summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Update README to document the new dependenciespasslibDonald Stufft2013-02-121-1/+4
|
* Include a migration path for moving legacy users to a stronger hashDonald Stufft2013-02-124-1/+122
| | | | | | | | | | * Includes a method for hashing the sha1 passwords with bcrypt to increase their security * bcrypt_sha1 will upgrade to standard bcrypt as per usual with passlib * Provides a script that migrates 20 users at a time to bcrypt_sha1 Migration script was modified from one written by Giovanni Bajo
* Rewrite password hashing to utilize passlib + bcryptDonald Stufft2013-02-124-36/+69
| | | | | | | | * Upon logging in the existing unsalted sha1 passwords will be upgraded to bcrypt * PyPI will prefer using cookie auth to prevent needing to do bcrypt on every request * Load passlib configuration from the existing config.ini file
* re-word to get us back to 4 lines of text in the boxRichard Jones2013-02-111-1/+1
|
* correctRichard Jones2013-02-111-1/+1
|
* better wordingRichard Jones2013-02-091-3/+3
|
* typoRichard Jones2013-02-091-1/+1
|
* compact for better layoutRichard Jones2013-02-091-3/+1
|
* compact for better layoutRichard Jones2013-02-091-3/+3
|
* ughRichard Jones2013-02-091-2/+4
|
* new MOTDRichard Jones2013-02-091-7/+8
|
* packages.python.org -> pythonhosted.orgRichard Jones2013-02-094-6/+9
|
* agh static analysisRichard Jones2013-02-061-0/+3
|
* ensure the path transferred lies within the configured files directoryRichard Jones2013-02-061-3/+6
|
* handle the x-forwarded-* HTTP headers from proxiesRichard Jones2013-02-061-5/+14
|
* stay on the same hostRichard Jones2013-02-041-1/+1
|
* add database port as an option in configRichard Jones2013-02-043-2/+11
|
* generate HTTPS download links tooRichard Jones2013-02-041-0/+2
|
* and email addresses (obscured a little, sigh)Richard Jones2013-02-011-2/+2
|
* more infoRichard Jones2013-02-011-1/+2
|
* add security pageRichard Jones2013-02-013-2/+40
|
* straight to formRichard Jones2013-01-311-1/+1
|
* add security report linkRichard Jones2013-01-311-12/+7
|
* linky to nice status displayRichard Jones2013-01-241-0/+3
|
* spell upload correctlyRichard Jones2013-01-241-1/+1
|
* regen the rss on new package upload too (since it can do a register)Richard Jones2013-01-242-3/+3
|
* make the test server RSS easier to spotRichard Jones2013-01-243-4/+7
|
* add IRC to allowed schemesRichard Jones2013-01-231-1/+1
|
* ORLYRichard Jones2013-01-231-1/+1
|
* input validationRichard Jones2013-01-231-0/+3
|
* fix so config may be foundRichard Jones2013-01-231-1/+1
|
* pass on name in index viewRichard Jones2013-01-231-2/+4
|
* split breadcrumbs to allow easier navigation to package pageRichard Jones2013-01-231-1/+7
|
* undo logging of exceptions as they're very noisyRichard Jones2013-01-151-6/+1
|
* better column typeRichard Jones2013-01-141-1/+1
|
* move arg to retain existing orderingRichard Jones2013-01-141-6/+6
|
* whoopsRichard Jones2013-01-141-1/+1
|
* fixesRichard Jones2013-01-142-14/+22
|
* ughRichard Jones2013-01-141-1/+1
|
* add option to include ids in the changelogRichard Jones2013-01-141-2/+8
|
* update for new id column added to journals (to aid making journal rows ↵Richard Jones2013-01-144-7/+10
| | | | unique in the face of duplicate activity)
* add spam removal admin command "rmspam" which takes an SQL LIKE expression ↵Richard Jones2012-12-051-0/+44
| | | | for package names to match; without "confirm" on the command line you see info; if "confirm" is also added to the command line then packages are removed and user acccounts are disabled. Also displays the IP addresses for additional killage if possible.
* Sphinx renamed it "code-block" yayRichard Jones2012-11-201-0/+1
|
* similarly style the pygments pre blocksRichard Jones2012-11-091-1/+1
|
* include pygments styleRichard Jones2012-11-091-0/+1
|
* use the name actually in docutilsRichard Jones2012-11-091-0/+1
|
* add pygments support blockRichard Jones2012-11-091-0/+50
|
* remove workaround and update verlib to the bugfixed implementationRichard Jones2012-10-022-15/+10
|
* whupsRichard Jones2012-10-021-1/+2
|
* work around bug in verlibRichard Jones2012-10-021-4/+10
|