search

linwiz / Raspberry-Pi-Web-GPIO

PHP script to control Raspberry PI GPIO pins from the web
GNU General Public License v3.0
4 stars 1 forks source link

TODO: call the login page only if NOT in debug mode (debugMode=0) #25

Closed Paku- closed 9 years ago

Paku- commented 9 years ago

as above

linwiz commented 9 years ago

You can skip the login by clicking on a link in the navigation, this is not by design I'm just not sure how to fix it yet.

On Tuesday, January 13, 2015, Paku notifications@github.com wrote:

as above

— Reply to this email directly or view it on GitHub https://github.com/linwiz/Raspberry-Pi-Web-GPIO/issues/25.

Paku- commented 9 years ago

and I wonder why it takes so much time .... have to learn more on jQuery.

linwiz commented 9 years ago

The login process will take time, it is using a secure hashing method called scrypt. scrypt is designed to be slow to thawrt evildoers from bruteforcing a login system or a password hash to crack it.

Paku- commented 9 years ago

Ok, but will we go for WWIII with our Pis ?

but who knows :)

linwiz commented 9 years ago

I think the Pi could be used for some kind of weapon defense system lol. It is capable of quite a lot. I don't have any use for such a thing personally.

Paku- commented 9 years ago

If we are talking about the login page have in mind that the page /index.php/ is never reloaded. As it is Ajax - only parts are replaced by the browser. Could be the session variables are not changing values ..

linwiz commented 9 years ago

I am not sure how to prevent the login from being bypassed at this time, but for now I would consider this issue closed as you do not need to login to develop

Paku- commented 9 years ago

Issues are closed if SOLVED :)

linwiz commented 9 years ago

I've been unable to fix this issue. I really don't think this is necessary anyway, the login process is very simple. I would rather work on other features than continue to waste time on this one.