Commit Graph

31 Commits

Author SHA1 Message Date
David Anderson 3e2e5f2fdc - user web: CSS cleanup.
Use classes instead of IDs.
    white.css and black.css are cleaned up; style2.css needs work


svn path=/trunk/boinc/; revision=23018
2011-02-10 22:45:39 +00:00
David Anderson d27af6214d - user web: finish dealing with get args spam
svn path=/trunk/boinc/; revision=23010
2011-02-09 22:11:34 +00:00
David Anderson 91c251c103 - user web: add "delete account" feature.
This allows a user to delete all traces of themselves from a project.
    Namely:
    - clear fields of user record: email_addr, authenticator,
        name, country, postal_code
        Note: record is not deleted
    - clear the domain_name and last_ip_addr fields of hosts
        Note: records are not deleted
    - quit team
    - delete private messages sent and received
    - delete forum posts, subscriptions, and forum prefs
    - delete profile and associated images
- server: compile fix


svn path=/trunk/boinc/; revision=23006
2011-02-08 21:38:16 +00:00
David Anderson 020a4d4ed1 - user web: in RSS item for private message, don't say anything
about the message (sender, title, or content)
- user web: don't send an RSS item for a thread with no posts (i.e., hidden)
- client simulator: support global_prefs_override.xml

svn path=/trunk/boinc/; revision=22545
2010-10-17 20:12:14 +00:00
David Anderson f3a382154b - web: fix XSS vulnerability
svn path=/trunk/boinc/; revision=22470
2010-10-07 17:11:15 +00:00
David Anderson 82c80f73be - web: bug fix
svn path=/trunk/boinc/; revision=22379
2010-09-16 19:01:14 +00:00
David Anderson 9ed4f892b8 - web: make some strings translatable, fixes #1006, from Simek
svn path=/trunk/boinc/; revision=22316
2010-09-06 13:31:18 +00:00
David Anderson 4ab335eb49 - user web: make a bunch of strings translatable (from Nicolas)
svn path=/trunk/boinc/; revision=20180
2010-01-16 06:19:19 +00:00
David Anderson ee343cea02 - client: small tweak to work fetch:
if project has crazy DCF, don't automatically request 1 sec;
    only request work if there's a shortfall.
- intermediate checkin for notices stuff

svn path=/trunk/boinc/; revision=20145
2010-01-12 21:53:40 +00:00
David Anderson f10384af43 - client: add <stderr_head> config option;
sends the first rather than last 64KB of stderr to server.
    This doesn't belong here; this choice should come from the server.
    I may take this out later.
- user web: when add a private message, always add a notification

svn path=/trunk/boinc/; revision=20141
2010-01-12 18:39:59 +00:00
David Anderson 5e94337e8e - more code cleanup
svn path=/trunk/boinc/; revision=18487
2009-06-23 17:15:17 +00:00
David Anderson df9547fcf4 - web: code cleanup
svn path=/trunk/boinc/; revision=18486
2009-06-23 17:13:35 +00:00
David Anderson 64bcd9e9e2 svn path=/trunk/boinc/; revision=18484 2009-06-23 16:31:42 +00:00
David Anderson bf93abb67a - web: fix bug in cached user page stuff from 12/29/08
svn path=/trunk/boinc/; revision=17166
2009-02-06 03:40:54 +00:00
Janus B. Kristensen fba6fb51f2 Fixes issue where sending a PM would inadvertedly strip everything that looked like tags from the text before sending it.
svn path=/trunk/boinc/; revision=16689
2008-12-15 17:46:40 +00:00
David Anderson 8ef6d9c756 - web: send only 1 email on team founder transfer request
- web: if no transfer request is pending, say so

svn path=/trunk/boinc/; revision=16664
2008-12-09 22:41:29 +00:00
David Anderson fd3dbc1058 - client: ignore CUDA devices with major versions > 100
(apparently some report 9999)
- web: security changes: sanitize some params; escape some strings

svn path=/trunk/boinc/; revision=16005
2008-09-16 23:06:37 +00:00
David Anderson 9baf78fe5f - web: added copyright and license info to PHP files
svn path=/trunk/boinc/; revision=15758
2008-08-05 22:43:14 +00:00
David Anderson d403a14e42 - web: cleaned up logic of string processing.
There are two aspects:
    1) undoing magic quotes (if it's being used).
        This must be done for all GET and POST string inputs.
        It is now done automatically by get_str() and post_str().
        The places that refer to $_GET and $_POST directly
        must do it themselves using undo_magic_quotes().
    2) Escaping user-supplied strings before using them in DB queries.
        This is done by process_user_text()
        (which should be renamed db_escape_string()).
        The new principle:
        call process_user_text() in the function that does the DB query
        (not at any higher level).


