adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-08-09 02:03:18 +02:00
Code Issues Packages Projects Releases Wiki Activity

fixes GHSA-9986-w7jf-33f6 and fixes GHSA-9986-w7jf-33f6

Browse Source 
* Introduces a verification code step before generating password reset links.
* New configuration "password_reset_code_duration".
* Adds Base32, TOTP and PHPQRCode classes .
* New section is required in password.tpl: code verification won't work on themes not updated yet.
* 5 new language strings were added.
This commit is contained in:
Linty
2025-10-17 15:38:21 +02:00
parent ce3ccfe563
commit 9ac99be1de
12 changed files with 3771 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/config_default.inc.php
+5
View File
@@ -635,6 +635,11 @@ $conf['password_reset_duration'] = 60*60;
// of an password activation link. Default value is 72 hours (259200 seconds).
$conf['password_activation_duration'] = 3*24*60*60;
// password_reset_code_duration: defines the validity duration (in seconds)
// for the verification code sent before genrating the reset link.
// Default value is 5 minutes (max = 15 minutes)
$conf['password_reset_code_duration'] = 5 * 60;
// +-----------------------------------------------------------------------+
// | history |
// +-----------------------------------------------------------------------+