Commit Graph

26 Commits

Author SHA1 Message Date
Chris Morgan
763ad58bcf Move function in include/comment.php inside of the comment class. This lets us refer to
these functions like Comment:: making it clear they are static functions of the comment class
2006-07-08 22:09:14 +00:00
Chris Morgan
445fbdfdd3 Switch a few more variables over to the new naming scheme, fix deleting comments and replying to comments 2006-07-06 23:49:51 +00:00
Jonathan Ernst
735a2bc65f Prefix all GPC variables according to our coding standard 2006-07-06 17:27:54 +00:00
Tony Lambregts
55e06eee0c Remove now unnecessary stripslashes() 2006-07-04 02:12:43 +00:00
Chris Morgan
034ea689bc Clean up application and version classes. Move class related functions into the class as static member functions 2006-06-29 16:07:19 +00:00
Chris Morgan
245a6b993e Cleanup User class. Move user related functions into class as static member functions 2006-06-29 15:54:29 +00:00
Chris Morgan
e3f9e5371a Use query_parameters() in SQL select, update and delete statements to protect against
sql injection attacks
2006-06-27 19:16:27 +00:00
Chris Morgan
fb0f3b5dd3 Protect against sql injection attacks in sql INSERT statements 2006-06-24 04:20:32 +00:00
Chris Morgan
67550405c3 Make code more consistent by making it follow the appdb coding standards. Fix some spaces vs. tabs odd indenting. 2006-06-21 01:04:12 +00:00
EA Durbin
f982c8459e Filter all user input to reduce the security impact of manipulated data 2006-06-17 06:10:10 +00:00
Tony Lambregts
7fec72b632 Don't expose users email addresses to robots 2006-06-16 03:18:45 +00:00
Tony Lambregts
fe004f36fa Add note to use the AppDB to reply to email instead of replying to the email 2006-04-28 00:53:01 +00:00
Tony Lambregts
f6beae01cf Add tag to comment id and link it to the notification email 2006-03-24 05:01:48 +00:00
Chris Morgan
07801e8b9e Comment replies were incorrectly adding duplicate emails for threads that contained multiple posts by the same author or if a maintainer was also an admin. Ensure that there are no duplicate email addresses using array_unique() 2005-08-24 01:36:12 +00:00
Chris Morgan
c8275c3096 Pass a default into User::getPref() when trying to retrieve the comments mode set so users with no comment mode set will default to 'threaded'. Otherwise these users won't see any comments. 2005-08-15 00:25:37 +00:00
Chris Morgan
009cc6a55f Fix code indenting, change default non-logged in comment mode to threaded 2005-08-14 19:28:34 +00:00
Chris Morgan
5df2203821 Put single quotes around the application name/version name a comment is being deleted for 2005-07-30 15:36:15 +00:00
Chris Morgan
dc99aaf631 Put some single quotes around application name and version name so they can be distinguished from the rest of the email notification text more easily. 2005-06-19 15:46:57 +00:00
Jonathan Ernst
06ea1b6d3d Security fixes. Ensure that numeric values are actually numeric using is_numeric
so users can't login as admin by passing in non-numeric values.
2005-03-23 23:56:38 +00:00
Jonathan Ernst
12a7858235 - people can tell why they delete comments again 2005-03-12 17:13:08 +00:00
Jonathan Ernst
ea14ba0c45 - fix supermaintainers delete comments
- use deleteAny.php for comment deletion
2005-03-12 01:09:51 +00:00
Jonathan Ernst
067bd0e623 Fix link to version page when sending mail about a comment 2005-02-21 01:40:12 +00:00
Jonathan Ernst
124868c0a0 - fix the 25 errors reported by the w3c html validator (http://validator.w3.org) in appview.php?appid=whatever
- fix the 46 errors reported by the w3c html validator in appview.php?versionid=whatever
- fix the 97 errors reported by the w3c html validator in index.php
2005-02-11 23:42:50 +00:00
Jonathan Ernst
ac052e6c84 - show correct number of comment
- remove unused function
2005-02-09 23:48:01 +00:00
Jonathan Ernst
cfd1d1ac09 - renamed lookupVersionName and lookupAppName into lookup_version_name and lookup_app_name in respect to CODING_STANDARD
- removed appIdToName($appId) and versionIdToName($appId) from category.php
- replaced every occurence of appIdToName and versionIdToName with lookup_app_name and lookup_version_name
2005-02-04 02:59:05 +00:00
Jonathan Ernst
03c0c145c5 - new Comment class
- improved performances (much less duplicated mysql queries)
- less code and better error handling
- informs the whole thread when posting new comment
- fix various bugs
2005-02-02 03:01:29 +00:00