Commit Graph

21 Commits

Author SHA1 Message Date
David Anderson 02adbc4d49 - web: remove all references to the PHP "session" mechanism,
which added only confusion.
    Implement login directly, using cookies.
- All cookie setting/clearing now goes through two functions,
    send_cookie() and clear_cookie().
    These deal with path and expiry
    (e.g. if you want to have different language or forum settings
    on two projects on the same server, that now works).

svn path=/trunk/boinc/; revision=14735
2008-02-13 19:02:44 +00:00
David Anderson ee4e3fba01 - user web: Add BoincDb::escape_string(),
and have boinc_real_escape_string 
    call it rather than mysql_real_escape_string(),
    to ensure that a DB connection exists
    (you need one to call mysql_real_escape_string()).
- some additional conversion to BoincDb-based classes

svn path=/trunk/boinc/; revision=13977
2007-10-27 20:38:12 +00:00
David Anderson 7302f02544 - user web: added new framework for DB access from PHP.
Here's how things should eventually be:
    - inc/db_conn.inc defines DbConn, a PHP class representing
        a connection to a database with
        various generic operations (update, insert etc.).
        DbConn prepends the DB name to table names,
        so you don't have to select a DB;
        this means you can access multiple databases
        (e.g. BOINC and Bossa) and use persistent connections.
        ALL MYSQL-SPECIFIC CODE WILL EVENTUALLY BE HERE.
    - inc/boinc_db.inc defines classes BoincUser, BoincTeam etc.,
        representing the various BOINC DB tables.
        All access to the DB should use these classes.

    When you use this framework, no initialization calls are needed.
    db.inc is deprecated and should eventually be removed.

    I changed get_logged_in_user()
    and all team-related code to use this framework.
- user web: show team founder link to "management functions"
    even if they're not currently a member;
    allow team founder to perform all operations even if not a member.
- turned on E_ALL error checking,
    and fixed a bunch of warnings
    and a couple of bugs ($team, not team)

- database: update schema/constraints for team fulltext search
- user web: forgot to change Serbia and Montenegro to Serbia

svn path=/trunk/boinc/; revision=13968
2007-10-26 21:14:35 +00:00
Rytis Slatkevičius 2678dcc331 User web: fix XSS vulnerability in team join/quit/lookup code.
svn path=/trunk/boinc/; revision=13450
2007-08-24 15:41:01 +00:00
David Anderson c2edcd489e - sort team-lookup results by avg credit desc
html/user/
    team_lookup.php

svn path=/trunk/boinc/; revision=12685
2007-05-18 05:13:57 +00:00
David Anderson 02bb061b6d *** empty log message ***
svn path=/trunk/boinc/; revision=11117
2006-09-06 20:56:55 +00:00
David Anderson 92409fdb82 team lookup XML
svn path=/trunk/boinc/; revision=9242
2006-01-16 06:04:16 +00:00
David Anderson 2c1bf9fb82 team lookup web RPC
svn path=/trunk/boinc/; revision=9209
2006-01-10 23:21:23 +00:00
Janus B. Kristensen 61e9ef2aba Team search is substring search instead of prefix search.
svn path=/trunk/boinc/; revision=8865
2005-11-16 09:14:49 +00:00
David Anderson 43a21e6efd *** empty log message ***
svn path=/trunk/boinc/; revision=4618
2004-11-21 18:56:30 +00:00
David Anderson 5edfed8bf4 *** empty log message ***
svn path=/trunk/boinc/; revision=4004
2004-08-06 12:12:26 +00:00
David Anderson 11fda1b929 *** empty log message ***
svn path=/trunk/boinc/; revision=3923
2004-07-21 21:50:25 +00:00
David Anderson 68039a57e2 *** empty log message ***
svn path=/trunk/boinc/; revision=3513
2004-06-09 00:12:22 +00:00
David Anderson 2deee53456 *** empty log message ***
svn path=/trunk/boinc/; revision=3367
2004-05-11 22:49:23 +00:00
Karl Chen 545a56d5c8 directory structure change
svn path=/trunk/boinc/; revision=2938
2004-02-02 23:34:39 +00:00
David Anderson 39bc2da38d admin account creation
svn path=/trunk/boinc/; revision=2171
2003-08-22 05:36:25 +00:00
David Anderson dca71c294c host merging
svn path=/trunk/boinc/; revision=1086
2003-03-21 04:38:55 +00:00
David Anderson f98c7f0644 user web
svn path=/trunk/boinc/; revision=1081
2003-03-19 21:01:32 +00:00
David Anderson 72a41ff39a PHP session mechanism
svn path=/trunk/boinc/; revision=681
2002-12-04 19:14:00 +00:00
Barry Luong 2ec5515b93 Changed home page to a php file to check for cookies, added expanatory text on front page and on team pages
svn path=/trunk/boinc/; revision=294
2002-08-12 20:16:55 +00:00
Barry Luong bf9b213f18 added team stuff like viewing emails of team members
svn path=/trunk/boinc/; revision=273
2002-08-07 18:56:55 +00:00