Releases for Secure Site

Changes since DRUPAL-6--2-2:

• #388890 by jmiccolis: Fixed user name validation.
  Users who didn't have permission to change their user names could not change
  their passwords.
• by Darren Oh: Fixed a grammatical error in digest_md5/sudoers.
• by Darren Oh: Fixed update error for sites with disabled authentication.
  Sites which had disabled authentication would have authentication forced when
  updating.

Merry Christmas!

New 6.x version. Includes the following features:

1. Allow HTTP authentication when site is not being hidden.
2. Removed bypass pages and replaced with 403 management.
3. Simplified theming.

- Fixed issue #307339: Securesite prompts continuously unless user has permission, regardless of filter setting: patch by singularo
- Fixed an issue where a cached page would be shown after logging in as a guest and then a user with caching enabled (patch by NaX and Junyor)
- Fixed an issue where users weren't logged out if they had first logged in as a guest and then as a user (patch by NaX and Junyor)
- Notice fixes
- Small code clean-ups

Development snapshot of Secure Site for Drupal 6.x

Important: Due to settings and permission changes, you must make sure Secure Site is enabled and add the "access secured pages" permission for relevant roles before Secure Site 5.x-1.3 will work correctly.

- Fixed issue #217482: Logging out does not work in Safari 3: Use browser work-around for Safari, too (patch by NaX and Junyor)
- Fixed issue #204191: Password request form ineffective due to site protection: Finally make the password reset URL work with Secure Site
- Fixed issue #169750: Password reset form requires username and e-mail address, but only asks for one or the other
- Fixed issue #217466: Logging out results in blank screen and undefined function theme() error in Apache: Let Secure Site work with normal caching (patch by NaX and Junyor)
- Fixed issue where the HTML dialog wouldn't use the override dialog in the theme directory (patch by Darren Oh)
- Repair page bypass feature broken in the Secure Site 5.x-1.1 release
- Style improvements to the HTML dialog
- Use the HTML dialog after sending password mails
- Show better error messages to users
- Correct the password URL sent out in password reset e-mails
- Remove "for" HTML attributes on elements that prevented correct input focus
- Improved setting descriptions. Note that the wording of the bypass filter has been reversed to help clarify how the setting should be used
- Add watchdog notice on login failure
- Code clean-up
- Improved code documentation

Security update, see #216019, SA-2008-011 - Securesite - Access bypass.

Fixes DRUPAL-SA-2007-010.

inital 5.0 version