Commit Graph

6 Commits

Author SHA1 Message Date
David Anderson bbaff5d2da - web: remove DBNAME hack, which allowed users to see the DB name
(not a big deal, but bad form).
    Fixes #1028

svn path=/trunk/boinc/; revision=22748
2010-11-25 05:54:09 +00:00
David Anderson b817b8ed7a - admin web: changed protection scheme as follows:
- default: script can be run from command line;
        to run from web you need to be logged in as a particular user.
        (in addition to .htaccess protection).
    - if include $cli_only at start of script:
        can only be run from the command line.
    - if include $skip_auth_ops at start of script:
        can run from web without being logged in
        (this is set ONLY in login_action.php)
- admin web: added $cli_only = true to a bunch of scripts


svn path=/trunk/boinc/; revision=19230
2009-10-02 18:32:40 +00:00
David Anderson 0f9cda3ea3 - admin web: finished the above.
Got rid of auth_ops_cmdline() (not needed).
    auth_ops() is now called in util_ops.inc;
    every script in html/ops/ must include util_ops.inc.

Note: for existing projects, the admin web interface
    will now show "access denied".
    Projects must think about what access control policy they want,
    and specify it in project.inc


svn path=/trunk/boinc/; revision=19053
2009-09-15 18:14:37 +00:00
David Anderson 07a853d73a - Manager: change terms for STD, LTD
- web: change script that locks old threads to exempt team forums

svn path=/trunk/boinc/; revision=17121
2009-02-02 23:12:35 +00:00
David Anderson b9d70d1681 - autolock.php: add --ndays option; change default to 90 days
- web: added support for KHTML and CSS 3 border radius
    (from Simek; fixes #803)

svn path=/trunk/boinc/; revision=16745
2008-12-27 00:11:27 +00:00
David Anderson 8c7d6dc489 - web: added ops/autolock.php script;
locks threads not modified in last 60 days

svn path=/trunk/boinc/; revision=16704
2008-12-16 23:59:04 +00:00