History | View | Annotate | Download (45 kB)
This commit was manufactured by cvs2svn to create tag 'milestone_3'.
- some bugfixes
- session changes (this checkin is producing a lot of errors and render the cvs useless. Those following cvs should be able to grasp what to do, others... please wait for other changes being checked in)
Use cookie_domain when setting session cookies
Logout banned users, they are unable to use the normal logout link
System always showed 'you are banned permanently' even for temporary bans
- fix some tiny glitches
Does this work any better ... let's see ...
Minor updates
Tidy up var assignment, cast integers in queries
sigh
Delete login key upon logout ... knew I forgot something from my original code
Remove use of serialize for session cookie data, no need for it anymore ... at least I can't think of one.
Session key implementation.
- sorry for this change paul. :( But it is needed for a memberlist change... hopefully not breaking anything for you. The only change is the check for the ids explicitly set to false to allow ids with "0".
- some cross-db related changes- putting active bots array into cache
- test slightly modified topic tracking code- some bugfixes
forgot to commit this for the img change
- add ability to grab single image params from user::img
Problem with the permission caching that only showed in some race condtion
- added updated coding guidelines- introduced is_registered and is_bot flags for correct determinition of guest/registered/bot users- changed bot code to act on useragent || ip
- fixed custom profile field get/store- changed tz lang array to hold more descriptive timezones (no more tz+-13, dst is a seperate option)- fixed bugs after jabber queue processing (data being escaped differently)
- Documentation related changes- added resend activation email dialog- fixed issue in session code- log failed/successful admin re-authentication/login- fixed simple forum dropdown box (used in mcp and posting)
- and my second attempt
It's really hard to get a commit right the first time. Really\! It is\!
Show a useful error message if a language file is missing
fix admin_session "bug"
BBCode enabled profile fields, removed field_name from profile fields, fixed some uninitialised variable issues, some small conversion issues
- change registration page language on-the-fly- added download function to functions_compress as well as tiny bugfixes- added local_name and author to iso.txt file
- bugfixes- default sort options for posts too- adjusted format_date to remove the (time intensive) preg_ calls- temporary style.php code.
- remove group informations from session queries
...see if i am able to break the cookie tracking system this time. :D- made some session code updates- added new acl function (might be helpful later)
- fix $user->img (once assigned alt/title tag not able to be overwritten because of static variable)
- cur_page no longer in use- fix confirm box (since it used cur_page) :)
- more updates, mostly bugfixes to the bbcode parser- changed current_user in sessions (please review)- give more flexibility to style authors in regard to the pagination elements- profile fields updates (included a sample constuct into viewtopic_body.html - have to be documented extensivly)...
- re-enable polls (user is now able to decide if users are able to change votes if this feature is enabled within the given forum)
my turn to break the forum (and at least pm's are no longer working - will not last long). HARRRR
oopsie, session ip was missing
This is a mass commit ... expect trouble! Changes made here are primarily to how login is handled, schema changes necessary!
- fix huge memory hog. :) (how dumb i was... hmm...)
- fixing some issues with the confirm screen - merging our (the devs) approaches (more fail-safe now)- fixing some small issues...
Rejiggle "board disabled" system to allow admin/mods access, eliminate duplication and "fudges" ... hopefully I've not overlooked something fundamental ...
replacing two preg_replace statements with one preg_match_all statement...
- added folder_moved image- new feature: bookmark topics- fixed post details link- added confirmation screen to cookie deletion
- private messages - not finished yet.
- added delete cookies link- fixed global announcement links in viewforum- do not display redirects in link forums as posts in forum overview
session updates, please review
minor adjustments
Minor alteration
cleanup... :P
splitted language files
- put consoring and smilie processing into functions (we use them all over the place) for better changing and consistency.- changed docs/AUTHORS to reflect the recent code re-use in functions_messenger.php- pleasing the users a little bit more by using table constants. :D...
