Commit Graph

54637 Commits (ba0184cd130e936afc7859727e3d04c21b235b0a)
 

Author SHA1 Message Date
NicoDucou ba0184cd13 User: Optimization not to load all users if not necessary -refs BT#21339 2 years ago
Nicolas Ducoulombier 3934edba0e
Merge pull request #5093 from christianbeeznest/majorel-21208-2 2 years ago
christianbeeznst 3e40997af2 User: Fix usergroup add user behavior for default visibility settings - refs BT#21208 2 years ago
NicoDucou 62ba004a42 Learnpath: on scorm package update overwrite all the file even if newer files are on the server -refs BT#21129 2 years ago
NicoDucou 76f88c7c0e Course settings: add parameter to enable student to be assigned as course teacher -refs BT#21353 2 years ago
juancp-contidosdixitais a83430e58f
Admin: User import: Add ID and username of the user that already exists with the same email to the CSV 2 years ago
Yannick Warnier 57ed5746d2
Merge pull request #4966 from meuhland/meuhland-add-dkim-passphrase 2 years ago
NicoDucou e40e36def6 Security: Announcement: add verification if user is subscribed to course or subscribed to group to send response -refs BT#21329 2 years ago
NicoDucou 8f00c94057 LDAP: fix wrong variable name for salt parameter -refs BT#20849 2 years ago
NicoDucou 015cbccff2 Security: remove possibility for get_user_popup to be called recursively with all user_id by using a none predictable hash instead of the user_id -refs BT#21323 2 years ago
NicoDucou 329e20858e Admin: User: add option to show first connection date in the admin user list -refs BT#21312 2 years ago
NicoDucou 1deddd2a48 Session: fix move user from course to session to not subscribe user if only stats and correct session id management -refs BT#21342 2 years ago
Angel Fernando Quiroz Campos 0e6f6258bd Admin: Statistics: Optimize query for users_online 2 years ago
NicoDucou d822f46295 User: use template form user edit mail notification subject -refs BT#21334 2 years ago
NicoDucou 2e026eb001 User: add complete name to variable passed for email registration title if needed -refs BT#21334 2 years ago
NicoDucou 1156716eab Course: Block access for all to course's about page -refs BT#21299 2 years ago
NicoDucou e512dd2411 Session: Block access for all to session's about page -refs BT#21298 2 years ago
NicoDucou c5c9b33787 Session: limit access to admin session list to authorized user (admin, session admin and teachers) -refs BT#21330 2 years ago
Yannick Warnier 63d9dec120 Documentation: Add documentation about setting 'block_my_files_access' to security.html 2 years ago
NicoDucou ad8889faf3 Admin: fix sql query for last course access statistic report 2 years ago
Nicolas Ducoulombier f1ad14f3c0
Merge pull request #5026 from LudiscapeXApi/patch-22 2 years ago
Nicolas Ducoulombier 047c8e22ce
Remove forgotten debug code 2 years ago
Nicolas Ducoulombier 4803e8e2c7
Merge pull request #5025 from LudiscapeXApi/patch-21 2 years ago
DamienLyon 90aa018581
Update justification.php 2 years ago
DamienLyon 1fb92e279d
Update justification.php 2 years ago
Yannick Warnier 604308ad33 Minor: Add @todo in update_user_from_username 2 years ago
Yannick Warnier 2e92968324 Webservice: update_user_from_username: Add 'new_login_name' to allow changing the username - refs BT#21321 2 years ago
Yannick Warnier 402025eeed Webservice: Add parameter 'check_email_duplicates' to service 'save_user' to avoid allowing creation of duplicate e-mails - refs BT#21315 2 years ago
Yannick Warnier de205bc68f Minor: Typo in doc 2 years ago
NicoDucou 36dd77af57 Course: restrict access to course's about page only if user is connected if course_catalog_published is false -refs BT#21299 2 years ago
NicoDucou d0cea35728 Session: restrict access to session's about page only if user is connecter if course_catalog_published is false -refs BT#21298 2 years ago
NicoDucou 0b4df28e99 Security: Exercise: Do not permit access to questions review if the attempt is not of the connected user -refs BT#21295 2 years ago
Yannick Warnier 7e4d11f5d4 Webservice: Fix get_audit_items webservice (not getting params properly) - refs BT#21206 2 years ago
christianbeeznest 34c3357f4a
Security: Reduce XSS/CSRF probability as admin user - refs BT#21289 2 years ago
juancp-contidosdixitais 67076c4a7a
Survey: Fix export survey when open question element needs more than one page 2 years ago
Yannick Warnier 30a6454dec
Webservice: Add get_audit_items REST WS - refs BT#21206 2 years ago
juancp-contidosdixitais 9e35ee615c
Session: Allow session general coach to see more user reporting details - refs #4981 2 years ago
NicoDucou 8b0b91904b LDAP: Fix incorrect path for config file inclusion -refs BT#20849 2 years ago
Yannick Warnier cdc12f9956 Security: Remove connection information when opening db manager when 'db_manager_enabled' is true, reducing the likeliness of a successful BREACH attack - refs BT#21289 2 years ago
Yannick Warnier 34576eb281 Merge branch '1.11.x' of github.com:chamilo/chamilo-lms into 1.11.x 2 years ago
Yannick Warnier 56ac8ca228 Security: Add attribute rel="noopener noreferrer" to links with target=_blank to reduce probability of tabnabbing - refs BT#21289 2 years ago
Angel Fernando Quiroz Campos 72aa7604dd Security: Vendor: CKEditor: Update uicolor plugin - refs BT#21289 2 years ago
Yannick Warnier b3afaf6bc8 Security: Add configuration setting 'security_login_autocomplete_disable' to set autocomplete attribute of both login and password to "new-password" - refs BT#21289 2 years ago
Yannick Warnier f18067843e Security: Set ch_sid cookie to 'secure' when using HTTPS - refs BT#21289 2 years ago
Yannick Warnier 925e49f448 Merge branch '1.11.x' of github.com:chamilo/chamilo-lms into 1.11.x 2 years ago
Yannick Warnier 060b1e3eed Internal: Bum JS Cookie version to 2.2.0 to support "secure" - refs BT#21289 2 years ago
Yannick Warnier 9da3f3bac2 Security: Set cookie as secure if HTTPS - refs BT#21289 2 years ago
Angel Fernando Quiroz Campos 6c626eef61 Merge remote-tracking branch 'origin/1.11.x' into 1.11.x 2 years ago
Angel Fernando Quiroz Campos aa2e97b18b Security: Vendor: JqueryUI: Checkboxradio: Don't re-evaluate text labels as HTML - refs BT#21289 2 years ago
Angel Fernando Quiroz Campos 9dc3653137 Security: Vendor: Jquery: Mitigate possible XSS vulnerability - refs BT#21289 2 years ago