Skip to content

Commit

Permalink
Merge branch 'release/3.7.8.1'
Browse files Browse the repository at this point in the history
  • Loading branch information
rhukster committed Apr 19, 2024
2 parents f94bbcc + d138119 commit 4f617fb
Show file tree
Hide file tree
Showing 3 changed files with 10 additions and 4 deletions.
10 changes: 8 additions & 2 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,9 +1,15 @@
# v3.7.8.1
## 04/19/2024

1. [](#bugfix)
* Fixed a typo in `Email::sendActivationEmail()` [#303](https://github.com/getgrav/grav-plugin-login/issues/303)

# v3.7.8
## 04/16/2024

1. [](#improved)
* Use `random_bytes()` for password reset and activation, only fallback to `mt_rand()` if there's a generation error
* Added a new `site_host` field in the "Security" section to use in password reset and activation links sent in email. This allows you to avoid any "Password Reset Poisoning" attacks.
* Use `random_bytes()` for password reset and activation, only fallback to `mt_rand()` if there's a generation error - discovered by [Fortbridge](https://fortbridge.co.uk)
* Added a new `site_host` field in the "Security" section to use in password reset and activation links sent in email. This allows you to avoid any "Password Reset Poisoning" attacks. - discovered by [Fortbridge](https://fortbridge.co.uk)
* Added a new warning in reset and activation emails that shows the "site host" clearly in order to avoid any nefariously sent emails.

# v3.7.7
Expand Down
2 changes: 1 addition & 1 deletion blueprints.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
name: Login
slug: login
type: plugin
version: 3.7.8
version: 3.7.8.1
testing: false
description: Enables user authentication and login screen.
icon: sign-in
Expand Down
2 changes: 1 addition & 1 deletion classes/Email.php
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@ public static function sendActivationEmail(UserInterface $user, UserInterface $a
$activationRoute = rtrim($site_host, '/') . '/' . ltrim($activationRoute, '/');
}

$activationLink = Utilis::url(
$activationLink = Utils::url(
$activationRoute . '/token' . $param_sep . $token . '/username' . $param_sep . $user->username,
null,
true
Expand Down

0 comments on commit 4f617fb

Please sign in to comment.