basic test stuff
just pushing so I can rebase zzz
pushing to start core rebuild
strict class, trying to figure out why edit account doesnt work
blah blah
fixed check against define like it used to even if SECHASH_CHECK is disabled
fixed ajax calls in memcache limiter to use REQUEST page/action rather than QUERY_STRING
updated check in autoloader so default needs to be changed if SECHASH_CHECK is enabled
cleaned up config options a bit
now enforce client & server validity on login with strict on
fixed csrf token check for a few pages where it mightve been broken
session manager now can be bound to base user class and used, like in login
logout now pushes you to login regardless, no longer has param to push to custom url
fixed validate client, hijacking sessions no longer works
removed exploits/added to gitignore for later
merged session manager/memcache limiter
cleanup for PR
small fixes
small fixes
of all the pages to miss it on
security config mask
Switch config over to wiki, yay
Added last login time/ip address popup on login w/ close button
Info/blue if your ip matches, warning/yellow if not
last login time not this login time
added check if we can write config files to admin_checks, we shouldnt be able to
changes DEBUG SALT and SALTY from defines to variables
switched that in all places used (class loads mostly)
moved all includes at the beginning of index into bootstrap
moves *_PATH defines from config to bootstrap
config now uses defaults first, then user config