Chris Morgan
a1a41d6b87
Fix and enable input filtering through include/filter.php
2007-01-04 02:35:01 +00:00
Chris Morgan
5f4998194a
Screenshot class optimization. Defer creation of thumbnail and screenshot images until values are necessary.
...
This greatly speeds up the loading of the main page as we create screenshot objects to check their other internal
parameters and not output their images.
2006-07-10 15:18:08 +00:00
Chris Morgan
854df987c6
Clean up includes. Make 'path.php' and 'incl.php' required includes. Switch to using
...
require_once() for including files in /include so we can have include/*.php files include
their own dependencies rather than figuring out that to include A.php we need to include B.php
2006-07-07 18:14:53 +00:00
Jonathan Ernst
3096e63828
Rename util_show_error_page() to util_show_error_page_and_exit() and redirect() to util_redirect_and_exit()
...
so it is explicit that we exit in those functions that so we know it isn't necessary to put an exit after
we call them
2006-07-06 18:44:56 +00:00
Jonathan Ernst
54c484de8c
Remove unnecessary exit calls after redirect() and util_show_error_page() calls
2006-07-06 17:59:52 +00:00
Jonathan Ernst
735a2bc65f
Prefix all GPC variables according to our coding standard
2006-07-06 17:27:54 +00:00
Chris Morgan
a72f31e11a
Rename some variables to match our current naming scheme
2006-06-30 16:33:02 +00:00
Jonathan Ernst
6d019b918a
Rename errorpage() to util_show_error_page() and move util_show_error_page() into include/util.php
2006-06-29 16:13:35 +00:00
Chris Morgan
034ea689bc
Clean up application and version classes. Move class related functions into the class as static member functions
2006-06-29 16:07:19 +00:00
Chris Morgan
245a6b993e
Cleanup User class. Move user related functions into class as static member functions
2006-06-29 15:54:29 +00:00
Chris Morgan
e3f9e5371a
Use query_parameters() in SQL select, update and delete statements to protect against
...
sql injection attacks
2006-06-27 19:16:27 +00:00
Chris Morgan
fb0f3b5dd3
Protect against sql injection attacks in sql INSERT statements
2006-06-24 04:20:32 +00:00
EA Durbin
f982c8459e
Filter all user input to reduce the security impact of manipulated data
2006-06-17 06:10:10 +00:00
Chris Morgan
639dd77d15
Let maintainers and super maintainers process the application versions and images submitted for applications they maintain
2005-08-05 22:07:41 +00:00
Chris Morgan
adf0dc83ab
Use the sql row object to get the submitted time, instead of an object that
...
doesn't exist.
2005-06-25 01:22:09 +00:00
Jonathan Ernst
25f3f01412
- display the submit time correctly in admin panels
...
- display the submitter correctly in admin panels
2005-02-20 01:55:53 +00:00
Jonathan Ernst
73ad961a85
Fix version deletion
2005-02-19 01:19:07 +00:00
Jonathan Ernst
73c7044a10
Make admin panels look consistant (same column name and order, editing
...
links in the last column, etc.)
2005-02-09 02:22:20 +00:00
Jonathan Ernst
e1c1489279
- improve appData and related classes
...
- don't use a full table for queued appdata but only one field in theapplication and version tables
- simplify the code in many places
- fixes some bugs with screenshots
2005-02-07 23:49:06 +00:00
Jonathan Ernst
d802baaaf7
Display app name in adminAppDataQueue.php when reviewing an appdata
2005-02-04 03:34:23 +00:00
Jonathan Ernst
3ebdbc9af5
- no more appId in appData as appVersion implies an appId*
...
- screenshot class has been reworked to remove need of appId
- screenshot class has been improved to send e-mails so that email handling can be removed from other scripts
2005-02-04 02:55:50 +00:00
Jonathan Ernst
2083bf521b
- OO version of user class
...
- no more duplicated functions
- improved performances (much less duplicated mysql queries)
- less code and better error handling
2005-01-30 23:12:48 +00:00
Jonathan Ernst
0a839e359a
- use mail_appdb() instead of mail() for better error handling and to avoid code duplication
...
- use \r\n as line separator in mail (RFC compliant)
2005-01-30 00:57:34 +00:00
Jonathan Ernst
d5a50ecec4
* new screenshot and image classes
2005-01-27 15:42:53 +00:00
Jonathan Ernst
d3ad0dba41
- replaced mysql_query() with query_appdb()
...
- removed opendb()
- removed query_userdb()
- removed error handling from the code as it is done with query_appdb()
2005-01-12 16:22:55 +00:00
Jonathan Ernst
d9826427da
This patch make email address the user's username as requested in the TODO.
...
query_users.php is modified even if we will drop it in the future to be sure it works everywhere.
2005-01-10 22:54:04 +00:00
Francois Gouget
8fab7880b4
Assorted spelling fixes.
...
Small wording tweaks.
Capitalize Wine when referring to the project.
2005-01-10 22:15:44 +00:00
Eric Blade
ffeeaef807
Clean up HTML and PHP, remove extranious checks for loggedin()
2004-12-29 20:21:31 +00:00
Jonathan Ernst
52437f5f30
- use queued screenshot directory instead of mysql to store queued data
...
- use the config file to determine thumbnail size
2004-12-23 01:13:26 +00:00
Chris Morgan
77a038d4f9
Remove isMaintainer() and isSuperMaintainer and instead use the user
...
classes is_maintainer() and is_super_maintainer.
2004-12-19 19:30:27 +00:00
Jonathan Ernst
a8ba02e76d
Implemented the user friendly screenshot submitting feature
2004-12-18 06:06:46 +00:00