markzz/aurweb.git/web/html/packages.php, branch v2.0.0-rc1

Use echo shortcut syntax

2012-09-24T10:23:04Z

Replace all occurrences of "

Fix category selection

2012-09-18T14:09:30Z

Add a package ID parameter to pkg_change_category() instead of relying on the "ID" or "N" GET parameters. Signed-off-by: Lukas Fleischer

Do not set GET parameters in the routing framework

2012-09-18T12:05:11Z

Setting GET parameters manually is bad style and causes some strange side effects when using virtual URLs and mkurl(). Signed-off-by: Lukas Fleischer

Merge branch 'maint'

2012-07-14T20:52:04Z

Conflicts: web/html/account.php web/html/addvote.php web/html/pkgsubmit.php web/lib/acctfuncs.inc.php web/template/actions_form.php web/template/pkg_comment_form.php web/template/pkg_comments.php web/template/pkg_details.php web/template/pkg_search_results.php web/template/tu_details.php

Implement token system to fix CSRF vulnerabilities

2012-06-24T08:59:23Z

Specially crafted pages can force authenticated users to unknowingly perform actions on the AUR website despite being on an attacker's website. This cross-site request forgery (CSRF) vulnerability applies to all POST data on the AUR. Implement a token system using a double submit cookie. Have a hidden form value on every page containing POST forms. Use the newly added check_token() to verify the token sent via POST matches the "AURSID" cookie value. Random nature of the token limits potential for CSRF. Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

web/html/packages.php: Remove duplicate code

2012-05-06T10:47:19Z

Retrieve the package ID early and merge the if-branches calling package_details(). Signed-off-by: Lukas Fleischer

Support canonical links to packages

2012-03-24T09:34:35Z

This is more user-friendly than supporting package IDs only and can be used as a basis to support direct links to AUR packages in places where links are computer-produced (e.g. Wiki templates). Addresses FS#21600 and FS#28839. Signed-off-by: Lukas Fleischer

Use 'true' instead of 'True' everywhere

2011-08-11T14:17:09Z

Signed-off-by: Dan McGee Signed-off-by: Lukas Fleischer

Allow for merging deleted packages into existing ones

2011-08-11T14:17:07Z

Merge all comments and votes of deleted packages into another package if the "Merge with" field is used. Duplicate votes (votes from a user who already voted on the target package or voted on more than one of the deleted packages) are discarded. Signed-off-by: Lukas Fleischer

rename .inc files to .inc.php and adjust imports and references

2011-06-22T13:15:04Z

Lukas: Add note to "UPGRADING". Signed-off-by: Lukas Fleischer