Dane Everitt
56fe10fdd6
Throttle email address changes on accounts to limit enumeration ( #5612 )
...
This change applies a rate limit to account email changes to prevent
enumeration on the system. The throttle is applied at the account level.
Administrators can still update an account's email address manually to
bypass this restriction if/when necessary.
2026-04-01 17:54:30 -07:00
Dane Everitt
0e74f3aade
Improve SFTP session revocation to cover password changes and account deletion ( #5568 )
...
This expands upon previous work done to better disconnect users from
SFTP when different events occur within Pterodactyl. This new logic also
accounts for password changes and their account being deleted entirely
from the system.
These events now trigger background jobs that will reach out to every
node they are associated with to ensure they're disconnected if
currently connected.
2026-02-14 10:51:26 -08:00
Dane Everitt
a264791fd4
Update PHP and JS dependencies to latest versions and modernize codebase ( #5446 )
2025-12-20 15:55:13 -08:00
Matthew Penner
cbcf62086f
Upgrade to Laravel 9 ( #4413 )
...
Co-authored-by: DaneEveritt <dane@daneeveritt.com >
2022-10-14 10:59:20 -06:00
DaneEveritt
0216e3fd5b
Don't log activity if the email wasn't actually changed
2022-07-03 14:29:01 -04:00
DaneEveritt
287fd60891
Log activity when modifying account details
2022-05-29 18:48:35 -04:00
DaneEveritt
f7fc67344e
Ensure tokens are found in the database using the expected logic
2022-05-22 16:05:58 -04:00
Dane Everitt
2b3303c46b
Fix changing a user password to not incorrectly handle logging out old sessions; closes #3531
2021-08-15 17:37:12 -07:00
Dane Everitt
c449ca5155
Use more standardized phpcs
2021-01-23 12:33:34 -08:00
Dane Everitt
7a5f7b99a7
Add integration test covering account endpoint
2020-06-25 22:12:09 -07:00
Lance Pioch
78e03cb9b2
Update AccountController.php
2020-04-08 02:59:38 -04:00
Lance Pioch
f9e6df5d71
Change to new password instead
2020-04-07 19:25:11 -04:00
Dane Everitt
158958d82d
Password change needs to require user login to reset some cookies
...
closes #1793
2019-12-28 12:07:42 -08:00
Dane Everitt
0cc895f2d5
Finalize email/password changing in UI
2018-06-17 16:53:24 -07:00
Dane Everitt
fce394f6bd
Change email handling and logout function
2018-06-16 14:30:20 -07:00
Dane Everitt
b8b9acd0e6
Get the base email update working through the API.
...
Still going to need to determine the best course of action to update the token on the client side.
2018-06-11 22:56:57 -07:00
Dane Everitt
e948d81d8a
Base attempt at using vuex to handle logins
2018-06-05 23:00:01 -07:00
