Commit Graph

31 Commits

Author SHA1 Message Date
Chris Morgan
a1a41d6b87 Fix and enable input filtering through include/filter.php 2007-01-04 02:35:01 +00:00
Chris Morgan
f05c05864e Pass input arrays into GetOutputEditoValues() and CheckOutputEditorInput(). We don't want
classes to be hardcoded to read directly from $_REQUEST
2006-07-08 22:06:28 +00:00
Chris Morgan
854df987c6 Clean up includes. Make 'path.php' and 'incl.php' required includes. Switch to using
require_once() for including files in /include so we can have include/*.php files include
their own dependencies rather than figuring out that to include A.php we need to include B.php
2006-07-07 18:14:53 +00:00
Jonathan Ernst
3096e63828 Rename util_show_error_page() to util_show_error_page_and_exit() and redirect() to util_redirect_and_exit()
so it is explicit that we exit in those functions that so we know it isn't necessary to put an exit after
we call them
2006-07-06 18:44:56 +00:00
Jonathan Ernst
54c484de8c Remove unnecessary exit calls after redirect() and util_show_error_page() calls 2006-07-06 17:59:52 +00:00
Jonathan Ernst
735a2bc65f Prefix all GPC variables according to our coding standard 2006-07-06 17:27:54 +00:00
Chris Morgan
91b44a3733 Cleanup note editing. Improve previewing of notes during addition and editing. Rename note related
variables to have the proper prefix.
2006-06-30 19:48:33 +00:00
Jonathan Ernst
6d019b918a Rename errorpage() to util_show_error_page() and move util_show_error_page() into include/util.php 2006-06-29 16:13:35 +00:00
Chris Morgan
e3f9e5371a Use query_parameters() in SQL select, update and delete statements to protect against
sql injection attacks
2006-06-27 19:16:27 +00:00
EA Durbin
f982c8459e Filter all user input to reduce the security impact of manipulated data 2006-06-17 06:10:10 +00:00
Chris Morgan
0aa7f26249 Switch from using htmlarea to using xinha. Clean up the use of the editor plugin 2005-09-30 02:48:33 +00:00
Jonathan Ernst
a3f0f2082a Allow super maintainer to add app notes 2005-02-19 01:21:44 +00:00
Jonathan Ernst
b79965941d Remove duplicated includes to avoid fatal errors 2005-02-09 23:52:49 +00:00
Jonathan Ernst
892349536c - new note class
- improved performances (much less duplicated mysql queries)
- less code and better error handling
- fix various bugs
2005-02-02 02:43:08 +00:00
Jonathan Ernst
7ce5895681 - fix notifications
- improves notifications
2005-02-02 00:14:01 +00:00
Jonathan Ernst
2083bf521b - OO version of user class
- no more duplicated functions
- improved performances (much less duplicated mysql queries)
- less code and better error handling
2005-01-30 23:12:48 +00:00
Jonathan Ernst
0a839e359a - use mail_appdb() instead of mail() for better error handling and to avoid code duplication
- use \r\n as line separator in mail (RFC compliant)
2005-01-30 00:57:34 +00:00
Jonathan Ernst
aba584ff93 fix a typo (mesage -> message) 2005-01-19 04:58:12 +00:00
Jonathan Ernst
caf91fded2 remove all mysql_error() instances as errors are handled by query_appdb() 2005-01-14 05:34:25 +00:00
Tony Lambregts
16bb7584e5 Tighten up security on add notes 2005-01-14 05:29:45 +00:00
Jonathan Ernst
d3ad0dba41 - replaced mysql_query() with query_appdb()
- removed opendb()
- removed query_userdb()
- removed error handling from the code as it is done with query_appdb()
2005-01-12 16:22:55 +00:00
Jonathan Ernst
d9826427da This patch make email address the user's username as requested in the TODO.
query_users.php is modified even if we will drop it in the future to be sure it works everywhere.
2005-01-10 22:54:04 +00:00
Tony Lambregts
a91e608c63 Fix up notify when adding note. 2005-01-01 17:27:24 +00:00
Eric Blade
ffeeaef807 Clean up HTML and PHP, remove extranious checks for loggedin() 2004-12-29 20:21:31 +00:00
Paul van Schayck
75728a4859 Use super globals. Better input checking. 2004-12-29 03:47:48 +00:00
Jonathan Ernst
ca749d32d9 make use of the new constants of the config file for db connection and base path 2004-12-23 01:12:03 +00:00
Chris Morgan
77a038d4f9 Remove isMaintainer() and isSuperMaintainer and instead use the user
classes is_maintainer() and is_super_maintainer.
2004-12-19 19:30:27 +00:00
Jonathan Ernst
d3d9e853d9 - replaced tons of tabs with spaces
- replaced <? with <?php for compatibility sake (see TODO and CODING_STANDARD to know more)
- improved overall code lisibility
2004-12-12 03:51:51 +00:00
Jonathan Ernst
bd91db228c - access most globals by their $_XYZ['varname'] name
- fix some code errors and typos (missing $ in front of variable names
and so on)
- fixed a lot of warnings that would have been thrown when error_reporting
is set to show notices (if(isset($variable))) instead of if($variable) for
example)
2004-12-10 01:07:45 +00:00
Tony Lambregts
1f9dda0c38 - Let Maintainers add, edit and delete Notes.
- Display out front, special class notes ( WARNING & HOWTO )
2004-12-01 22:33:48 +00:00
Jeremy Newman
8f28ae10c4 Initial revision 2004-03-15 16:22:00 +00:00