Damn users :)
I'll have half a pound of fudge please
Force password change after defined number of days
oopsie in gc
Minor update for image production
custom profile fields.Not finished, committed to let us discuss about the next steps-> BartVB
Alter method for storing imageset data ... I can't see any obvious increase in page gen times but please comment if such a thing does become apparent
Ignore agent check if empty
sessions went on a calorie controlled diet and lost 1000 bytes and still had a tasty lunch and dinner!
Fixed: garbage collection firing of during install (don't even ask me how, but it happened to me)Added: multi-table garbage collection for MySQL 4 for Paul to review :)
Fixed a small typo, and no, I'm not hostage of closet monkeys.
gurgle blurp ... make some more changes, blurp, gurgle, move discover_auth to auth class as acl_get_list method, blurp gurgle blurp
Attempt to make page tracking behave a little better
nah, stuff the * wildcard ... just match partially, should be sufficient I think
Allow wildcard bot matching
Remove need for session_ids for "allowed" bots, dump user_founder/user_active in favour of user_type, new user_type, USER_IGNORE
hmmmm
Let's break lots of things
optionget/optionset updates
Updates mainly for removal of extension + header comment ... moved some aspects of ucp around, further work to be done on these areas ... not commiting search for time being
user option method (get) start
bah, group handling needs some further discussion ... I'm done with it for M-2
The moving of update eliminates it's usefulness ... given the change was done to increase security it wins :)
A fair amount of additional working or semi-working stuff ... template stored db source (when appropriate), switch theme/templates between DB/filesystem (if available), import, upload templates, imagesets, themes (if available ... i.e. no safe mode), etc. still a fair amount of stuff to do but getting there ... take care using this, backup any themes/templates/imagesets before fiddling and let me know of issues
Changes for styling directory layout alterations
escape browser and page info
Allow preview of style for user with appropriate rights ... a "cheat" really
Cope with secondary (per forum) styles, probably other minor things too ... there is a known permissions problem, will work on that soon
Altered method of storage of cached permissions ... primarily for easier sqlite/firebird support. Clear your user_permission fields before re-visiting your forum else you'll see very little! Changed way in which founder status is protected
Fix up display of sigs and bbcode for preview
Add new method ... allow grab of options for all forums ... useful for e.g. when forums where post count is incremented are required
Wasn't stripping slashes from the cookies ... that will account for some of the erroneous mark read, nothing changes issues. Add name="" to image generation ... for "on" event handlers, etc.
Append POST originated forum_id to this->page if present
Changed forum_link_track to forum_flags for storage of additional info [ pruning related ], moved lang selection into DB, other minor changes, still working on admin_prune, per forum styling for posting
Was certainly one problem with it ...
For the time being I want this to stay as addslashes for some cross-db compatibility testing ...
Fixed typos, added isset() to produce less PHP notices and changed addslashes() to the corresponding dbal function
Changes in line with ACL_UNSET ... remember to wipe out all entries in your auth_users and auth_groups tables with auth_setting = 2
Renamed ACL_ constants, altered field names
oopsie, me not think that last checkin was supposed to happen ... at least I hope not :D
Weekly update: MCP templates. Forms renamed to 'main', added mcp_jumpbox.html for easy jumping and mcp_foruminfo.html.Not too happy with HTML though =" templates\subSilver\mcp_forum.html templates\subSilver\mcp_foruminfo.html templates\subSilver\mcp_front.html templates\subSilver\mcp_header.html templates\subSilver\mcp_jumpbox.html templates\subSilver\mcp_move.html templates\subSilver\mcp_post.html templates\subSilver\mcp_viewip.html templates\subSilver\mcp_viewlogs.html
Improve feedback for banned users
Wrong object name
Moved acl_options caching code into acl
Add browser validation
Minor change
Here I am going on about minimising new includes and I go and create one ... probably better off as a seperate include though than adding ~500 lines of code to session.php
Enable per session view online, change layout, potential for links to terms and privacy policy