Commit Graph

8 Commits (6ca7f1e2f3536cc2713944d70264cf01d135f1c8)

Author SHA1 Message Date
Dries Buytaert 1f0a87f4e7 Over the last 2 days I redid and reorganized an afwul lot of code and
made quite a lot of additions.   The most remarkable addition is the
diary server, which I slapped together in less then 40 minutes.   Most
of the other changes are however `unvisible' for the user but add much
value to a better maintainability from a developer's objective.  Like
always, I fixed quite a number of small bugs that creeped into the code
so we should have a bigger, better and more stable drop.org.

Unfortunatly, some theme update _are_ required:


REQUIRED THEME UPDATES:
=======================

* use format_username() where usernames are used
* use format_date() where timestamps/dates are used
* use format_email() where e-mail addresses are displayed
* use format_url() where url are displayed
* replace 'formatTimestamp' with format_date
* replace 'morelink_*' with 'display_morelink'

[most of these functions are in function.inc or template.inc]

___PLEASE___ (<- this should get your attention ;) update your themes
as soon as possible - it only takes 30 min. to get in sync with the
other themes.  Don't start whining about the fact you don't know what
to change ... either eat the source cookie, or ask me to elaborate on
a few changes.  Just let me know what's puzzling you and I'll try to
help you out!


TODO LIST FOR NEXT WEEK
=======================
* Add checks for max. text length in textarea's?  Is there an HMTL
  attribute for this or ...?
* Comment moderation + mojo
* Edit/admin user accounts: block, delete, change permissions, ...
* E-mail password, change password, change e-mail address -> extra
  checks and routines to validate such `special' changes.
* Input checking - input filter: bad words, html tags, ...
2000-09-11 07:45:22 +00:00
Dries Buytaert 9a0689a9cf * Added extra PHP variables to .htaccess as discussed earlier this week. 2000-06-22 09:14:16 +00:00
Dries Buytaert 467817f922 * Enhancement: protect the themes/-directory (and subdirectory) from
prying eyes.
2000-06-05 16:10:47 +00:00
natrak a1082cdb9a Changing the httpd conf so the sessions are stored longer and use DROPID as the cookie name :) 2000-06-03 09:20:45 +00:00
Dries Buytaert fbfb8281fb * The CVS directories (automatically created by the CVS repository) can no
longer be accessed from the web.  Let's keep lurking eyes out. ;)
* I'm still idling (except for these kind of tidbits) until Natrak commited
  the new user system.  *evil grin*
2000-06-01 13:33:19 +00:00
Dries Buytaert fd13be20cf sorry - small typoe 2000-05-29 09:46:35 +00:00
Dries Buytaert ff18c8e1a4 Fixed a security flaw:
.inc files can be read from the web including `config.inc' which contains
the account information (login, password) to the MySQL database.  Apache
has now been setup to deny access to all *.inc files from the web.
2000-05-29 09:46:03 +00:00
Dries Buytaert 9bd920debd * Added the foundations to create customized error pages.
http://beta.drop.org/foobar.php
  (The customized error pages need to be beautified.)
2000-05-28 09:23:56 +00:00