summaryrefslogtreecommitdiffstats
path: root/Auth
Commit message (Expand)AuthorAgeFilesLines
* #130: PHP 7 compatibility (fixes #129)HEADorigin/masterorigin/HEADmasterOleksandr Zahorulia2016-09-3025-67/+69
* Fixes CVE-2014-8150Marco Ceppi2015-07-301-1/+11
* loop over directories "the right way"Lawrence Brown2015-01-031-1/+1
* Provide several modifications on the PredisStore implementation.drmalex072014-03-111-4/+7
* Merge pull request #115 from marcoceppi/warn-when-person-is-doing-harmMarco Ceppi2014-02-131-2/+7
|\
| * Add warning when you disable SSL, don't be silly pleaseMarco Ceppi2014-01-221-2/+7
* | Reject OpenID XML responses with a doctype CVE-2012-4554Marco Ceppi2014-01-231-0/+4
* | Clean upMarco Ceppi2014-01-231-3/+3
|/
* Merge pull request #113 from thanhhh/masterMarco Ceppi2014-01-201-1/+5
|\
| * Remove wasted white space for #113ThanhHH2014-01-161-2/+2
| * Add Auth_OpenID_DISABLE_SSL_VERIFY opt to disable SSL verifyThanhHH2014-01-091-3/+7
* | Yadis: drop custom replaceEntities() function and use html_entity_decodeAdam Williamson2014-01-091-24/+1
* | Merge pull request #111 from stutiredboy/masterMarco Ceppi2014-01-091-0/+3
|\ \ | |/ |/|
| * Update Consumer.phpstutiredboy2013-12-171-0/+3
* | Merge pull request #94 from etienneq/pass-by-reference-fixMarco Ceppi2013-12-175-14/+14
|\ \ | |/ |/|
| * Call-time pass-by-reference fixEtienne Quiel2013-04-095-14/+14
* | Merge pull request #105 from vmattila/predis-storeMarco Ceppi2013-09-031-2/+2
|\ \
| * | Fixed wrong expiration command (expiresat -> expireat)Ville Mattila2013-09-021-2/+2
* | | correction for PHP < 5.2.11nao-pon2013-08-251-6/+11
* | | Merge pull request #103 from vmattila/predis-storeMarco Ceppi2013-08-171-0/+208
|\ \ \ | |/ /
| * | Implemented PredisStore to provide association store for Redis servers.Ville Mattila2013-08-131-0/+208
* | | disable external XML entities and libxml errorsWill Norris2013-08-111-1/+8
|/ /
* | Prevent errors in strict mode due to weird PEAR static method declarationsDavid Simon2013-05-212-14/+14
* | Fixes #54. Pass request data to fix AX.Evgeniya Patuk2013-05-081-3/+8
* | included more checks for file access errorsEtienne Quiel2013-05-061-1/+10
|/
* Better to use isset() in case it doesn't exist.Henrik Sjökvist2013-02-211-1/+1
* If $_SESSION isn't set, don't trigger a PHP notice.Henrik Sjökvist2013-02-201-1/+1
* Merge pull request #83 from UNINETT/masterMarco Ceppi2012-12-211-3/+3
|\
| * Properly escape form output data.Olav Morken2012-10-191-3/+3
| * Revert "1. Added urldecoding POST form values (browser will encode them if ne...Olav Morken2012-10-191-1/+1
* | Merge pull request #61 from JonTheNiceGuy/removeloggingMarco Ceppi2012-12-211-7/+0
|\ \
| * | Removed logging calls for a successful retrieval, as the PlainHTTPFetcher doe...Jon "The Nice Guy" Spriggs2011-10-051-7/+0
* | | Set proxy options only if Auth_OpenID_HTTP_PROXY is explicitly setitsour2012-10-251-1/+7
| |/ |/|
* | Return string instead of arrayDaniel Hofstetter2012-08-141-1/+5
* | Removed one deprecated runtime call-by-referenceVille Mattila2012-08-091-1/+1
* | Merge pull request #41 from cakebaker/masterMarco Ceppi2012-07-311-1/+1
|\ \
| * | Using varchar(2047) instead of blob for server_url columnDaniel Hofstetter2010-12-151-1/+1
* | | fixed call-time pass-by-referenceArnaud Le Blanc2012-03-043-7/+11
* | | allow custom CA certs to be used to verify hostsWill Norris2012-01-021-0/+6
* | | restructure Auth_OpenID_VERIFY_HOST logicWill Norris2012-01-021-24/+19
* | | In response to Issue 38 and issue 51, this patch allows forcing host verifica...Jon "The Nice Guy" Spriggs2011-10-051-3/+24
| |/ |/|
* | Improve PHP 5 complianceAdrian Lang2010-10-084-3/+9
|/
* Patching issue 17 (http://github.com/openid/php-openid/issues/#issue/17)JonTheNiceGuy2010-07-211-1/+5
* fixed Parse::match() returning different types and cleaned call-by-ref warningsTim Preston2010-07-203-5/+5
* 1. Added urldecoding POST form values (browser will encode them if needed).Shein Alexey2010-07-201-1/+1
* callback requires 3 parameters, not 2. fixes issue#1 from github.com/openid/p...Alexey Zakhlestin2010-07-201-1/+1
* no need for reference here, as php-5.x already treats all objects as pseudo-r...Alexey Zakhlestin2010-07-201-1/+1
* Use constant-time comparison of signatures to mitigate timing attacksCarl Howells2010-07-202-1/+15
