Commit Graph

8 Commits

Author SHA1 Message Date
Christian Beer ea7df2637e Web: use https urls everywhere
Modern Browser complain if there are non-https elements in https websites. This makes sure that if the user visits via https all elements of the page are also retrieved using SSL. Furthermore it uses https urls in emails that are send to the user, if SECURE_URL_BASE is set in project/project.inc.
The only remaining places where URL_BASE is used is when it is used as master_url where it is important that it is in sync with what the scheduler uses.
2015-11-30 09:36:29 +01:00
David Anderson 9df6e43863 web: handle the case of missing user records in a few places
The delete-spammers script was creating dangling user references
(although this is now fixed).
Detect these dangling references and clean them up.
2014-07-12 14:32:59 -07:00
David Anderson 0a686c5195 - fix typos in two PHP scripts
svn path=/trunk/boinc/; revision=25715
2012-05-26 05:18:04 +00:00
David Anderson bbaff5d2da - web: remove DBNAME hack, which allowed users to see the DB name
(not a big deal, but bad form).
    Fixes #1028

svn path=/trunk/boinc/; revision=22748
2010-11-25 05:54:09 +00:00
David Anderson b817b8ed7a - admin web: changed protection scheme as follows:
- default: script can be run from command line;
        to run from web you need to be logged in as a particular user.
        (in addition to .htaccess protection).
    - if include $cli_only at start of script:
        can only be run from the command line.
    - if include $skip_auth_ops at start of script:
        can run from web without being logged in
        (this is set ONLY in login_action.php)
- admin web: added $cli_only = true to a bunch of scripts


svn path=/trunk/boinc/; revision=19230
2009-10-02 18:32:40 +00:00
David Anderson 0f9cda3ea3 - admin web: finished the above.
Got rid of auth_ops_cmdline() (not needed).
    auth_ops() is now called in util_ops.inc;
    every script in html/ops/ must include util_ops.inc.

Note: for existing projects, the admin web interface
    will now show "access denied".
    Projects must think about what access control policy they want,
    and specify it in project.inc


svn path=/trunk/boinc/; revision=19053
2009-09-15 18:14:37 +00:00
David Anderson 9baf78fe5f - web: added copyright and license info to PHP files
svn path=/trunk/boinc/; revision=15758
2008-08-05 22:43:14 +00:00
David Anderson f183b6f47f - web: add general-purpose notification mechanism.
Users can choose whether to get 1 email per notification,
    a daily "digest" email, or no email.
    (All notifications are shown on the Account page).
    Currently used for:
    - Friend requests and confirmations
    - Posts to subscribed threads
    - Private messages

    NOTE: To implement the "daily digest" feature, projects must add
    a periodic task for html/ops/notify.php to config.xml
- web: have project_footer() generate links for
    Account Page and Message Boards as well as Home
    NOTE: projects that want this change
    will have to modify their own project.inc.

svn path=/trunk/boinc/; revision=14447
2007-12-30 22:02:16 +00:00