Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2019-05-16 | Add password dictionary check | Yorhel | 1 | -0/+3 | |
This affects the following: - API login with a weak password is disallowed, affected users will have to change their password through the website to continue using the API. - Registration, password reset or password change forms require the new password to not be in the dictionary. - Attempting to log in to the website with a weak password will force-redirect to a password change form, allowing a new password to be set (using the weak-but-still-valid password as check). | |||||
2018-10-02 | DB: Convert resolution into an enum | Yorhel | 1 | -1/+1 | |
Been wanting to do this for a long time - using an integer index into an array that changes once in a while is way too fragile. Doubly so when said indices are also used in filters and URLs that can't be updated every time a new resolution is added. | |||||
2018-06-13 | Multi::API: Add "get characters instances" | Yorhel | 1 | -1/+17 | |
2018-05-12 | API: Make username in login command case-insensitive | Yorhel | 1 | -0/+2 | |
https://vndb.org/t3599.201 | |||||
2017-08-14 | API: Some additions to the "get *list" commands | Yorhel | 1 | -6/+16 | |
2017-06-21 | API: Various additions | Yorhel | 1 | -2/+18 | |
2017-05-25 | API: Add some hidden checks to staff stuff | Yorhel | 1 | -4/+11 | |
2017-05-22 | API: Add some flags to query staff/seiyuu data | Yorhel | 1 | -0/+47 | |
2017-04-28 | API: Made a start on "get staff" support | Yorhel | 1 | -0/+75 | |
2017-03-03 | API: Add traits filter to get character | Yorhel | 1 | -0/+4 | |
2017-01-25 | API: Fix Unicode password login + some messages | Yorhel | 1 | -3/+3 | |
2016-12-04 | API: Add username filter to "get user" + d11 updates | Yorhel | 1 | -0/+5 | |
2016-11-27 | SQL: Use separate role for Multi2.26 | Yorhel | 1 | -25/+24 | |
2016-09-18 | Suppress silly Perl 5.22 warnings about extra sprintf args | Yorhel | 1 | -0/+1 | |
2016-09-11 | API: Add VN relations "official" field | Yorhel | 1 | -5/+2 | |
2016-08-31 | API: Add simple "get user" command | Yorhel | 1 | -4/+24 | |
2016-07-31 | API: Support array mathing in "get character" vn filter | Yorhel | 1 | -0/+1 | |
2016-06-19 | API: Add "tags" filter to "get vn" + increase throttle throttle | Yorhel | 1 | -4/+8 | |
2016-06-12 | API: Increase some limits + set custom TCP keepalive values | Yorhel | 1 | -3/+15 | |
2016-05-15 | API: Allow sorting 'get vn' on stats fields | Yorhel | 1 | -1/+4 | |
2016-04-11 | API: Added "vns" flag and member to "get character" | Yorhel | 1 | -0/+9 | |
2016-01-29 | Multi::API: added 'screens' flag to 'get vn' | Yorhel | 1 | -0/+18 | |
2016-01-16 | L10N: Intern languages/platforms/resolutions/media/ptype/rtype/vnlength | Yorhel | 1 | -4/+4 | |
2015-12-29 | Multi::API: Add support for TLS | Yorhel | 1 | -8/+23 | |
2015-11-01 | Removed support for sha256-hashed passwords | Yorhel | 1 | -5/+1 | |
They had to be deleted from the database at some point, otherwise we still have thousands of easily-cracked password hashes in the database. Note that I could have opted to use scrypt on top of the sha256 hashes so the passwords would remain secure without needing to reset everything, but doing that after one year of switching to scrypt is likely not worth it. Everyone who still actively uses his account has already been converted to scrypt, everyone else should just reset their password whevener they decide to come back. | |||||
2015-10-21 | SQL: Fix Multi to use the new DB schema | Yorhel | 1 | -88/+88 | |
That should be the last thing to convert to the new schema. | |||||
2015-09-08 | Multi::API: Set keepalive on sockets to detect dead TCP connections | Yorhel | 1 | -0/+1 | |
