Commit graph

39 commits

Author SHA1 Message Date
Dan McGee
f9eba12312 Ensure users can be deleted when foreign keys are present
This change is necessary to prevent this:
    mysql> delete from Users where ID = 112;
    ERROR 1451 (23000): Cannot delete or update a parent row: a foreign key constraint fails (`aur`.`Packages`, CONSTRAINT `Packages_ibfk_2` FOREIGN KEY (`SubmitterUID`) REFERENCES `Users` (`ID`) ON DELETE NO ACTION)

As a bonus, due to foreign keys, orphaning of packages will be
automatic.

Signed-off-by: Dan McGee <dan@archlinux.org>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-03-04 10:29:14 +01:00
Lukas Fleischer
f961ffd9c7 Add a per-user session limit (fixes FS#12898).
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-02-23 11:17:26 +01:00
Lukas Fleischer
52dfa9ca7c Make persistent cookie timeout configurable via "config.inc" (FS#22994).
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-02-21 18:17:58 +01:00
Loui Chang
7933bbb53f acctfuncs: Make message translatable.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2010-10-09 08:44:26 -04:00
Viktor Leonhardt
9822b2e99b Fixing XSS vulnerability
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2010-10-02 11:51:46 -04:00
Denis
290c436046 Support for storing salted passwords
To upgrade existing databases:

ALTER TABLE Users ADD Salt CHAR(32) NOT NULL DEFAULT '';

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2010-04-17 16:50:24 -04:00
Loui Chang
61d0358162 acctfuncs: Fix some whitespace and formatting.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2010-02-21 08:59:24 -05:00
Loui Chang
610733eafd Remove excess whitespace.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2009-06-25 00:05:44 -04:00
Loui Chang
2ee3276348 Use new conglomerated translation files.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2009-01-19 16:29:45 -05:00
Loui Chang
1529020e79 Get db connection for accounts search results.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-12-31 10:09:04 -05:00
Loui Chang
ae1c424c95 Really make all web paths relative.
I forgot about the forms.

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Signed-off-by: Callan Barrett <wizzomafizzo@gmail.com>
2008-12-22 13:19:56 +09:00
Loui Chang
78c2b5c67f Introduce function include_lang for translations.
This includes only the requested language for each page and
makes top level language include files obsolete.

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-12-21 18:03:27 +09:00
Loui Chang
cfeb080dcd Make all web paths relative.
The site no longer needs to be hosted from the
root of a domain, or virtual host.

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Signed-off-by: Callan Barrett <wizzomafizzo@gmail.com>
2008-12-21 15:24:57 +09:00
Loui Chang
2188d2a4f2 Quell missing argument warning in clear_expired_sessions().
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-12-12 12:08:42 -05:00
Loui Chang
692cc1e953 Make remembered sessions actually save themselves.
Also clean up a notice in index.php

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-11-25 01:31:08 -05:00
Loui Chang
cf2a82fe85 Clear out old expired sessions on log out.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-11-13 15:18:48 -05:00
Andrea Scarpino
2feee92a75 Remember user between sessions.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-07-08 14:06:16 -04:00
Loui Chang
3a42725601 Remove all vim mode lines. Add HACKING file.
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-06-17 01:38:01 -04:00
Callan Barrett
435e2c6c1a Fix logging in from package page
Patch by: BaSh <bash.lnx@gmail.com>

Adds query string to url when logging in

Signed-off-by: Callan Barrett <wizzomafizzo@gmail.com>
2008-06-07 17:33:02 +08:00
Loui Chang
77a2564b9c Fix some string translation problems in acctfuncs
update a few others to new usage

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Signed-off-by: Simo Leone <simo@archlinux.org>
2008-04-03 19:54:50 -05:00
Loui Chang
0e32c8648f Changed valid_passwd() to check for non-empty password instead of good_passwd()
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Signed-off-by: Simo Leone <simo@archlinux.org>
2008-03-23 03:04:16 -05:00
Loui Chang
a5a8895f49 Put login into its own function.
Utilise login form template.
Also cleaned up a couple notices.

