logintoboggan 7.x-1.5

Bug fixes

This release was long overdue after a period of minimal maintenance.

Changes since 7.x-1.4:
Critical fix:
#2455049: Various one-time-login and validation links don't work with Drupal 6.35+ - Fixes compatibility with Drupal 7.35

logintoboggan 7.x-1.4

Security update

SA-CONTRIB-2014-069 - Logintoboggan - Access Bypass and Cross Site Scripting (XSS)

Fixes for a couple of security issues:

#103928 - Failure to unset the auth role for users with pre-auth role on 404 pages.
#106048 - XSS vulnerability in Unified Login form.

logintoboggan 8.x-1.x-dev

This release provides all Logintoboggan features for Drupal 8, and also works with Drupal 9. It does not provide sub-modules that exist in Drupal 7. As it does not yet have automated tests, it can't be released as a stable version so it should be used with caution.

logintoboggan 6.x-1.9

Bug fixes

Changes since 6.x-1.9

  • #291001: by hunmonk, greg.harvy: Allow One Time Login To Be Used Only Once.

logintoboggan 7.x-1.1

Bug fixes
Insecure

Changes since DRUPAL-7--1-0:

  • Critical: #1025306 by hunmonk: hook_init too late to remove auth user role.

logintoboggan 7.x-1.0

New features
Bug fixes
Insecure

Changes since DRUPAL-7--1-0-ALPHA3:

logintoboggan 7.x-1.0-alpha2

Changes since DRUPAL-7--1-0-ALPHA1:

  • arguments -> variables per change to hook_theme.

logintoboggan 7.x-1.0-alpha1

New features
Insecure

Initial port to 7.x, moderately tested.

New features:

  • #499296 Link username to my account page in logged in block.
  • Login successful message now contains username.
  • #264295 Settings under Configuration and modules » System

logintoboggan 5.x-1.5

Bug fixes
Insecure

Changes since DRUPAL-5--1-4:

  • #362388 by hunmonk: make help links conditional on help module.
  • #368699 by hunmonk: re-send validation link always appears if non-authenticated role is set to auth user.

logintoboggan 6.x-1.4

Bug fixes
Insecure

Changes since DRUPAL-6--1-3:

  • Added an UPGRADING.txt file.
  • #291006 by hunmonk: Email validate link landing page inconsistency. see UPGRADING.txt for details on this change.
  • Remove some unclear language in the help text.

logintoboggan 5.x-1.3

New features
Bug fixes
Insecure

Changes since DRUPAL-5--1-2:

  • #239136 by hunmonk: remove pre auth, add auth user in object in email validation code.
  • #238660 by hunmonk: Allow user admins to re-send validation e-mail. thanks to manoloka for sponsoring the work on this patch.
  • #258353 by hunmonk: clarify set password option -- it's core provided.

logintoboggan 6.x-1.x-dev

development snapshot for the 6.x-1.x branch -- new features in the 6.x branch will go in 6.x-2.x

logintoboggan 6.x-1.1

Bug fixes
Insecure

Changes since DRUPAL-6--1-0:

  • #76726 by levavie: updated RTL CSS file for 6.x.
  • #239136 by hunmonk: remove pre auth, add auth user in $account object in email validation code.
  • #239571 by hunmonk: fix broken mailing functionality. Resend validation email code is now properly updated to 6.x, logintoboggan_mail() was not using user saved mail subjects/bodies.

logintoboggan 4.7.x-1.1

Security update
Bug fixes

This release fixes a potential security vulnerability, though it is practically impossible to exploit. All sites using LoginToboggan should consider upgrading, but this should not be considered an urgent task. Please see DRUPAL-SA-2007-016 for more information.

In addition, this release includes the following bug fixes:

  • FIXED: removed unneccessary textfield length for email confirmation
  • FIXED: proper destination handling when a login attempt fails.

logintoboggan 5.x-1.0

Security update
New features
Bug fixes
Insecure

This release fixes a potential security vulnerability, though it is practically impossible to exploit. All sites using LoginToboggan should consider upgrading, but this should not be considered an urgent task. Please see DRUPAL-SA-2007-016 for more information.

In addition, this release includes the following changes:

logintoboggan 4.7.x-1.0

Insecure

This is the first official 4.7 release of logintoboggan. It has been in use for some time now, and is ready for a release under the new system.

Please see the CVS log for the DRUPAL-4-7 branch for a detailed list of changes.

Subscribe with RSS Subscribe to Releases for LoginToboggan