* Updating version2.2.2Lilli2010-04-291-1/+1
* Fixing issue opened by jhr with patch found on bugs.debian.orgs: "A Debian us...Lilli2010-04-291-1/+1
* Updated version2.2.1Lilli2010-04-281-1/+1
* Merge branch 'master' of github.com:openid/php-openidLilli2010-04-282-14/+14
|\
| * form should autosubmit. fixes issue#2 from github.com/openid/php-openid branchAlexey Zakhlestin2010-04-291-1/+1
| * fix mb_ereg warningAlexey Zakhlestin2010-04-291-11/+11
| * fix typoAlexey Zakhlestin2010-04-291-2/+2
* | Manually added indeyet's commit because it was failing: 'no need for referenc...Lilli2010-04-281-1/+1
|/
* Merge branch 'master' of github.com:openid/php-openidLilli2010-04-283-15/+3
|\
| * Don't throw error when when received arg count is unlimitedAnthony BRETAUDEAU2010-04-291-1/+1
| * As written in doc, don't erase signed args when some of the args are unsignedAnthony BRETAUDEAU2010-04-291-1/+1
| * SQLStore: use is_subclass_of to determine if we have a PEAR instance.Daniel Hahler2010-04-291-13/+1
* | Added ccazette/indeyet's change to function returnToVerified() manually as th...Lilli2010-04-281-2/+3
* | Fixed minor issue that Ouroboros17 brought to my attention: 'Server.php give ...Lilli2010-04-281-1/+1
|/
* Removed/changed references to openidenabled.com. At this time, not every ref...2.2.0Lilli2010-03-161-1/+1
* Added the following patch from the trac.openidenabled.com bug tracker:Lilli2010-02-167-8/+10
* Added the following patch from the trac.openidenabled.com bug tracker:Lilli2010-02-1622-236/+189
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-121-0/+20
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-122-2/+2
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-121-1/+1
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-123-4/+32
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-121-2/+2
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-122-3/+39
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-101-0/+413
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-101-3/+18
* Added the following patch from the dev@openidenabled.com mailing list:Lilli2010-02-101-1/+12
* Added the changes to consumer and consumer test that were made to openidenabl...Lilli2010-02-081-1/+2
* still use in_array, just require strict type checkingWill Norris2009-05-281-4/+2
* [ few random cleanup changes ]Luke Shepard2009-05-286-9/+44
* [ remove closing ?> tag from all files ]Luke Shepard2009-05-2840-40/+15
* Revert "[ remove closing ?> tag from all files ]"Luke Shepard2009-05-2740-15/+40
* [ remove closing ?> tag from all files ]Luke Shepard2009-05-2740-40/+15
* [ Upgrading php-openid test framework to use PHPUnit 3.3 ]Luke Shepard2009-05-273-7/+7
* [project @ Unify method signatures to reduce E_STRICT warnings]tailor2008-12-122-2/+2
* [project @ Move signed assertions code into contrib/]tailor2008-12-082-400/+0
* [project @ OpenID Signed Assertions(Implementation of old sxip draft)]tailor2008-11-142-0/+400
* [project @ Message: indentation]tailor2008-11-071-2/+2
* [project @ getAliasedArg() returns OpenID namespace when $aliased_key is 'ns']tailor2008-11-071-0/+5
* [project @ Don't use Range header for ID page requests]tailor2008-10-312-4/+0
* [project @ Update version to 2.1.2]Kevin Turner2008-09-091-1/+1
* [project @ If we're generating user_setup_urls, let's at least do it correctly]tailor2008-07-111-3/+9
* [project @ Provide the user_setup_url in the Auth_OpenID_SetupNeededResponse ...tailor2008-07-101-1/+3
* [project @ Update version to 2.1.1]Kevin Turner2008-06-271-1/+1
* [project @ Updated TLD list in TrustRoot.php]Kevin Turner2008-06-251-13/+18
* [project @ remove Auth_OpenID::quoteMInimal. Resolves #262.]Kevin Turner2008-06-251-32/+0
* [project @ ParanoidHTTPFetcher-strpos-instead-of-preg_match-and-code-improvem...dAniel hAhler2008-06-221-14/+6
* [project @ fix accept header]tailor2008-06-231-1/+1
* [project @ Fix Consumer's OpenID 1 checkid_immediate failure handling (thanks...http://j3h.us/2008-06-201-1/+2
* [project @ Test and fix HMAC-SHA256]http://j3h.us/2008-06-201-1/+1
* [project @ Rename files and tests related to HMACSHA1 and HMACSHA256]http://j3h.us/2008-06-206-5/+4
* [project @ etxrd.getCanonicalID: case-insensitive comparsions, patch from =wil]Kevin Turner2008-06-131-8/+8
* [project @ Accept response code 206 from fetcher results (part 2). Fixes #260]Kevin Turner2008-06-112-3/+3