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Signed-off-by: Simo Leone <simo@archlinux.org>
2008-03-23 03:04:16 -05:00
Loui Chang
e9de45954a Several functions added to web/lib/acctfuncs.inc Weeere back!
try_login() to login users

valid_username() checks if a new username fits criteria

valid_user() checks if the user exists in the database

good_passwd() only checks for minimum password length for now.
can be later expanded to tell a user to make a stronger password.

valid_passwd() checks if the password for the specified user is correct

user_suspended() checks if the user is suspended (or not)

user_delete() deletes a user (it doesn't orphan PKGs yet though)

user_is_privileged() returns privilege level User (0) TU (2) Dev (3) of
user ID. 0 is used for a regular user for ease in conditionals.

Also:	Enforce proper usernames on account creation or editing
	Fix bug where $SUPPORTED_LANGS needs to be reset on account creation
	Fix bug where an account could be created with an empty passwd
	Display (required) beside password fields on account creation
	Enforce good_passwd() on account creation

	TUs and Devs can edit a user to have a username that doesn't conform to
	the standard valid_username(). This is to allow them to edit old
	accounts without messing up the user name.

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-01-19 23:49:35 -06:00
Loui Chang
c404c278cc Revert "Several functions added to web/lib/acctfuncs.inc"
This has a couple of bugs I just discovered arrgh. We shall return
This reverts commit 5e7e9f1b21d8803c718ac8551f8e0e25709fcd6f.
2008-01-19 23:47:45 -06:00
Loui Chang
6b3e902851 Several functions added to web/lib/acctfuncs.inc
try_login() to login users

valid_username() checks if a new username fits criteria

valid_user() checks if the user exists in the database

good_passwd() only checks for minimum password length for now.
can be later expanded to tell a user to make a stronger password.

valid_passwd() checks if the password for the specified user is correct

user_suspended() checks if the user is suspended (or not)

user_delete() deletes a user

Also:	Enforce proper usernames on account creation
	Fix bug where $SUPPORTED_LANGS needs to be reset on account creation
	Fix bug where an account could be created with an empty passwd
	Display (required) beside password fields on account creation
	Enforce good_passwd() on account creation

Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-01-19 23:47:03 -06:00
Loui Chang
8f7fb2b1cb search_accounts_form() output is put into a template
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2008-01-19 23:46:55 -06:00
pjmattal
452d6b1245 patch from eliott to convert all <? to <?php 2007-09-20 21:46:43 +00:00
swiergot
0b92839bee - Applied a patch from Loui to fix session removal.
- Replaced all occurences of mysql_escape_string()
  with mysql_real_escape_string().
2007-09-20 15:33:04 +00:00
simo
1418738f60 link user search to user packages 2005-11-13 20:11:56 +00:00
simo
6fe2f0e14b Added link to user's packages in profile 2005-10-17 01:24:16 +00:00
pjmattal
c7e4f5c7fa Added Simo's patch for #2579, adding user info page
also modified it slightly so that we no longer look at AURMaintainerUID for maintainer
2005-06-10 04:52:46 +00:00
pjmattal
42c20c3955 fixed bug 2263 2005-02-25 18:43:19 +00:00
eric
a54ca6bfaf started working on package delete support 2005-01-25 22:52:32 +00:00
jchu
28e23308d4 added hashed passwords 2005-01-21 14:50:25 +00:00
eric
6249c40e94 fleshing out the package logic, renamed pkg include files for consistency 2004-06-29 00:56:31 +00:00
eric
1f62f86af5 getting closer to printing package search results - also fixed some XHTML stuff 2004-06-24 19:08:35 +00:00
eric
9c6ec26c32 started working on the pkgsearch 2004-06-24 00:34:20 +00:00
eric
84912ddb2e account adding/editing is working 2004-06-23 00:28:13 +00:00
eric
64db123697 pulled out account functions into separate include file 2004-06-22 14:26:54 +00:00