Open ended redirection after login could be a potential security issue. The referer could leak the session id, so at the very least we'd want to limit it to relative URLs.
Yes, this is a big issue. Before redirecting you'd need to inspect any return Url string parameter by passing it to a Uri ...
Search found 34 matches
- Sat Sep 07, 2013 5:08 pm
- Forum: [3.x] Discussion
- Topic: How will Symfony integration really work
- Replies: 5
- Views: 7907
- Sat Sep 07, 2013 2:38 pm
- Forum: [3.x] Discussion
- Topic: How will Symfony integration really work
- Replies: 5
- Views: 7907
Re: How will Symfony integration really work
That is the most informative post I've read in a while. Could you see there just being a new redirect function added in the future, or maybe just modify one of the existing ones? Right now phpBB uses hidden fields to determine where to send a user after logging in. PhpBB also currently keeps track ...
- Sat Sep 07, 2013 7:34 am
- Forum: [3.x] Discussion
- Topic: How will Symfony integration really work
- Replies: 5
- Views: 7907
How will Symfony integration really work
Symfony integration is a big deal right now. With good reason seeing as how much demand there is for it. I am just curious if Symfony intgegration is going to work the same as integrating PhpBB sessions into your site currently work.
We can incorporate PhpBB sessions into our site, and have an ...
We can incorporate PhpBB sessions into our site, and have an ...
- Thu Aug 01, 2013 5:14 pm
- Forum: [3.x] Discussion
- Topic: Biggest competition threats to PHPBB forums
- Replies: 71
- Views: 151868
Re: Biggest competition threats to PHPBB forums
Actually, +1/like should be a core feature. It's not just "retards" who want it, "liking" posts is huge for encouraging interaction in the forums and making people actually want to post, which is the dream of every admin.
Just because you're stuck in 2003 doesn't mean every new feature makes a ...
Just because you're stuck in 2003 doesn't mean every new feature makes a ...
- Mon Jul 29, 2013 6:10 am
- Forum: [3.x] Discussion
- Topic: New Admin redesign, see pic for draft, idea
- Replies: 57
- Views: 77488
Re: New Admin redesign, see pic for draft, idea
Edit: At the time of writing you are 4th for phpbb flat design , which shows how much phpbb lacks in taking part of this design trend :)
Applying it to everything because it's a hot trend is a bad idea. Personally I think the admin panel looks pretty good and doesn't need 'flattening'. This ...
Applying it to everything because it's a hot trend is a bad idea. Personally I think the admin panel looks pretty good and doesn't need 'flattening'. This ...
- Thu Jul 25, 2013 4:00 am
- Forum: [3.x] Discussion
- Topic: Biggest competition threats to PHPBB forums
- Replies: 71
- Views: 151868
Re: Biggest competition threats to PHPBB forums
Actually, +1/like should be a core feature. It's not just "retards" who want it, "liking" posts is huge for encouraging interaction in the forums and making people actually want to post, which is the dream of every admin.
Just because you're stuck in 2003 doesn't mean every new feature makes a ...
Just because you're stuck in 2003 doesn't mean every new feature makes a ...
- Wed Jul 24, 2013 10:39 pm
- Forum: [3.x] Discussion
- Topic: New Admin redesign, see pic for draft, idea
- Replies: 57
- Views: 77488
Re: New Admin redesign, see pic for draft, idea
have not looked at the html for this but I would say the biggest plus for something like this would be for cleaning up and refactoring the none semantic code that is truncated in all phpbb theme files.
That was exactly my point. I wasn't trying to take away from the OP. I just didn't see how ...
That was exactly my point. I wasn't trying to take away from the OP. I just didn't see how ...
- Wed Jul 24, 2013 8:13 am
- Forum: [3.x] Discussion
- Topic: New Admin redesign, see pic for draft, idea
- Replies: 57
- Views: 77488
Re: New Admin redesign, see pic for draft, idea
Why not just update the current admin panel making slight modifications to the design and using css3 in all the places images are used to accomplish what css couldn't when it was designed? That would at least be an update.
Which is just what he did?
He changed a bunch of CSS lines (300) and some ...
Which is just what he did?
He changed a bunch of CSS lines (300) and some ...
- Wed Jul 24, 2013 4:14 am
- Forum: [3.x] Discussion
- Topic: New Admin redesign, see pic for draft, idea
- Replies: 57
- Views: 77488
Re: New Admin redesign, see pic for draft, idea
How is this getting so much attention? It's some colored boxes with a few icons thrown in. I don't see how this provides any improvement to the current admin theme. Is this thing even semantic? It is the same design but with colored boxes. Why not just update the current admin panel making slight ...
- Mon Jul 22, 2013 9:12 pm
- Forum: [3.x] Discussion
- Topic: Could a second redirect function be useful as a core feature?
- Replies: 2
- Views: 4742
Re: Broaden Symfony 2 Authentication
https://www.phpbb.com/kb/article/phpbb3-sessions-integration/ explains how you can intergrate phpBB sessions on a normal site.
I am aware of how to integrate phpBB sessions with my site, and I am currently doing it. This isn't the problem. Integrating sessions and using phpBB along side a site is ...
I am aware of how to integrate phpBB sessions with my site, and I am currently doing it. This isn't the problem. Integrating sessions and using phpBB along side a site is ...