markzz/aurweb.git/web/html, branch v2.3.0

Move package comment check to packages.php

2013-08-27T09:35:26Z

Checking whether to add a comment is something that really does not belong to a function named display_package_details(). Signed-off-by: Lukas Fleischer

Use POST-Redirect-GET for most package actions

2013-08-27T09:25:14Z

Avoid showing a POST data resubmission dialog and simply redirect to the package page if a package action completed successfully. Signed-off-by: Lukas Fleischer

Add boolean return values to several pkg_*() functions

2013-08-27T09:19:45Z

Change the return values of following functions to return both error/success and an error/success message: * pkg_flag() * pkg_unflag() * pkg_adopt() * pkg_vote() * pkg_delete() * pkg_notify() * pkg_delete_comment() * pkg_change_category() Signed-off-by: Lukas Fleischer

Pick sane default registration language

2013-08-27T00:42:19Z

Instead of defaulting to Català (which is the first entry in the list of supported languages), choose whatever language the unregistered user is browsing the AUR in. Fixes FS#34825. Suggested-by: canyonknight Signed-off-by: Lukas Fleischer

Re-add CRSF tokens to most package actions

2013-08-27T00:27:19Z

We fixed all known CRSF vulnerabilities in commit 2c93f0a (Implement token system to fix CSRF vulnerabilities, 2012-06-23). c349cb2 (Add virtual path support for package actions, 2012-07-17) partly reverted this by injecting a valid CRSF token when virtual paths are in use. This patch allows for keeping the virtual path feature, while reintroducing POST forms and CRSF tokens. Actions like package flagging, votes and notifications are no longer prone to CRSF (see FS#35437 for details). Signed-off-by: Lukas Fleischer

pkg_details: Convert most action links to forms

2013-08-27T00:10:13Z

Use forms and POST instead of GET for following actions: * Flagging/Unflagging a package out-of-date * Voting for a package and removing votes * Enabling/Disabling notifications Use CSS to make the submit buttons of these forms look like links. Signed-off-by: Lukas Fleischer

Move "Past Votes" navigation to "Past Votes" box

2013-08-26T15:53:24Z

These are navigation links and do not belong to the action box. Signed-off-by: Lukas Fleischer

Add "Last Votes by TU" list

2013-08-26T15:34:31Z

This shows a list of all Trusted Users and the vote ID of the last proposal each of the TUs voted on. This list is sorted by vote ID. Signed-off-by: Lukas Fleischer

Add a vote type to the TU proposal form

2013-08-22T15:48:18Z

There are only four valid reasons for starting a TU vote, so instead of letting the user choose a vote length, let her pick a reason and set vote length and quorum based on that selection. Signed-off-by: Lukas Fleischer

Allow for setting an account's inactivity status

2013-08-22T15:43:13Z

This adds a field to the users table and corresponding fields to the account edit and display forms that allow for setting an (in-)activity status. This might turn out to be useful if a user is on vacation and can not respond to update/orphan/deletion requests. Signed-off-by: Lukas Fleischer