markzz/aurweb.git/web/template, branch v2.3.0

Re-add CRSF tokens to most package actions

2013-08-27T00:27:19Z

We fixed all known CRSF vulnerabilities in commit 2c93f0a (Implement token system to fix CSRF vulnerabilities, 2012-06-23). c349cb2 (Add virtual path support for package actions, 2012-07-17) partly reverted this by injecting a valid CRSF token when virtual paths are in use. This patch allows for keeping the virtual path feature, while reintroducing POST forms and CRSF tokens. Actions like package flagging, votes and notifications are no longer prone to CRSF (see FS#35437 for details). Signed-off-by: Lukas Fleischer

pkg_details: Convert most action links to forms

2013-08-27T00:10:13Z

Use forms and POST instead of GET for following actions: * Flagging/Unflagging a package out-of-date * Voting for a package and removing votes * Enabling/Disabling notifications Use CSS to make the submit buttons of these forms look like links. Signed-off-by: Lukas Fleischer

tu_details.php: Avoid division by zero

2013-08-26T16:02:37Z

Do not divide by zero if the number of active TUs is unknown. Signed-off-by: Lukas Fleischer

Move "Past Votes" navigation to "Past Votes" box

2013-08-26T15:53:24Z

These are navigation links and do not belong to the action box. Signed-off-by: Lukas Fleischer

Add "Last Votes by TU" list

2013-08-26T15:34:31Z

This shows a list of all Trusted Users and the vote ID of the last proposal each of the TUs voted on. This list is sorted by vote ID. Signed-off-by: Lukas Fleischer

tu_details.php: Display vote result

2013-08-22T15:48:18Z

This adds an field that indicates whether the vote was accepted or rejected, based on the rules specified in the TU Bylaws. Signed-off-by: Lukas Fleischer

tu_details.php: Avoid inline computations

2013-08-22T15:48:18Z

Compute the total number of votes and the participation at the beginning of the template instead of doing it inside the template itself. Signed-off-by: Lukas Fleischer

Show participation in vote details

2013-08-22T15:47:53Z

This is calculated by dividing the sum of all votes by the total number of TUs (where the number of TUs is measured when the vote starts). Signed-off-by: Lukas Fleischer

Allow for setting an account's inactivity status

2013-08-22T15:43:13Z

This adds a field to the users table and corresponding fields to the account edit and display forms that allow for setting an (in-)activity status. This might turn out to be useful if a user is on vacation and can not respond to update/orphan/deletion requests. Signed-off-by: Lukas Fleischer

Enforce e-mail validation during registration

2013-03-19T13:03:34Z

Remove the password field from the account creation form and always send a password reset request via e-mail instead. This ensures that only users with valid e-mail addresses are able to login. Signed-off-by: Lukas Fleischer