Hopefully prevents issues like https://vndb.org/t3599.53 | |||||
2015-07-21 | Multi::API: Support IPv6 | Yorhel | 1 | -1/+5 | |
This was more trivial than I had expected. I already took ipv6 into account when rewriting the API for AnyEvent (including the use of norm_ip()), so that part was fine. The only part I had to fix was the listening socket, and I had to ensure that the $c->{ip} was correct. The first was easy, and the latter was properly handled by AnyEvent automatically. Looks like AnyEvent automatically 'unpacks' IPv4-mapped IPv6 addresses, so I didn't have to deal with that myself. | |||||
2015-07-20 | Multi::API: Throttle "throttled" error replies | Yorhel | 1 | -3/+13 | |
This is to save system resources when a misbehaving client keeps sending commands while it's being throttled. It also protects against trivial DoS attacks. | |||||
2015-04-29 | Multi::(API:IRC): Fix some unicode handling issues | Yorhel | 1 | -2/+2 | |
I forgot that AnyEvent::Handle works with bytes rather than unicode strings, even though that is kind of obvious. I expected that AnyEvent::IRC would automatically handle the conversion between byte strings and Unicode strings, but it doesn't, so that has to be done manually. | |||||
2015-04-27 | Multi::API: Fixed various bugs found while testing | Yorhel | 1 | -4/+7 | |
Ugh I wish I had proper unit tests. Ugh writing proper unit tests is a loooot more work than just doing a bunch of quick manual tests. | |||||
2015-04-27 | Multi::API: Fix bug when querying stuff while logged in | Yorhel | 1 | -1/+1 | |
2015-04-27 | Multi::API: Fully implement the 'set' command with AnyEvent | Yorhel | 1 | -58/+59 | |
2015-04-27 | Multi::API: Fully implement 'get' command with AnyEvent | Yorhel | 1 | -510/+315 | |
2014-12-21 | Multi: WIP Converting Multi::API to AnyEvent | Yorhel | 1 | -666/+631 | |
2014-10-15 | Multi::API: Fix login with the new password format changes | Yorhel | 1 | -5/+19 | |
2014-10-15 | Multi::API: Fix crash on failed login | Yorhel | 1 | -2/+2 | |
I broke this when changing the column type of login_throttle.timeout. | |||||
2014-10-13 | SQL: Use enum to represent platforms | Yorhel | 1 | -6/+7 | |
I believe I didn't do this conversion earlier (back when I converted the language types) because PostgreSQL didn't support dynamically adding new values to an existing enum back then, and modifying an enum was a huge pain. Recent versions do support this, so there's no reason to keep it as a string. ...I just felt like adding some churn to the code base. | |||||
2014-08-29 | API: Make sure to honor the new login throttle | Yorhel | 1 | -7/+29 | |
2014-08-21 | API: Increase max result counts for userlists | Yorhel | 1 | -2/+4 | |
2014-08-19 | API: Allow access to other users' public lists | Yorhel | 1 | -7/+19 | |
2014-08-16 | API: Add 'vn' filter to get character | Yorhel | 1 | -1/+3 | |
2014-07-18 | API: Add firstchar filter to get vn | Yorhel | 1 | -0/+3 | |
2014-05-16 | API: Added 'dbstats' command | Yorhel | 1 | -4/+29 | |
2014-03-11 | Multi::API: Fix two 'Use of uninitialized value in multiplication' | Yorhel | 1 | -2/+2 | |
Shouldn't affect behaviour in any way, just get rid of the warnings. | |||||
2014-03-10 | Multi::API: Expose popularity, rating and votecount | Yorhel | 1 | -1/+7 | |
http://vndb.org/t5121 | |||||
2013-01-18 | Multi::API: Added basic 'get character' command | Yorhel | 1 | -4/+96 | |
2013-01-04 | Multi::API: Added 'tags' flag and member to 'get vn' | Yorhel | 1 | -1/+13 | |
2013-01-04 | Multi::API: Added 'set wishlist' command | Yorhel | 1 | -3/+20 | |
2013-01-04 | Multi::API: Added 'set vnlist' | Yorhel | 1 | -6/+31 | |