markzz/aurweb.git/web/template/tu_details.php, branch v2.0.0-rc2aurweb working repositoryhttps://git.markzz.net/markzz/aurweb.git/atom/web/template/tu_details.php?h=v2.0.0-rc22012-10-08T12:08:06ZRefactor TU voters list2012-10-08T12:08:06ZLukas Fleischerarchlinux@cryptocrack.de2012-10-08T12:12:07Zurn:sha1:14b237ac53f13bc99d1f64f2e0cc21cd30b517b0
* Change voters_list() to return an array of voters instead of
generating HTML code in the library call.
* Change the template to generate HTML code for the list of voters
instead of displaying the library's return value.
* Use HTML lists.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Avoid use of "<b>"/"</b>"2012-09-24T10:23:05ZLukas Fleischerarchlinux@cryptocrack.de2012-09-21T08:42:17Zurn:sha1:d56a88897bcaa9d552d1d2b90c33b7c6e29e330a
* Use "<label>"/"</label>" for form labels.
* Use "<strong>"/"</strong>" for important text.
* Use "<h4>"/"</h4>" for headings.
* Drop "<b>"/"</b>" everywhere else.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Use echo shortcut syntax2012-09-24T10:23:04ZLukas Fleischerarchlinux@cryptocrack.de2012-09-21T06:57:29Zurn:sha1:6102759b7cb9fd23f4e7fa5f12137334ff30a410
Replace all occurrences of "<?php echo" and "<?php print" by "<?=" to
reduce noise in templates.
Note that as of PHP 5.4.0, "<?=" is always available and no longer
requires "short_open_tag" to be set.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Use virtual path feature for links2012-07-15T20:44:51ZLukas Fleischerarchlinux@cryptocrack.de2012-07-13T23:24:59Zurn:sha1:2425f963f8ad45292c217914b5fee1ed18104c26
Use virtual paths in links (e.g. link to "/packages/" instead of
"/packages.php" etc.) if the virtual path feature is enabled.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Merge branch 'maint'2012-07-14T20:52:04ZLukas Fleischerarchlinux@cryptocrack.de2012-07-14T20:47:04Zurn:sha1:f3ce74c714e3460bb3e3e786f626e397d3139062
Conflicts:
web/html/account.php
web/html/addvote.php
web/html/pkgsubmit.php
web/lib/acctfuncs.inc.php
web/template/actions_form.php
web/template/pkg_comment_form.php
web/template/pkg_comments.php
web/template/pkg_details.php
web/template/pkg_search_results.php
web/template/tu_details.php
Overhaul trusted user proposal page to match archweb2012-07-06T09:26:26Zcanyonknightcanyonknight@gmail.com2012-05-23T17:49:43Zurn:sha1:af8f60fe7fab642dff85658acc2b560cc0ed6f20
* Change all boxes and other CSS to match archweb
* General fixups in XHTML formatting
* Change results table to match color scheme everywhere else
Signed-off-by: canyonknight <canyonknight@gmail.com>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Remove all traces of "pgboxtitle"2012-07-06T09:25:58ZLukas Fleischerarchlinux@cryptocrack.de2012-05-23T17:33:06Zurn:sha1:f90d56937697ad3709fa15bdf3526f679d84ef60
Using a div container to format heading is ridiculous. Use "<h2></h2>"
instead.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Signed-off-by: canyonknight <canyonknight@gmail.com>
Use sane date format strings everywhere2012-07-06T09:25:50ZLukas Fleischerarchlinux@cryptocrack.de2012-05-23T17:29:01Zurn:sha1:4a4f26cda6582fd8ca41e185a73429708966116e
We fixed this for the fields displayed on the package details page in
commit b5fffe9a02cd4fd3b7da66e403f02eea89c8fcad. This should fix the
remaining ones.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Signed-off-by: canyonknight <canyonknight@gmail.com>
Implement token system to fix CSRF vulnerabilities2012-06-24T08:59:23Zcanyonknightcanyonknight@gmail.com2012-06-23T18:40:11Zurn:sha1:2c93f0a98f0f6380fd07ea17fd16afa2c6e4925b
Specially crafted pages can force authenticated users to unknowingly perform
actions on the AUR website despite being on an attacker's website. This
cross-site request forgery (CSRF) vulnerability applies to all POST data on
the AUR.
Implement a token system using a double submit cookie. Have a hidden form
value on every page containing POST forms. Use the newly added check_token() to
verify the token sent via POST matches the "AURSID" cookie value. Random
nature of the token limits potential for CSRF.
Signed-off-by: canyonknight <canyonknight@gmail.com>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Remove a boatload of inline table styles2011-10-24T15:57:52ZDan McGeedan@archlinux.org2011-10-21T21:03:39Zurn:sha1:8dc7b37909887dbeabc58cb22a33f6e0fb038bcf
Replacing with CSS styles where appropriate. A previously unused CSS
style is tweaked in the stylesheet to match most of what was done via
non-CSS styling.
Signed-off-by: Dan McGee <dan@archlinux.org>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>