Gergő Tisza af37a4c77d Fix login API for users with @ in their usernames ... An @ in the username caused the password to be treated as a bot password, but apparently some real usernames still contain it. Try both logins instead. Security considerations are the same as for the other bot password syntax: the length check makes sure we do not provide any information on a timing side channel about the password unless it is extremely long. Change-Id: I58f42544a08c3208c41f54cfae932632d9c5affa		2016-09-14 01:47:52 +00:00
..
BotPasswordTest.php	Fix login API for users with @ in their usernames	2016-09-14 01:47:52 +00:00
CentralIdLookupTest.php	Whenever possible, reuse User objects in unit tests	2016-05-26 20:42:31 +00:00
LocalIdLookupTest.php	Whenever possible, reuse User objects in unit tests	2016-05-26 20:42:31 +00:00
PasswordResetTest.php	Use AuthManager on special pages	2016-05-16 15:12:13 +00:00
UserArrayFromResultTest.php	Convert all array() syntax to []	2016-02-17 01:33:00 -08:00
UserTest.php	SECURITY: Move 'UserGetRights' call before application of Session::getAllowedUserRights()	2016-08-23 04:02:08 +00:00