Dries Buytaert
3005b0990e
- Patch ##239676 by v1nce, pwolanin, mfb: fixed SA-CORE-2009-001: missing validation for hook_user().
2009-09-05 05:45:45 +00:00
Angie Byron
c4a548f64d
#331180 follow-up by pwolanin and mfb: Fix sending of mail.
2009-09-01 17:40:28 +00:00
Dries Buytaert
b4786ff0ee
- Patch #495968 by Frando, moshe weitzman: added drupal_render() cache pattern. Start using it for blocks.
2009-08-31 17:06:10 +00:00
Dries Buytaert
44063e1cf1
- Patch #505214 by pwolanin: make the search module a slightly better framework.
2009-08-29 21:05:16 +00:00
Dries Buytaert
0597c9e48a
- Patch #560746 by dropcube: rename hook_block_list() to hook_block_info() for consistency in the API.
2009-08-29 05:46:04 +00:00
Angie Byron
737bf95499
#562624 by mcjim: Fixed WSOD on admin/config/people.
2009-08-29 04:55:32 +00:00
Dries Buytaert
e87bf71e5f
- Patch #296693 by sun: revert system_admin_menu_block_access().
2009-08-28 06:42:54 +00:00
Dries Buytaert
ee64752e10
- Patch #300993 by dropcube, Dave Reid: user roles and permission API. Great patch.
2009-08-27 20:25:29 +00:00
Dries Buytaert
3f36af04de
- Patch #460320 by catch, fago, Frando: standardized, pluggable entity loading for nodes, users, taxonomies, files and comments.
2009-08-25 21:53:48 +00:00
Angie Byron
2c55219315
#497118 by chx, catch, pwolanin, JoshuaRogers, and Jacob Singh: Remove the function registry. While the hope was that this would result in improved performance for low-end hosts, it comes at the expense of critical development experience problems and less benefit than something like APC. Class registry remains intact to facilitate autoloading.
2009-08-24 00:14:23 +00:00
Angie Byron
e63e85020b
Of all the patches to accidentally commit without a message. :( Rolling back registry rip. Let's try that again.
2009-08-24 00:10:46 +00:00
Angie Byron
4ae238ea57
*** empty log message ***
2009-08-24 00:02:05 +00:00
Angie Byron
e6eb489918
#542658 follow-up by sun: Move action 'tabs' out of local tasks and into local actions.
2009-08-23 01:05:12 +00:00
Angie Byron
36ec189695
#326539 by JohnAlbin, sun, cha0s, ultimateboy, Rob Loach, Damien Tournoud: Convert 'class' attribute to use an array, not a string.
2009-08-22 14:34:23 +00:00
Dries Buytaert
2a123f0ac9
- Patch #549432 by Bohjan, Gábor Hojtsy: create 'people and permissions' section in 'configuration and modules'.
2009-08-21 14:27:47 +00:00
Angie Byron
1595422929
#551080 by Gábor Hojtsy: List non-container items (stuff in the toolbar) on /admin for a complete overview.
2009-08-21 07:59:47 +00:00
Angie Byron
e998857eb8
#516138 by yched, KarenS, quicksketch, bangpound, et al.: CC-FREAKING-K IN CORE! OH YEAH! :D
2009-08-19 13:31:14 +00:00
Angie Byron
b41323642b
#517814 by jmstacey, justinrandell, pwolanin, drewish, Jody Lynn, aaron, dopry, and c960657: Converted File API to stream wrappers, for enhanced private/public file handling, and the ability to reference other storage mechanisms such as s3:// and flicker://.
2009-08-17 19:14:42 +00:00
Dries Buytaert
06fbe8e90c
- Patch #491972 by Berdir, webchick: clean-up of user/profile related hooks and APIs.
2009-08-12 12:36:05 +00:00
Dries Buytaert
ef5c041534
- Patch #538526 by catch, Gábor Hojtsy, yoroy, et al: rename 'User management' to 'People' in the header -- not anywhere else.
2009-08-11 11:47:58 +00:00
Angie Byron
1da6ef52c4
#485974 by pwolanin, Damien Tournoud, mr.baileys: Improved security by limiting the number of allowed login attempts.
2009-08-08 20:52:33 +00:00
Angie Byron
9327932bf2
#382870 by geerlingguy, jmburnz, EclipseGc, JohnAlbin, sun, et al: Update and Polish default node.tpl.php output.
