Commit graph

43 commits

Author SHA1 Message Date
Lukas Fleischer
eef5353bde Remove "New Package Notify" option from user account settings.
Do this in preparation for the upcoming notification script removal.

Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-04-13 12:22:28 +02:00
Lukas Fleischer
7f9e498e48 Fix broken XHTML.
Fix a lot of invalid XHTML in the templates and actions. There might
still be some legacy code left, but this should cover most of it.

Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-03-11 19:00:50 +01:00
Dan McGee
80401c6afc More PHP Notice undefined fixups
Signed-off-by: Dan McGee <dan@archlinux.org>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-03-10 18:15:59 +01:00
Dan McGee
cdc01130cf Fix PHP notices in account pages
Signed-off-by: Dan McGee <dan@archlinux.org>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-03-04 10:29:17 +01:00
Dan McGee
f9eba12312 Ensure users can be deleted when foreign keys are present
This change is necessary to prevent this:
    mysql> delete from Users where ID = 112;
    ERROR 1451 (23000): Cannot delete or update a parent row: a foreign key constraint fails (`aur`.`Packages`, CONSTRAINT `Packages_ibfk_2` FOREIGN KEY (`SubmitterUID`) REFERENCES `Users` (`ID`) ON DELETE NO ACTION)

As a bonus, due to foreign keys, orphaning of packages will be
automatic.

Signed-off-by: Dan McGee <dan@archlinux.org>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-03-04 10:29:14 +01:00
Lukas Fleischer
f961ffd9c7 Add a per-user session limit (fixes FS#12898).
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-02-23 11:17:26 +01:00
Lukas Fleischer
52dfa9ca7c Make persistent cookie timeout configurable via "config.inc" (FS#22994).
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-02-21 18:17:58 +01:00
Loui Chang
7933bbb53f acctfuncs: Make message translatable.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2010-10-09 08:44:26 -04:00
Viktor Leonhardt
9822b2e99b Fixing XSS vulnerability
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2010-10-02 11:51:46 -04:00
Denis
290c436046 Support for storing salted passwords
To upgrade existing databases:

ALTER TABLE Users ADD Salt CHAR(32) NOT NULL DEFAULT '';

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2010-04-17 16:50:24 -04:00
Loui Chang
61d0358162 acctfuncs: Fix some whitespace and formatting.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2010-02-21 08:59:24 -05:00
Loui Chang
610733eafd Remove excess whitespace.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2009-06-25 00:05:44 -04:00
Loui Chang
2ee3276348 Use new conglomerated translation files.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2009-01-19 16:29:45 -05:00
Loui Chang
1529020e79 Get db connection for accounts search results.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-12-31 10:09:04 -05:00
Loui Chang
ae1c424c95 Really make all web paths relative.
I forgot about the forms.

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Signed-off-by: Callan Barrett <wizzomafizzo@gmail.com>
2008-12-22 13:19:56 +09:00
Loui Chang
78c2b5c67f Introduce function include_lang for translations.
This includes only the requested language for each page and
makes top level language include files obsolete.

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-12-21 18:03:27 +09:00
Loui Chang
cfeb080dcd Make all web paths relative.
The site no longer needs to be hosted from the
root of a domain, or virtual host.

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Signed-off-by: Callan Barrett <wizzomafizzo@gmail.com>
2008-12-21 15:24:57 +09:00
Loui Chang
2188d2a4f2 Quell missing argument warning in clear_expired_sessions().
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-12-12 12:08:42 -05:00
Loui Chang
692cc1e953 Make remembered sessions actually save themselves.
Also clean up a notice in index.php

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-11-25 01:31:08 -05:00
Loui Chang
cf2a82fe85 Clear out old expired sessions on log out.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-11-13 15:18:48 -05:00
Andrea Scarpino
2feee92a75 Remember user between sessions.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-07-08 14:06:16 -04:00
Loui Chang
3a42725601 Remove all vim mode lines. Add HACKING file.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-06-17 01:38:01 -04:00
Callan Barrett
435e2c6c1a Fix logging in from package page
Patch by: BaSh <bash.lnx@gmail.com>

Adds query string to url when logging in

Signed-off-by: Callan Barrett <wizzomafizzo@gmail.com>
2008-06-07 17:33:02 +08:00
Loui Chang
77a2564b9c Fix some string translation problems in acctfuncs
update a few others to new usage

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Signed-off-by: Simo Leone <simo@archlinux.org>
2008-04-03 19:54:50 -05:00
Loui Chang
0e32c8648f Changed valid_passwd() to check for non-empty password instead of good_passwd()
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Signed-off-by: Simo Leone <simo@archlinux.org>
2008-03-23 03:04:16 -05:00
Loui Chang
a5a8895f49 Put login into its own function.
Utilise login form template.
Also cleaned up a couple notices.

