claunia/qemudb
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
707 Commits 1 Branch 0 Tags
c4caf6c85f2002113b2fce818d50cde74c49e478
Commit Graph

72 Commits

Author SHA1 Message Date
Chris Morgan
a72f31e11a Rename some variables to match our current naming scheme 2006-06-30 16:33:02 +00:00
Chris Morgan
245a6b993e Cleanup User class. Move user related functions into class as static member functions 2006-06-29 15:54:29 +00:00
Chris Morgan
e3f9e5371a Use query_parameters() in SQL select, update and delete statements to protect against 
sql injection attacks
 2006-06-27 19:16:27 +00:00
Chris Morgan
98ba61db03 Clean up user class. Implement start of unit testing framework for appdb. 
Implement start of user class unit test.
 2006-06-27 03:59:16 +00:00
Chris Morgan
fb0f3b5dd3 Protect against sql injection attacks in sql INSERT statements 2006-06-24 04:20:32 +00:00
Chris Morgan
67550405c3 Make code more consistent by making it follow the appdb coding standards. Fix some spaces vs. tabs odd indenting. 2006-06-21 01:04:12 +00:00
EA Durbin
f982c8459e Filter all user input to reduce the security impact of manipulated data 2006-06-17 06:10:10 +00:00
Tony Lambregts
d38adfedac Fix up inactivity warnings and include login link on inactivity email 2006-03-24 03:20:34 +00:00
Chris Morgan
e7935b1f4f Pass a version object into user::hasAppVersionModifyPermission() instead of 
the integer that is the index of the version in the database.
 2006-01-23 02:10:31 +00:00
Tony Lambregts
488c74dbf0 Users don't have permission to modify application versions if they aren't logged in. 2006-01-19 05:25:52 +00:00
Chris Morgan
8b0a52f782 Add comment to clarify a permissions check 2005-10-30 02:10:36 +00:00
Chris Morgan
2ff66ab389 Simplify and fix User::hasAppVersionModifyPermission() 2005-10-30 02:07:54 +00:00
Tony Lambregts
8ebccb4f2a Add test results as part of submitting an application or version 2005-10-28 00:11:35 +00:00
Chris Morgan
47336e4f8d Fix unknown function isLoggedIn() to be $this->isLoggedIn() 2005-10-26 22:54:30 +00:00
Chris Morgan
89abe706dc Improve permission checking in objects, fix some initialization bugs 2005-10-26 02:09:49 +00:00
Chris Morgan
93ab2587ef Add stats field for users who have been flagged as inactive and are pending deletion 2005-10-15 16:05:03 +00:00
Chris Morgan
f6f935a36e Return true or false from warnForInactivity() depending on whether we warned the user or not, this way we can provide more accurate numbers in the cleanup script summary 2005-10-09 18:33:52 +00:00
Chris Morgan
fa638bd7af hasDataAssociated() is a user internal call, call like $this->hasDataAssociated() instead of hasDataAssociated() 2005-10-09 18:09:35 +00:00
Tony Lambregts
2311d4d572 Add the ability for user to monitor changes to applications 2005-09-30 01:55:51 +00:00
Chris Morgan
a66ae25f38 Move deletion of maintainer logic into the user class. If the cleanup script wants to delete a user and can't, if they are a maintainer we should remove their maintainer status even if we don't delete their account. Send email at the start of the cleanup script to aid in debug 2005-09-30 01:37:57 +00:00
Chris Morgan
1a58863f78 Improve cleanup script to give users 1 month after warning before removing their account. Move user related logic into the user class. Add columns to the user_list table to track whether the user was warned about inactivity and the datetime of the warning. 2005-09-28 00:32:48 +00:00
Chris Morgan
c44f818218 Send notification emails to admins when the cleanup cron job executes so there is some visibility into the maintenance tasks running on the appdb. Fix a minor bug in the user class where passing in (null,null) for iVendorId and iAppId results in a null query string being sent to mysql and triggering an error 2005-09-15 00:22:22 +00:00
Chris Morgan
58d4e45b08 Sort maintainers in adminMaintainers.php by their name. Add header for each maintainer that has a summary of the number of applications and versions they maintain 2005-08-25 03:24:31 +00:00
Chris Morgan
371327cb87 Fix User::getAppDataQuery() copy/paste bug that was causing super maintainers to not be able to process app data for applications they super maintain 2005-08-23 00:26:08 +00:00
Tony Lambregts
b7f1d55472 Allow maintainers/administrators to reject an application submission instead of just deleting it 2005-08-15 03:44:03 +00:00
Chris Morgan
c8b4caf151 Set defaults comments mode to threaded for new users 2005-08-15 00:17:54 +00:00
Chris Morgan
c77e881999 Fix indenting. Remove use of $_SESSION[] inside of the class because we can simply use $this 2005-08-14 18:49:21 +00:00
Chris Morgan
639dd77d15 Let maintainers and super maintainers process the application versions and images submitted for applications they maintain 2005-08-05 22:07:41 +00:00
Chris Morgan
cc912964d6 Move some maintainer code into user class, don't let a user maintain 
the same app more than once
 2005-07-31 17:53:11 +00:00
Chris Morgan
4be7e90e66 user->isMaintainer() should return true if the user is a super maintainer of the application 2005-07-30 16:35:03 +00:00
Chris Morgan
342bd66485 Delete a users comments when the user is deleted. Return the correct 
value in cron/cleanup.php when looking for user associated data.
