Chris Morgan
a1a41d6b87
Fix and enable input filtering through include/filter.php
2007-01-04 02:35:01 +00:00
Chris Morgan
2ef31edf05
Fix voting(again) by changing all variables to use the new naming scheme
2006-07-19 00:11:40 +00:00
Jonathan Ernst
3096e63828
Rename util_show_error_page() to util_show_error_page_and_exit() and redirect() to util_redirect_and_exit()
...
so it is explicit that we exit in those functions that so we know it isn't necessary to put an exit after
we call them
2006-07-06 18:44:56 +00:00
Jonathan Ernst
54c484de8c
Remove unnecessary exit calls after redirect() and util_show_error_page() calls
2006-07-06 17:59:52 +00:00
Jonathan Ernst
735a2bc65f
Prefix all GPC variables according to our coding standard
2006-07-06 17:27:54 +00:00
Jonathan Ernst
6d019b918a
Rename errorpage() to util_show_error_page() and move util_show_error_page() into include/util.php
2006-06-29 16:13:35 +00:00
Chris Morgan
034ea689bc
Clean up application and version classes. Move class related functions into the class as static member functions
2006-06-29 16:07:19 +00:00
Chris Morgan
e3f9e5371a
Use query_parameters() in SQL select, update and delete statements to protect against
...
sql injection attacks
2006-06-27 19:16:27 +00:00
Chris Morgan
fb0f3b5dd3
Protect against sql injection attacks in sql INSERT statements
2006-06-24 04:20:32 +00:00
Chris Morgan
6f35da69d7
Fix voting. Another case, ha ha, where different capitalization messed us up
2006-06-24 03:09:07 +00:00
Chris Morgan
67550405c3
Make code more consistent by making it follow the appdb coding standards. Fix some spaces vs. tabs odd indenting.
2006-06-21 01:04:12 +00:00
EA Durbin
f982c8459e
Filter all user input to reduce the security impact of manipulated data
2006-06-17 06:10:10 +00:00
Chris Morgan
a88e2d16da
Clearing an empty vote would result in a blank screen, instead redirect the
...
user to an appropriate page. Don't report that we removed votes for empty
slots. Improve the message on the votestats page if there are no voting
results.
2005-05-11 03:08:07 +00:00
Jonathan Ernst
7e7d514274
Make votes work again
2005-02-26 16:36:52 +00:00
Jonathan Ernst
cfd1d1ac09
- renamed lookupVersionName and lookupAppName into lookup_version_name and lookup_app_name in respect to CODING_STANDARD
...
- removed appIdToName($appId) and versionIdToName($appId) from category.php
- replaced every occurence of appIdToName and versionIdToName with lookup_app_name and lookup_version_name
2005-02-04 02:59:05 +00:00
Jonathan Ernst
2083bf521b
- OO version of user class
...
- no more duplicated functions
- improved performances (much less duplicated mysql queries)
- less code and better error handling
2005-01-30 23:12:48 +00:00
Jonathan Ernst
dcf7c819a4
- replaced mysql_query with appdb_query
...
- fixed mysql query in include/session.php
2005-01-08 18:24:55 +00:00
Paul van Schayck
dc1fd45420
Delete on slot base. Note appId+slot base. And allow only MAX_VOTES slots
2004-12-28 00:01:21 +00:00
Paul van Schayck
56555c3ed0
Rewrite vote_menu() to use MAX_VOTES. Show the application name instead of the ID in the menu.
2004-12-27 23:59:30 +00:00
Paul van Schayck
0f0e1c5425
Fix vote form and check on userinput (making more user friendly at the same time)
2004-12-27 05:16:33 +00:00
Jonathan Ernst
ca749d32d9
make use of the new constants of the config file for db connection and base path
2004-12-23 01:12:03 +00:00
Jonathan Ernst
d3d9e853d9
- replaced tons of tabs with spaces
...
- replaced <? with <?php for compatibility sake (see TODO and CODING_STANDARD to know more)
- improved overall code lisibility
2004-12-12 03:51:51 +00:00
Jonathan Ernst
bd91db228c
- access most globals by their $_XYZ['varname'] name
...
- fix some code errors and typos (missing $ in front of variable names
and so on)
- fixed a lot of warnings that would have been thrown when error_reporting
is set to show notices (if(isset($variable))) instead of if($variable) for
example)
2004-12-10 01:07:45 +00:00
Jeremy Newman
8f28ae10c4
Initial revision
2004-03-15 16:22:00 +00:00
