Commit Graph

11 Commits

Author SHA1 Message Date
David Anderson 9963f0958b - web: fix for cross-site scripting vulnerability
(from Nicolas Alvarez)

svn path=/trunk/boinc/; revision=15261
2008-05-20 16:42:01 +00:00
David Anderson 830db542f7 - user web: fix translation bug (from Nicolas Alvarez)
- user web: fix small bug in team search

svn path=/trunk/boinc/; revision=14293
2007-11-23 19:11:42 +00:00
David Anderson ab6bcccf59 - user web: team search tweaks
svn path=/trunk/boinc/; revision=14273
2007-11-20 23:18:54 +00:00
David Anderson 4a81532043 - DB: add fulltext index on team.name
- user web: improve "team search" function,
    and get rid of the superceded "search by name" function
- user web: don't show team founder link to initiate transfer
- user web: show team types
- user web: fix "top teams by type" function
- client: tread NOT_FOUND error on file upload as transient;
    it means the project is missing its file_upload_handler

svn path=/trunk/boinc/; revision=14272
2007-11-20 22:58:14 +00:00
David Anderson fb8b4ffabb - user web: added the notion of "Team Admin": team members,
appointed by the founder, who have most of the same
    rights as the founder (edit team info, view/remove users).
    They can't, however, change the founder, or select/remove Admins.
- user web: added the ability for founder to delete an empty team
- user web: count/show all team members, not just those with credit
- user web: Team Search returns top team if form fields left blank
- Added db_update.php entry for Eric's banishment_vote stuff

svn path=/trunk/boinc/; revision=14108
2007-11-07 17:23:29 +00:00
David Anderson 7302f02544 - user web: added new framework for DB access from PHP.
Here's how things should eventually be:
    - inc/db_conn.inc defines DbConn, a PHP class representing
        a connection to a database with
        various generic operations (update, insert etc.).
        DbConn prepends the DB name to table names,
        so you don't have to select a DB;
        this means you can access multiple databases
        (e.g. BOINC and Bossa) and use persistent connections.
        ALL MYSQL-SPECIFIC CODE WILL EVENTUALLY BE HERE.
    - inc/boinc_db.inc defines classes BoincUser, BoincTeam etc.,
        representing the various BOINC DB tables.
        All access to the DB should use these classes.

    When you use this framework, no initialization calls are needed.
    db.inc is deprecated and should eventually be removed.

    I changed get_logged_in_user()
    and all team-related code to use this framework.
- user web: show team founder link to "management functions"
    even if they're not currently a member;
    allow team founder to perform all operations even if not a member.
- turned on E_ALL error checking,
    and fixed a bunch of warnings
    and a couple of bugs ($team, not team)

- database: update schema/constraints for team fulltext search
- user web: forgot to change Serbia and Montenegro to Serbia

svn path=/trunk/boinc/; revision=13968
2007-10-26 21:14:35 +00:00
David Anderson cefb2ee5aa - user web: team search tweaks
svn path=/trunk/boinc/; revision=13749
2007-10-02 15:32:28 +00:00
David Anderson d53595f047 - user web: team search tweaks
svn path=/trunk/boinc/; revision=13748
2007-10-02 15:12:45 +00:00
David Anderson 0c1dcbfe86 - user web: tweaks to team search
svn path=/trunk/boinc/; revision=13747
2007-10-02 15:07:43 +00:00
David Anderson 0b8d9a950b svn path=/trunk/boinc/; revision=13732 2007-10-02 03:31:43 +00:00
David Anderson 2272891035 - user web: add "team search" page, which does a multi-criteria
search (keywords, country, type).
    Have the new-user scenario route the user through this page.
    Also, link to it rather than team.php for existing users.
- user web: use cookies rather than URLs to identify new users,
    and show "Welcome to X" when they reach their user page.
- user web: don't show user intermediate page for join/quit team.
    Just take them to their user page.

svn path=/trunk/boinc/; revision=13731
2007-10-02 03:19:03 +00:00