Commit Graph

27 Commits

Author SHA1 Message Date
David Anderson eaddebab61 - web: more translatability. From Uwe Becker.
svn path=/trunk/boinc/; revision=24886
2011-12-24 15:37:20 +00:00
David Anderson 69912085b9 - web: send user a private message when
- one of their posts is moderated
    - a banishment vote starts or completes.
    This is needed in cases where the user can't or doesn't
    read email to their account's address.
    The "from" address of the PM is that of the user, not the moderator.

svn path=/trunk/boinc/; revision=23941
2011-08-06 07:11:17 +00:00
David Anderson 4e1561279e - user web: fixes to private message functions
svn path=/trunk/boinc/; revision=23045
2011-02-16 18:08:21 +00:00
David Anderson c62a55b47f svn path=/trunk/boinc/; revision=23034 2011-02-14 21:35:29 +00:00
David Anderson 4b9ef1e012 - user web: bug fix
svn path=/trunk/boinc/; revision=23028
2011-02-14 17:55:58 +00:00
David Anderson 3e2e5f2fdc - user web: CSS cleanup.
Use classes instead of IDs.
    white.css and black.css are cleaned up; style2.css needs work


svn path=/trunk/boinc/; revision=23018
2011-02-10 22:45:39 +00:00
David Anderson d27af6214d - user web: finish dealing with get args spam
svn path=/trunk/boinc/; revision=23010
2011-02-09 22:11:34 +00:00
David Anderson f4345f9dc4 - user web: various enhancements and fixes from Simek.
Fixes #1020

svn path=/trunk/boinc/; revision=22620
2010-11-03 21:48:39 +00:00
David Anderson d6315c7112 - fix various XSS vulnerabilities reported by the
Acunetix Web Vulnerability Scanner (free edition)


svn path=/trunk/boinc/; revision=22315
2010-09-04 22:13:27 +00:00
David Anderson 7933287457 - user web: no limit on PMs for moderators, admins etc.
svn path=/trunk/boinc/; revision=21328
2010-04-29 15:28:27 +00:00
David Anderson 372b2a61c7 - web: swap positions of reply/delete buttons in private message display
svn path=/trunk/boinc/; revision=17850
2009-04-21 01:03:48 +00:00
David Anderson c481086bc0 - client: show duration estimates for CPU and CUDA separately
- web: reverse Reply and Delete buttons in private msg page
    fixes #858

svn path=/trunk/boinc/; revision=17500
2009-03-04 21:02:18 +00:00
David Anderson 6a75b78de4 - client: don't ignore jobs with fraction_done=1 (but still running)
in RR simulation; we may need to mark them as deadline miss.
- web: replace & with & various places


svn path=/trunk/boinc/; revision=17278
2009-02-17 17:39:57 +00:00
David Anderson 8ef6d9c756 - web: send only 1 email on team founder transfer request
- web: if no transfer request is pending, say so

svn path=/trunk/boinc/; revision=16664
2008-12-09 22:41:29 +00:00
David Anderson 2224b8d906 - web: delete all private msgs was broken
svn path=/trunk/boinc/; revision=16236
2008-10-20 18:28:58 +00:00
David Anderson 37364ab657 - client: show message when suspending because of exclusive app
- web: remove file_get_contents() workaround for PHP4
- web: If Akismet or ReCaptcha failure,
    display the form again with a warning message at the top.
    That way the user doesn't lose the text they just typed.

svn path=/trunk/boinc/; revision=16175
2008-10-09 18:28:55 +00:00
Janus B. Kristensen 5aa7779aaf Part 2 of 2 for the fix of Ticket #740.
svn path=/trunk/boinc/; revision=16077
2008-09-27 09:52:28 +00:00
David Anderson 896bdb2e23 - web: improve white.css, and make corresponding PHP changes
(mostly from Simek)
    fixes #716
- validator: tweak the way host error rate is computed,
    e.g. on error bump rate by .1 instead of .05

svn path=/trunk/boinc/; revision=15771
2008-08-07 20:43:52 +00:00
David Anderson 9baf78fe5f - web: added copyright and license info to PHP files
svn path=/trunk/boinc/; revision=15758
2008-08-05 22:43:14 +00:00
David Anderson d403a14e42 - web: cleaned up logic of string processing.
There are two aspects:
    1) undoing magic quotes (if it's being used).
        This must be done for all GET and POST string inputs.
        It is now done automatically by get_str() and post_str().
        The places that refer to $_GET and $_POST directly
        must do it themselves using undo_magic_quotes().
    2) Escaping user-supplied strings before using them in DB queries.
        This is done by process_user_text()
        (which should be renamed db_escape_string()).
        The new principle:
        call process_user_text() in the function that does the DB query
        (not at any higher level).


svn path=/trunk/boinc/; revision=15389
2008-06-11 19:36:10 +00:00
David Anderson d764eb5873 - web: clean up stuff related to stripslashes():
1) it's not correct to apply stripslashes() to all form input.
        That should be done only if magic quotes is on.
        I fixed this by adding a function undo_magic_quotes()
        that does the right thing.
    2) There's no reason to strip backslashes from user-supplied text
        (forum titles and bodies, private messages, passwords etc.)
        I'm not sure why this was being done.
        It prevented messages from containing backslashes.

svn path=/trunk/boinc/; revision=15364
2008-06-05 20:32:21 +00:00
David Anderson f183b6f47f - web: add general-purpose notification mechanism.
Users can choose whether to get 1 email per notification,
    a daily "digest" email, or no email.
    (All notifications are shown on the Account page).
    Currently used for:
    - Friend requests and confirmations
    - Posts to subscribed threads
    - Private messages

    NOTE: To implement the "daily digest" feature, projects must add
    a periodic task for html/ops/notify.php to config.xml
- web: have project_footer() generate links for
    Account Page and Message Boards as well as Home
    NOTE: projects that want this change
    will have to modify their own project.inc.

svn path=/trunk/boinc/; revision=14447
2007-12-30 22:02:16 +00:00
David Anderson da3671f0de - user web: when showing UOTD on front page,
strip HTML tags from text (e.g. to remove photos)
- user web: show_image(): separate title (tooltip text)
    from "alt" (replaces image if images disabled).
    The latter must be terse.
- user web: show_button(): make it work even if Javascript disabled

svn path=/trunk/boinc/; revision=14294
2007-11-23 21:05:52 +00:00
David Anderson 9041fd8507 - user web: use forum prefs (e.g. display images as links)
when displaying PMs.  fixes #497

svn path=/trunk/boinc/; revision=14264
2007-11-20 00:55:35 +00:00
David Anderson f978ce2143 - user web: fix PM mass deletion
svn path=/trunk/boinc/; revision=14252
2007-11-18 22:17:39 +00:00
David Anderson 0616e75a02 - user web: update other code to use new-style DB interfaces
svn path=/trunk/boinc/; revision=14164
2007-11-12 22:28:17 +00:00
David Anderson a18dfc55a7 - user web: revise forum code to use new-style DB interface
svn path=/trunk/boinc/; revision=14160
2007-11-12 20:57:15 +00:00