(in config.xml) to include DB name, user, and password.
- back end: add read-only replica info to SCHED_CONFIG,
so that C++ programs can use the replica
(currently only PHP code can use it)
- db_dump: use the read-only DB replica if it exists.
svn path=/trunk/boinc/; revision=22958
There are two aspects:
1) undoing magic quotes (if it's being used).
This must be done for all GET and POST string inputs.
It is now done automatically by get_str() and post_str().
The places that refer to $_GET and $_POST directly
must do it themselves using undo_magic_quotes().
2) Escaping user-supplied strings before using them in DB queries.
This is done by process_user_text()
(which should be renamed db_escape_string()).
The new principle:
call process_user_text() in the function that does the DB query
(not at any higher level).
svn path=/trunk/boinc/; revision=15389
1) it's not correct to apply stripslashes() to all form input.
That should be done only if magic quotes is on.
I fixed this by adding a function undo_magic_quotes()
that does the right thing.
2) There's no reason to strip backslashes from user-supplied text
(forum titles and bodies, private messages, passwords etc.)
I'm not sure why this was being done.
It prevented messages from containing backslashes.
svn path=/trunk/boinc/; revision=15364
add a function show_button() to display links as buttons
with hover-based explanation.
This should be used whenever clicking on something
performs an action, rather than just going to a new page
(sometimes the boundary is fuzzy)
- user web: fixed bug when send private message by user name
svn path=/trunk/boinc/; revision=14015
and have boinc_real_escape_string
call it rather than mysql_real_escape_string(),
to ensure that a DB connection exists
(you need one to call mysql_real_escape_string()).
- some additional conversion to BoincDb-based classes
svn path=/trunk/boinc/; revision=13977
live in a different database (and/or server) than the BOINC tables.
Also eliminated the need to call a DB init function.
This involved:
1) adding <bossa_db_host> etc. entries to config.xml
2) prefixing DB name to table name in all Bossa queries
(this is needed if Bossa DB is on same server as BOINC DB,
since we're using persistent connections)
- user web: added Montenegro, and changed Serbia and Montenegro to Serbia
(requires DB update to make latter change in existing records)
svn path=/trunk/boinc/; revision=13962
Make a single function that creates teams
and cleanses arguments.
- API: don't include config.h in parse.h.
This file is included from apps
(indirectly, via graphics_api.h)
so it shouldn't assume that config.h exists
svn path=/trunk/boinc/; revision=13212
David Anderson