markzz/aurweb.git/web/html/packages.php, branch v2.2.1

Retrieve package details after package actions are processed

2013-04-19T22:22:53Z

Fixes FS#34508 Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

Return 404 error page if invalid package ID is used

2013-03-21T21:38:49Z

We already display the 404 error page if someone tries to access an invalid package via virtual URLs ("/packages/nonexistent"). Add the same check to "web/html/packages.php" to make sure the same error is shown if a user requests package details of a nonexistent package ID via legacy URLs ("/packages.php?ID=-1"). Signed-off-by: Lukas Fleischer

Add description meta-element to package pages

2013-01-19T11:18:13Z

Implements FS#33294 Signed-off-by: Lukas Fleischer

Split package flagging and unflagging into separate functions

2012-12-07T22:24:11Z

Currently, package flagging and unflagging takes place within the pkg_flag() function. A bool is set to true or false depending on the action. Create new pkg_unflag() function with sole purpose of unflagging and keep pkg_flag() in place. This split will be useful in the overhaul of the notification system. Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

Use echo shortcut syntax

2012-09-24T10:23:04Z

Replace all occurrences of "

Fix category selection

2012-09-18T14:09:30Z

Add a package ID parameter to pkg_change_category() instead of relying on the "ID" or "N" GET parameters. Signed-off-by: Lukas Fleischer

Do not set GET parameters in the routing framework

2012-09-18T12:05:11Z

Setting GET parameters manually is bad style and causes some strange side effects when using virtual URLs and mkurl(). Signed-off-by: Lukas Fleischer

Merge branch 'maint'

2012-07-14T20:52:04Z

Conflicts: web/html/account.php web/html/addvote.php web/html/pkgsubmit.php web/lib/acctfuncs.inc.php web/template/actions_form.php web/template/pkg_comment_form.php web/template/pkg_comments.php web/template/pkg_details.php web/template/pkg_search_results.php web/template/tu_details.php

Implement token system to fix CSRF vulnerabilities

2012-06-24T08:59:23Z

Specially crafted pages can force authenticated users to unknowingly perform actions on the AUR website despite being on an attacker's website. This cross-site request forgery (CSRF) vulnerability applies to all POST data on the AUR. Implement a token system using a double submit cookie. Have a hidden form value on every page containing POST forms. Use the newly added check_token() to verify the token sent via POST matches the "AURSID" cookie value. Random nature of the token limits potential for CSRF. Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

web/html/packages.php: Remove duplicate code

2012-05-06T10:47:19Z

Retrieve the package ID early and merge the if-branches calling package_details(). Signed-off-by: Lukas Fleischer