Commit Graph

31 Commits

Author SHA1 Message Date
Chris Morgan
a1a41d6b87 Fix and enable input filtering through include/filter.php 2007-01-04 02:35:01 +00:00
Chris Morgan
5f4998194a Screenshot class optimization. Defer creation of thumbnail and screenshot images until values are necessary.
This greatly speeds up the loading of the main page as we create screenshot objects to check their other internal
parameters and not output their images.
2006-07-10 15:18:08 +00:00
Chris Morgan
854df987c6 Clean up includes. Make 'path.php' and 'incl.php' required includes. Switch to using
require_once() for including files in /include so we can have include/*.php files include
their own dependencies rather than figuring out that to include A.php we need to include B.php
2006-07-07 18:14:53 +00:00
Jonathan Ernst
3096e63828 Rename util_show_error_page() to util_show_error_page_and_exit() and redirect() to util_redirect_and_exit()
so it is explicit that we exit in those functions that so we know it isn't necessary to put an exit after
we call them
2006-07-06 18:44:56 +00:00
Jonathan Ernst
54c484de8c Remove unnecessary exit calls after redirect() and util_show_error_page() calls 2006-07-06 17:59:52 +00:00
Jonathan Ernst
735a2bc65f Prefix all GPC variables according to our coding standard 2006-07-06 17:27:54 +00:00
Chris Morgan
a72f31e11a Rename some variables to match our current naming scheme 2006-06-30 16:33:02 +00:00
Jonathan Ernst
6d019b918a Rename errorpage() to util_show_error_page() and move util_show_error_page() into include/util.php 2006-06-29 16:13:35 +00:00
Chris Morgan
034ea689bc Clean up application and version classes. Move class related functions into the class as static member functions 2006-06-29 16:07:19 +00:00
Chris Morgan
245a6b993e Cleanup User class. Move user related functions into class as static member functions 2006-06-29 15:54:29 +00:00
Chris Morgan
e3f9e5371a Use query_parameters() in SQL select, update and delete statements to protect against
sql injection attacks
2006-06-27 19:16:27 +00:00
Chris Morgan
fb0f3b5dd3 Protect against sql injection attacks in sql INSERT statements 2006-06-24 04:20:32 +00:00
EA Durbin
f982c8459e Filter all user input to reduce the security impact of manipulated data 2006-06-17 06:10:10 +00:00
Chris Morgan
639dd77d15 Let maintainers and super maintainers process the application versions and images submitted for applications they maintain 2005-08-05 22:07:41 +00:00
Chris Morgan
adf0dc83ab Use the sql row object to get the submitted time, instead of an object that
doesn't exist.
2005-06-25 01:22:09 +00:00
Jonathan Ernst
25f3f01412 - display the submit time correctly in admin panels
- display the submitter correctly in admin panels
2005-02-20 01:55:53 +00:00
Jonathan Ernst
73ad961a85 Fix version deletion 2005-02-19 01:19:07 +00:00
Jonathan Ernst
73c7044a10 Make admin panels look consistant (same column name and order, editing
links in the last column, etc.)
2005-02-09 02:22:20 +00:00
Jonathan Ernst
e1c1489279 - improve appData and related classes
- don't use a full table for queued appdata but only one field in theapplication and version tables
- simplify the code in many places
- fixes some bugs with screenshots
2005-02-07 23:49:06 +00:00
Jonathan Ernst
d802baaaf7 Display app name in adminAppDataQueue.php when reviewing an appdata 2005-02-04 03:34:23 +00:00
Jonathan Ernst
3ebdbc9af5 - no more appId in appData as appVersion implies an appId*
- screenshot class has been reworked to remove need of appId
- screenshot class has been improved to send e-mails so that email handling can be removed from other scripts
2005-02-04 02:55:50 +00:00
Jonathan Ernst
2083bf521b - OO version of user class
- no more duplicated functions
- improved performances (much less duplicated mysql queries)
- less code and better error handling
2005-01-30 23:12:48 +00:00
Jonathan Ernst
0a839e359a - use mail_appdb() instead of mail() for better error handling and to avoid code duplication
- use \r\n as line separator in mail (RFC compliant)
2005-01-30 00:57:34 +00:00
Jonathan Ernst
d5a50ecec4 * new screenshot and image classes 2005-01-27 15:42:53 +00:00
Jonathan Ernst
d3ad0dba41 - replaced mysql_query() with query_appdb()
- removed opendb()
- removed query_userdb()
- removed error handling from the code as it is done with query_appdb()
2005-01-12 16:22:55 +00:00
Jonathan Ernst
d9826427da This patch make email address the user's username as requested in the TODO.
query_users.php is modified even if we will drop it in the future to be sure it works everywhere.
2005-01-10 22:54:04 +00:00
Francois Gouget
8fab7880b4 Assorted spelling fixes.
Small wording tweaks.
Capitalize Wine when referring to the project.
2005-01-10 22:15:44 +00:00
Eric Blade
ffeeaef807 Clean up HTML and PHP, remove extranious checks for loggedin() 2004-12-29 20:21:31 +00:00
Jonathan Ernst
52437f5f30 - use queued screenshot directory instead of mysql to store queued data
- use the config file to determine thumbnail size
2004-12-23 01:13:26 +00:00
Chris Morgan
77a038d4f9 Remove isMaintainer() and isSuperMaintainer and instead use the user
classes is_maintainer() and is_super_maintainer.
2004-12-19 19:30:27 +00:00
Jonathan Ernst
a8ba02e76d Implemented the user friendly screenshot submitting feature 2004-12-18 06:06:46 +00:00