svn path=/trunk/boinc/; revision=15389
2008-06-11 19:36:10 +00:00
David Anderson d764eb5873 - web: clean up stuff related to stripslashes():
1) it's not correct to apply stripslashes() to all form input.
        That should be done only if magic quotes is on.
        I fixed this by adding a function undo_magic_quotes()
        that does the right thing.
    2) There's no reason to strip backslashes from user-supplied text
        (forum titles and bodies, private messages, passwords etc.)
        I'm not sure why this was being done.
        It prevented messages from containing backslashes.

svn path=/trunk/boinc/; revision=15364
2008-06-05 20:32:21 +00:00
David Anderson 348f90574c - web: fixed a couple of references to "global $logged_in_user".
It's $g_logged_in_user.

svn path=/trunk/boinc/; revision=15362
2008-06-05 04:35:21 +00:00
David Anderson 757c41b1fa - web: add RSS feed for notifications
- make_project: disable community-related periodic tasks
    for newly-created projects

svn path=/trunk/boinc/; revision=14468
2008-01-04 22:59:21 +00:00
David Anderson f183b6f47f - web: add general-purpose notification mechanism.
Users can choose whether to get 1 email per notification,
    a daily "digest" email, or no email.
    (All notifications are shown on the Account page).
    Currently used for:
    - Friend requests and confirmations
    - Posts to subscribed threads
    - Private messages

    NOTE: To implement the "daily digest" feature, projects must add
    a periodic task for html/ops/notify.php to config.xml
- web: have project_footer() generate links for
    Account Page and Message Boards as well as Home
    NOTE: projects that want this change
    will have to modify their own project.inc.

svn path=/trunk/boinc/; revision=14447
2007-12-30 22:02:16 +00:00
David Anderson a09e01d10f - web: include private message content in email notification
svn path=/trunk/boinc/; revision=14321
2007-11-29 18:14:56 +00:00
David Anderson 235ea7fdea - web: fix PHP errors, add translations strings
svn path=/trunk/boinc/; revision=14302
2007-11-26 03:05:27 +00:00
David Anderson c1ad7d8df5 - web: reorder and reword Your Account page and Forum prefs page;
rename General Prefs to Computing Prefs;
    rename Forum Prefs to Community Prefs
    add Prefs link if user doesn't have email PM notification
- remove forum low/high rating theshold stuff.
    Message rating was a failed experiment.

svn path=/trunk/boinc/; revision=14300
2007-11-26 00:51:00 +00:00
David Anderson e5c3b749c4 - user web: tweak PM-related text
svn path=/trunk/boinc/; revision=14259
2007-11-19 16:44:24 +00:00
David Anderson 512af1d30e - user web: don't append "/" to URL_BASE.
URL_BASE is assumed to end with a /.
    If you put another /, you end up with // in URLs.
    This leads to a situation where you can have
    one cookie for // and another for / - bad.

    If this causes problems for any projects,
    they should edit their project.inc accordingly

svn path=/trunk/boinc/; revision=14254
2007-11-18 22:42:47 +00:00
David Anderson 28a5f1e897 - user web: init DB in banishment vote page
svn path=/trunk/boinc/; revision=14250
2007-11-18 21:22:11 +00:00
David Anderson 0616e75a02 - user web: update other code to use new-style DB interfaces
svn path=/trunk/boinc/; revision=14164
2007-11-12 22:28:17 +00:00
David Anderson a18dfc55a7 - user web: revise forum code to use new-style DB interface
svn path=/trunk/boinc/; revision=14160
2007-11-12 20:57:15 +00:00