markzz/aurweb.git/web/html/tu.php, branch v2.2.0

tu.php: Fix page showing a user hasn't voted when they have

2012-10-10T15:22:22Z

An ended vote details page will report a user hasn't voted even when they have. This is a result of faulty logic that only checks if a user has voted if the vote is still running. Regression with commit c15441762c6f6ab4438eaf2854c0ee3146a98b30 Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

Use echo shortcut syntax

2012-09-24T10:23:04Z

Replace all occurrences of "

Use virtual path feature for links

2012-07-15T20:44:51Z

Use virtual paths in links (e.g. link to "/packages/" instead of "/packages.php" etc.) if the virtual path feature is enabled. Signed-off-by: Lukas Fleischer

Merge branch 'maint'

2012-07-14T20:52:04Z

Conflicts: web/html/account.php web/html/addvote.php web/html/pkgsubmit.php web/lib/acctfuncs.inc.php web/template/actions_form.php web/template/pkg_comment_form.php web/template/pkg_comments.php web/template/pkg_details.php web/template/pkg_search_results.php web/template/tu_details.php

tu.php: Fix PHP notice for "hasvoted" variable

2012-07-11T17:26:30Z

Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

Pull out DB code from trusted user page

2012-07-06T09:27:04Z

* Move DB code in tu.php and tu.php and tu_list.php to new functions in accfuncs.inc.php * Centralization of DB code important in a future transition to PDO interface Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

Overhaul trusted user proposal page to match archweb

2012-07-06T09:26:26Z

* Change all boxes and other CSS to match archweb * General fixups in XHTML formatting * Change results table to match color scheme everywhere else Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

Be consistent in PHP logical operator usage

2012-07-06T09:25:45Z

A mix of logical operator styles are currently in use. The predominant style uses "&&" and "||" instead of "and" and "or", respectively. This inconsistency is minor, but is easily avoided. Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

Implement token system to fix CSRF vulnerabilities

2012-06-24T08:59:23Z

Specially crafted pages can force authenticated users to unknowingly perform actions on the AUR website despite being on an attacker's website. This cross-site request forgery (CSRF) vulnerability applies to all POST data on the AUR. Implement a token system using a double submit cookie. Have a hidden form value on every page containing POST forms. Use the newly added check_token() to verify the token sent via POST matches the "AURSID" cookie value. Random nature of the token limits potential for CSRF. Signed-off-by: canyonknight Signed-off-by: Lukas Fleischer

Set the title in the Trusted User page

2011-12-17T13:53:56Z

Signed-off-by: Lukas Fleischer