security MDL-18006 MDL-18807 MDL-20853 Several improvements to increase security

*  Installation
      o Adds a random $CFG->passwordsaltmain to config.php on install
      o Changes passwordpolicy default to on
* Upgrade
      o If passwordpolicy is off it switches it on
      o Checks if passwordsaltmain has been set and if not recommends to the user and all admins to add it, both on the upgrade output and via messaging.
      o Forces all admin users to change their password at next login.
* General
      o Extends the security overview report to check for passwordmainsalt and recommend if it not set (or weak)
This commit is contained in:
Sam Hemelryk
2009-11-17 09:55:51 +00:00
parent 5953ae1d30
commit 0a4b736b9c
9 changed files with 139 additions and 2 deletions
+1 -1
View File
@@ -6,7 +6,7 @@
// This is compared against the values stored in the database to determine
// whether upgrades should be performed (see lib/db/*.php)
$version = 2007101560; // YYYYMMDD = date of the 1.9 branch (don't change)
$version = 2007101561; // YYYYMMDD = date of the 1.9 branch (don't change)
// X = release number 1.9.[0,1,2,3,4,5...]
// Y.YY = micro-increments between releases