2007-04-12 20:24:50 +00:00