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Signed-off-by: Simo Leone <simo@archlinux.org>
2008-03-23 03:04:16 -05:00
Loui Chang
e9de45954a Several functions added to web/lib/acctfuncs.inc Weeere back!
try_login() to login users

valid_username() checks if a new username fits criteria

valid_user() checks if the user exists in the database

good_passwd() only checks for minimum password length for now.
can be later expanded to tell a user to make a stronger password.

valid_passwd() checks if the password for the specified user is correct

user_suspended() checks if the user is suspended (or not)

user_delete() deletes a user (it doesn't orphan PKGs yet though)

user_is_privileged() returns privilege level User (0) TU (2) Dev (3) of
user ID. 0 is used for a regular user for ease in conditionals.

Also:	Enforce proper usernames on account creation or editing
	Fix bug where $SUPPORTED_LANGS needs to be reset on account creation
	Fix bug where an account could be created with an empty passwd
	Display (required) beside password fields on account creation
	Enforce good_passwd() on account creation

	TUs and Devs can edit a user to have a username that doesn't conform to
	the standard valid_username(). This is to allow them to edit old
	accounts without messing up the user name.

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-01-19 23:49:35 -06:00
Loui Chang
c404c278cc Revert "Several functions added to web/lib/acctfuncs.inc"
This has a couple of bugs I just discovered arrgh. We shall return
This reverts commit 5e7e9f1b21d8803c718ac8551f8e0e25709fcd6f.
2008-01-19 23:47:45 -06:00
Loui Chang
6b3e902851 Several functions added to web/lib/acctfuncs.inc
try_login() to login users

valid_username() checks if a new username fits criteria

valid_user() checks if the user exists in the database

good_passwd() only checks for minimum password length for now.
can be later expanded to tell a user to make a stronger password.

valid_passwd() checks if the password for the specified user is correct

user_suspended() checks if the user is suspended (or not)

user_delete() deletes a user

Also:	Enforce proper usernames on account creation
	Fix bug where $SUPPORTED_LANGS needs to be reset on account creation
	Fix bug where an account could be created with an empty passwd
	Display (required) beside password fields on account creation
	Enforce good_passwd() on account creation

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-01-19 23:47:03 -06:00
Loui Chang
8f7fb2b1cb search_accounts_form() output is put into a template
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-01-19 23:46:55 -06:00
pjmattal
452d6b1245 patch from eliott to convert all <? to <?php 2007-09-20 21:46:43 +00:00
swiergot
0b92839bee - Applied a patch from Loui to fix session removal.
- Replaced all occurences of mysql_escape_string()
  with mysql_real_escape_string().
2007-09-20 15:33:04 +00:00
simo
1418738f60 link user search to user packages 2005-11-13 20:11:56 +00:00
simo
6fe2f0e14b Added link to user's packages in profile 2005-10-17 01:24:16 +00:00
pjmattal
c7e4f5c7fa Added Simo's patch for #2579, adding user info page
also modified it slightly so that we no longer look at AURMaintainerUID for maintainer
2005-06-10 04:52:46 +00:00
pjmattal
42c20c3955 fixed bug 2263 2005-02-25 18:43:19 +00:00
eric
a54ca6bfaf started working on package delete support 2005-01-25 22:52:32 +00:00
jchu
28e23308d4 added hashed passwords 2005-01-21 14:50:25 +00:00
eric
6249c40e94 fleshing out the package logic, renamed pkg include files for consistency 2004-06-29 00:56:31 +00:00
eric
1f62f86af5 getting closer to printing package search results - also fixed some XHTML stuff 2004-06-24 19:08:35 +00:00
eric
9c6ec26c32 started working on the pkgsearch 2004-06-24 00:34:20 +00:00
eric
84912ddb2e account adding/editing is working 2004-06-23 00:28:13 +00:00
eric
64db123697 pulled out account functions into separate include file 2004-06-22 14:26:54 +00:00