aboutsummaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2012-04-06Updated flags list.David Barksdale
2012-04-06Be a bit more polite with failed logins.David Barksdale
2012-04-06Added two new flags to home page with some reformatting.David Barksdale
2012-04-05Added list of challenges.David Barksdale
2012-04-05Throttle account creation.David Barksdale
2012-04-05Created flag and scoreboard database.David Barksdale
2012-04-04Avoid html injection.David Barksdale
This is probably unnecessary because valid unix usernames don't have any bad characters in them.
2012-04-04Added flag form and login sessions.David Barksdale
2012-04-04Improved new account security.David Barksdale
Since chpasswd takes multiple username:password lines it was possible to change the password of any account: curl -data "username=attacker&password=%0aroot:omghax" -k https://ctf/new
2012-04-04Moved login form.David Barksdale
2012-04-04Configure https.David Barksdale
2012-04-03Made login and new user pages.David Barksdale
New user page needs input validation.
2012-04-03defpage "/"David Barksdale
2012-04-03lein noir new ctf-websiteDavid Barksdale