Chris Morgan
91b44a3733
Cleanup note editing. Improve previewing of notes during addition and editing. Rename note related
...
variables to have the proper prefix.
2006-06-30 19:48:33 +00:00
Jonathan Ernst
6d019b918a
Rename errorpage() to util_show_error_page() and move util_show_error_page() into include/util.php
2006-06-29 16:13:35 +00:00
Chris Morgan
e3f9e5371a
Use query_parameters() in SQL select, update and delete statements to protect against
...
sql injection attacks
2006-06-27 19:16:27 +00:00
EA Durbin
f982c8459e
Filter all user input to reduce the security impact of manipulated data
2006-06-17 06:10:10 +00:00
Chris Morgan
0aa7f26249
Switch from using htmlarea to using xinha. Clean up the use of the editor plugin
2005-09-30 02:48:33 +00:00
Jonathan Ernst
a3f0f2082a
Allow super maintainer to add app notes
2005-02-19 01:21:44 +00:00
Jonathan Ernst
b79965941d
Remove duplicated includes to avoid fatal errors
2005-02-09 23:52:49 +00:00
Jonathan Ernst
892349536c
- new note class
...
- improved performances (much less duplicated mysql queries)
- less code and better error handling
- fix various bugs
2005-02-02 02:43:08 +00:00
Jonathan Ernst
7ce5895681
- fix notifications
...
- improves notifications
2005-02-02 00:14:01 +00:00
Jonathan Ernst
2083bf521b
- OO version of user class
...
- no more duplicated functions
- improved performances (much less duplicated mysql queries)
- less code and better error handling
2005-01-30 23:12:48 +00:00
Jonathan Ernst
0a839e359a
- use mail_appdb() instead of mail() for better error handling and to avoid code duplication
...
- use \r\n as line separator in mail (RFC compliant)
2005-01-30 00:57:34 +00:00
Jonathan Ernst
aba584ff93
fix a typo (mesage -> message)
2005-01-19 04:58:12 +00:00
Jonathan Ernst
caf91fded2
remove all mysql_error() instances as errors are handled by query_appdb()
2005-01-14 05:34:25 +00:00
Tony Lambregts
16bb7584e5
Tighten up security on add notes
2005-01-14 05:29:45 +00:00
Jonathan Ernst
d3ad0dba41
- replaced mysql_query() with query_appdb()
...
- removed opendb()
- removed query_userdb()
- removed error handling from the code as it is done with query_appdb()
2005-01-12 16:22:55 +00:00
Jonathan Ernst
d9826427da
This patch make email address the user's username as requested in the TODO.
...
query_users.php is modified even if we will drop it in the future to be sure it works everywhere.
2005-01-10 22:54:04 +00:00
Tony Lambregts
a91e608c63
Fix up notify when adding note.
2005-01-01 17:27:24 +00:00
Eric Blade
ffeeaef807
Clean up HTML and PHP, remove extranious checks for loggedin()
2004-12-29 20:21:31 +00:00
Paul van Schayck
75728a4859
Use super globals. Better input checking.
2004-12-29 03:47:48 +00:00
Jonathan Ernst
ca749d32d9
make use of the new constants of the config file for db connection and base path
2004-12-23 01:12:03 +00:00
Chris Morgan
77a038d4f9
Remove isMaintainer() and isSuperMaintainer and instead use the user
...
classes is_maintainer() and is_super_maintainer.
2004-12-19 19:30:27 +00:00
Jonathan Ernst
d3d9e853d9
- replaced tons of tabs with spaces
...
- replaced <? with <?php for compatibility sake (see TODO and CODING_STANDARD to know more)
- improved overall code lisibility
2004-12-12 03:51:51 +00:00
Jonathan Ernst
bd91db228c
- access most globals by their $_XYZ['varname'] name
...
- fix some code errors and typos (missing $ in front of variable names
and so on)
- fixed a lot of warnings that would have been thrown when error_reporting
is set to show notices (if(isset($variable))) instead of if($variable) for
example)
2004-12-10 01:07:45 +00:00
Tony Lambregts
1f9dda0c38
- Let Maintainers add, edit and delete Notes.
...
- Display out front, special class notes ( WARNING & HOWTO )
2004-12-01 22:33:48 +00:00
Jeremy Newman
8f28ae10c4
Initial revision
2004-03-15 16:22:00 +00:00
