Chris Morgan
e3f9e5371a
Use query_parameters() in SQL select, update and delete statements to protect against
...
sql injection attacks
2006-06-27 19:16:27 +00:00
Chris Morgan
fb0f3b5dd3
Protect against sql injection attacks in sql INSERT statements
2006-06-24 04:20:32 +00:00
EA Durbin
f982c8459e
Filter all user input to reduce the security impact of manipulated data
2006-06-17 06:10:10 +00:00
Chris Morgan
639dd77d15
Let maintainers and super maintainers process the application versions and images submitted for applications they maintain
2005-08-05 22:07:41 +00:00
Chris Morgan
adf0dc83ab
Use the sql row object to get the submitted time, instead of an object that
...
doesn't exist.
2005-06-25 01:22:09 +00:00
Jonathan Ernst
25f3f01412
- display the submit time correctly in admin panels
...
- display the submitter correctly in admin panels
2005-02-20 01:55:53 +00:00
Jonathan Ernst
73ad961a85
Fix version deletion
2005-02-19 01:19:07 +00:00
Jonathan Ernst
73c7044a10
Make admin panels look consistant (same column name and order, editing
...
links in the last column, etc.)
2005-02-09 02:22:20 +00:00
Jonathan Ernst
e1c1489279
- improve appData and related classes
...
- don't use a full table for queued appdata but only one field in theapplication and version tables
- simplify the code in many places
- fixes some bugs with screenshots
2005-02-07 23:49:06 +00:00
Jonathan Ernst
d802baaaf7
Display app name in adminAppDataQueue.php when reviewing an appdata
2005-02-04 03:34:23 +00:00
Jonathan Ernst
3ebdbc9af5
- no more appId in appData as appVersion implies an appId*
...
- screenshot class has been reworked to remove need of appId
- screenshot class has been improved to send e-mails so that email handling can be removed from other scripts
2005-02-04 02:55:50 +00:00
Jonathan Ernst
2083bf521b
- OO version of user class
...
- no more duplicated functions
- improved performances (much less duplicated mysql queries)
- less code and better error handling
2005-01-30 23:12:48 +00:00
Jonathan Ernst
0a839e359a
- use mail_appdb() instead of mail() for better error handling and to avoid code duplication
...
- use \r\n as line separator in mail (RFC compliant)
2005-01-30 00:57:34 +00:00
Jonathan Ernst
d5a50ecec4
* new screenshot and image classes
2005-01-27 15:42:53 +00:00
Jonathan Ernst
d3ad0dba41
- replaced mysql_query() with query_appdb()
...
- removed opendb()
- removed query_userdb()
- removed error handling from the code as it is done with query_appdb()
2005-01-12 16:22:55 +00:00
Jonathan Ernst
d9826427da
This patch make email address the user's username as requested in the TODO.
...
query_users.php is modified even if we will drop it in the future to be sure it works everywhere.
2005-01-10 22:54:04 +00:00
Francois Gouget
8fab7880b4
Assorted spelling fixes.
...
Small wording tweaks.
Capitalize Wine when referring to the project.
2005-01-10 22:15:44 +00:00
Eric Blade
ffeeaef807
Clean up HTML and PHP, remove extranious checks for loggedin()
2004-12-29 20:21:31 +00:00
Jonathan Ernst
52437f5f30
- use queued screenshot directory instead of mysql to store queued data
...
- use the config file to determine thumbnail size
2004-12-23 01:13:26 +00:00
Chris Morgan
77a038d4f9
Remove isMaintainer() and isSuperMaintainer and instead use the user
...
classes is_maintainer() and is_super_maintainer.
2004-12-19 19:30:27 +00:00
Jonathan Ernst
a8ba02e76d
Implemented the user friendly screenshot submitting feature
2004-12-18 06:06:46 +00:00