 2005-05-13 00:28:28 +00:00
Chris Morgan
8d6b1efc30 Delete a user's votes and their maintainer entries when a user is 
deleted.
 2005-05-13 00:22:37 +00:00
Jonathan Ernst
06ea1b6d3d Security fixes. Ensure that numeric values are actually numeric using is_numeric 
so users can't login as admin by passing in non-numeric values.
 2005-03-23 23:56:38 +00:00
Jonathan Ernst
209f58ff3f Fix user deletion 2005-02-14 18:20:48 +00:00
Jonathan Ernst
b5248b3873 return "an anonymous user" when we are dealing with the name of an 
unregistered user instead of using "".
 2005-02-09 23:52:15 +00:00
Jonathan Ernst
96df720bb6 - fix isMaintainer and isSuperMaintainer 
- make the correct button appear in appview (be a maintainer/stop to be a maintainer)
- make the list of maintained applications reappear on the left menu
 2005-02-07 23:55:42 +00:00
Jonathan Ernst
ddfb83e988 Fix send lost password feature 2005-02-06 22:34:43 +00:00
Jonathan Ernst
3ebdbc9af5 - no more appId in appData as appVersion implies an appId* 
- screenshot class has been reworked to remove need of appId
- screenshot class has been improved to send e-mails so that email handling can be removed from other scripts
 2005-02-04 02:55:50 +00:00
Jonathan Ernst
039fba9a6a New function to see if someone wants to receive email 2005-02-02 02:42:28 +00:00
Jonathan Ernst
f9ef6ef221 Fix enrolling to be supermaintainer 2005-02-02 00:12:35 +00:00
Jonathan Ernst
1200dca8d7 Fix sending mail to people that don't want them 2005-02-01 01:58:09 +00:00
Jonathan Ernst
2083bf521b - OO version of user class 
- no more duplicated functions
- improved performances (much less duplicated mysql queries)
- less code and better error handling
 2005-01-30 23:12:48 +00:00
Francois Gouget
a8f2cd5865 Assorted spelling and typo fixes 2005-01-29 00:43:41 +00:00
Jonathan Ernst
791bac8e09 make it possible to add/remove administrators 2005-01-17 04:30:39 +00:00
Jonathan Ernst
f093a01229 add a user management panel for administrators 2005-01-16 02:04:03 +00:00
Jonathan Ernst
caf91fded2 remove all mysql_error() instances as errors are handled by query_appdb() 2005-01-14 05:34:25 +00:00
Jonathan Ernst
d3ad0dba41 - replaced mysql_query() with query_appdb() 
- removed opendb()
- removed query_userdb()
- removed error handling from the code as it is done with query_appdb()
 2005-01-12 16:22:55 +00:00
Tony Lambregts
42079eaf32 Fix up creating new users. 2005-01-11 02:32:20 +00:00
Jonathan Ernst
ee28390769 Replaced mysql_query() with query_appdb() 2005-01-11 00:26:05 +00:00
Jonathan Ernst
d9826427da This patch make email address the user's username as requested in the TODO. 
query_users.php is modified even if we will drop it in the future to be sure it works everywhere.
 2005-01-10 22:54:04 +00:00