包含:登录失败锁定、90天密码有效期、30分钟会话超时、 强制改密、登录审计日志、屏幕水印、企业背景图、 备案信息固定底部、favicon、JS空集合保护、 会话过期体验优化(403 JSON)、display_errors 关闭、 固定 key 根治 Integrity check failed 等全部改动 注意:config.inc.php/.htaccess/.user.ini 含敏感信息, 通过 .gitignore 排除,勿推送到公开仓库。
28 lines
893 B
PHP
28 lines
893 B
PHP
<?php
|
|
|
|
namespace MRBS\Joomla;
|
|
|
|
class JUser extends \JUser {
|
|
|
|
// NOTE: In some versions of Joomla!, JUser::getAuthorisedGroups() seems to reset the
|
|
// timezone to the user's Joomla timezone, which may be different from the MRBS timezone, so
|
|
// we have to get the timezone before calling it and restore it afterwards.
|
|
// (This doesn't seem to happen in Joomla 5. It may also be OK in some earlier versions.)
|
|
public function getAuthorisedGroups()
|
|
{
|
|
$tz = date_default_timezone_get();
|
|
$result = parent::getAuthorisedGroups();
|
|
date_default_timezone_set($tz);
|
|
return $result;
|
|
}
|
|
|
|
// Not sure whether getAuthorisedViewLevels() has the same problem, but just in case ...
|
|
public function getAuthorisedViewLevels()
|
|
{
|
|
$tz = date_default_timezone_get();
|
|
$result = parent::getAuthorisedViewLevels();
|
|
date_default_timezone_set($tz);
|
|
return $result;
|
|
}
|
|
}
|