Commit Graph

16 Commits

Author SHA1 Message Date
David Anderson d764eb5873 - web: clean up stuff related to stripslashes():
1) it's not correct to apply stripslashes() to all form input.
        That should be done only if magic quotes is on.
        I fixed this by adding a function undo_magic_quotes()
        that does the right thing.
    2) There's no reason to strip backslashes from user-supplied text
        (forum titles and bodies, private messages, passwords etc.)
        I'm not sure why this was being done.
        It prevented messages from containing backslashes.

svn path=/trunk/boinc/; revision=15364
2008-06-05 20:32:21 +00:00
David Anderson e56ed1430f - DB code: safe_atof() was returning a float,
causing a potential loss of precision.
    Change it to double (same as atof())
- When moderator locks a thread, let them specify reason

svn path=/trunk/boinc/; revision=14662
2008-02-02 17:01:57 +00:00
David Anderson 724e89ebab - web: if user has profile photo, use it instead of head_20.
svn path=/trunk/boinc/; revision=14438
2007-12-23 23:09:10 +00:00
David Anderson a49608a028 - user web: allow teams to create their own "team message board".
Team founder and admins have moderator power.
    Anyone can view a team message board,
    but only team members can write to it.
    Users cannot be banished from team message boards
    (due to database limitations).

svn path=/trunk/boinc/; revision=14218
2007-11-15 22:51:05 +00:00
David Anderson a18dfc55a7 - user web: revise forum code to use new-style DB interface
svn path=/trunk/boinc/; revision=14160
2007-11-12 20:57:15 +00:00
Rytis Slatkevičius 1740f526d9 Encode UTF characters into HTML entities (from ChristianB, fix #57).
NOTE: teams that have name display issues will have to edit their description once the projects update the code.

svn path=/trunk/boinc/; revision=12691
2007-05-18 15:02:02 +00:00
Rytis Slatkevičius c7cf11d4af Show forum name list instead of asking for a numeric ID (from Willy de Zutter)
svn path=/trunk/boinc/; revision=12690
2007-05-18 14:49:10 +00:00
Rytis Slatkevičius aa396080c0 Fix XSS vulnerability in the forum
svn path=/trunk/boinc/; revision=12055
2007-02-08 19:54:05 +00:00
Rytis Slatkevičius eedd0db6c9 HTML stripping issue
svn path=/trunk/boinc/; revision=11718
2006-12-23 14:59:47 +00:00
Matt Lebofsky 8c4c44f590 *** empty log message ***
svn path=/trunk/boinc/; revision=11261
2006-10-09 18:53:54 +00:00
David Anderson 091b57c6c1 *** empty log message ***
svn path=/trunk/boinc/; revision=10380
2006-06-16 23:53:56 +00:00
Rom Walton c83f31e03e *** empty log message ***
svn path=/trunk/boinc/; revision=10166
2006-05-21 21:04:58 +00:00
Rom Walton a34a54dcfa *** empty log message ***
svn path=/trunk/boinc/; revision=9789
2006-04-03 20:18:39 +00:00
Janus B. Kristensen b221a57b2d Checking input parameters
svn path=/trunk/boinc/; revision=5454
2005-02-17 11:43:49 +00:00
David Anderson a7320942ad *** empty log message ***
svn path=/trunk/boinc/; revision=5422
2005-02-13 21:33:02 +00:00
Janus B. Kristensen 53cc977ad2 Delete thread forum moderation feature
svn path=/trunk/boinc/; revision=5412
2005-02-12 09:50:13 +00:00