Chris Morgan
e3f9e5371a
Use query_parameters() in SQL select, update and delete statements to protect against
...
sql injection attacks
2006-06-27 19:16:27 +00:00
Chris Morgan
fb0f3b5dd3
Protect against sql injection attacks in sql INSERT statements
2006-06-24 04:20:32 +00:00
Chris Morgan
67550405c3
Make code more consistent by making it follow the appdb coding standards. Fix some spaces vs. tabs odd indenting.
2006-06-21 01:04:12 +00:00
EA Durbin
f982c8459e
Filter all user input to reduce the security impact of manipulated data
2006-06-17 06:10:10 +00:00
Tony Lambregts
7fec72b632
Don't expose users email addresses to robots
2006-06-16 03:18:45 +00:00
Tony Lambregts
fe004f36fa
Add note to use the AppDB to reply to email instead of replying to the email
2006-04-28 00:53:01 +00:00
Tony Lambregts
f6beae01cf
Add tag to comment id and link it to the notification email
2006-03-24 05:01:48 +00:00
Chris Morgan
07801e8b9e
Comment replies were incorrectly adding duplicate emails for threads that contained multiple posts by the same author or if a maintainer was also an admin. Ensure that there are no duplicate email addresses using array_unique()
2005-08-24 01:36:12 +00:00
Chris Morgan
c8275c3096
Pass a default into User::getPref() when trying to retrieve the comments mode set so users with no comment mode set will default to 'threaded'. Otherwise these users won't see any comments.
2005-08-15 00:25:37 +00:00
Chris Morgan
009cc6a55f
Fix code indenting, change default non-logged in comment mode to threaded
2005-08-14 19:28:34 +00:00
Chris Morgan
5df2203821
Put single quotes around the application name/version name a comment is being deleted for
2005-07-30 15:36:15 +00:00
Chris Morgan
dc99aaf631
Put some single quotes around application name and version name so they can be distinguished from the rest of the email notification text more easily.
2005-06-19 15:46:57 +00:00
Jonathan Ernst
06ea1b6d3d
Security fixes. Ensure that numeric values are actually numeric using is_numeric
...
so users can't login as admin by passing in non-numeric values.
2005-03-23 23:56:38 +00:00
Jonathan Ernst
12a7858235
- people can tell why they delete comments again
2005-03-12 17:13:08 +00:00
Jonathan Ernst
ea14ba0c45
- fix supermaintainers delete comments
...
- use deleteAny.php for comment deletion
2005-03-12 01:09:51 +00:00
Jonathan Ernst
067bd0e623
Fix link to version page when sending mail about a comment
2005-02-21 01:40:12 +00:00
Jonathan Ernst
124868c0a0
- fix the 25 errors reported by the w3c html validator ( http://validator.w3.org ) in appview.php?appid=whatever
...
- fix the 46 errors reported by the w3c html validator in appview.php?versionid=whatever
- fix the 97 errors reported by the w3c html validator in index.php
2005-02-11 23:42:50 +00:00
Jonathan Ernst
ac052e6c84
- show correct number of comment
...
- remove unused function
2005-02-09 23:48:01 +00:00
Jonathan Ernst
cfd1d1ac09
- renamed lookupVersionName and lookupAppName into lookup_version_name and lookup_app_name in respect to CODING_STANDARD
...
- removed appIdToName($appId) and versionIdToName($appId) from category.php
- replaced every occurence of appIdToName and versionIdToName with lookup_app_name and lookup_version_name
2005-02-04 02:59:05 +00:00
Jonathan Ernst
03c0c145c5
- new Comment class
...
- improved performances (much less duplicated mysql queries)
- less code and better error handling
- informs the whole thread when posting new comment
- fix various bugs
2005-02-02 03:01:29 +00:00