2009-08-06 05:06:00 +00:00
Angie Byron
17e6076807
#433992 by David_Rothstein and Frando: Change #theme_wrapper to #theme_wrappers to allow multiple theme functions to execute on renderable objects.
2009-08-04 06:38:57 +00:00
Angie Byron
a00ddd79ca
#530950 by catch: Replace iss_null() with isset() - small optimization.
2009-08-04 06:19:44 +00:00
Dries Buytaert
d422853504
- Patch #536570 by Gábor Hojtsy: implemented new IA for top-level users.
2009-07-31 19:01:03 +00:00
Dries Buytaert
03f48df4f5
- Patch #517606 by JuliaKM: removed one white space ...
2009-07-28 19:32:33 +00:00
Angie Byron
ef5360ab3c
#525754 by chx: Clean up some trailing whitespace.
2009-07-21 07:27:00 +00:00
Dries Buytaert
5a8452c55b
- Patch #493746 by JohnAlbin, ultimateboy, moshe weitzman: Enhance drupal_attributes() for multiple valued values.
2009-07-15 17:40:18 +00:00
Dries Buytaert
6dc5b5449d
- Patch #491456 by quicksketch, drewish, et al: image effects and actions.
2009-07-12 08:36:35 +00:00
Angie Byron
f6ccf978f6
#488542 by yched: Allow field UI to be attached to any fieldable entity.
2009-07-10 05:58:13 +00:00
Angie Byron
976336e2f8
#372766 by jhodgdon: Clarify documentation for user_save().
2009-07-10 05:43:15 +00:00
Dries Buytaert
ed65c9b89f
- Patch #510740 by agentrickard: rename user_admin_perm() to user_admin_permission().
2009-07-05 18:07:04 +00:00
Dries Buytaert
e4a4b7cc7e
- Patch #506976 by catch: rename hook_perm to hook_permission.
2009-07-05 18:00:11 +00:00
Angie Byron
8f66b459bf
#504678 follow-up by catch: Fix notice in PHP 5.3.
2009-07-02 15:07:37 +00:00
Dries Buytaert
5962cc5ab2
- Patch #477944 by DamZ: more streamlining and clean-up of session handling code.
2009-07-01 12:47:30 +00:00
Dries Buytaert
00fc298163
- Patch #497612 by Moshe Weitzman et al: harden user login by correctly using the form API. Complete commit now. Thank you, thank you.
2009-06-30 11:32:08 +00:00
Angie Byron
3bf1c719f5
#460706 by wulff and c960657: Don't show surrounding fieldset on user registration form when only one profile category exists.
2009-06-28 12:52:57 +00:00
Dries Buytaert
f96c141f5a
- Patch #409750 by yched et al: overhaul and extend node build modes.
2009-06-22 09:10:07 +00:00
Dries Buytaert
daedf71b7c
- Patch #391412 by JamesAn et al: move contact form, post, and user settings below Site configuration.
2009-06-13 20:40:09 +00:00
Dries Buytaert
28b2f098be
- Patch #334283 by Damien Tournoud, andypost, Freso et al: add context to t() to help deal with ambigious strings (and improved the locale APIs a bit). Example: May is both a short month name as a long month name in English, but not necessarily in other languages.
2009-06-08 05:00:12 +00:00
Dries Buytaert
deed842de5
- Patch #481802 by catch, leisa: update user permission help text.
2009-06-04 11:25:03 +00:00
Dries Buytaert
f63727d176
- Patch #479966 by Berdir: document and fix hook_user_categories.
2009-06-03 07:28:28 +00:00
Dries Buytaert
e474fbbd6c
- Patch #477944 by Damien Tournoud: fix and streamline page cache and session handling.
2009-06-02 06:58:17 +00:00
Dries Buytaert
6e947c65a9
- Patch #461298 by catch: move node_load_multiple() special casing into user_node_load().
2009-05-30 12:14:27 +00:00
Dries Buytaert
0f4060f377
- Patch #472642 by stella, agentrickard: remove 'implementation of' nominalizations from Docblocks.
2009-05-27 18:34:03 +00:00
Angie Byron
827e278489
#296693 by Damien Tournoud, boombatower, sun, and Xano: Hide parent administrative menu items when user has no access to any of their children.
2009-05-27 02:21:53 +00:00
Dries Buytaert
a98905f5c6
- Patch #471800 by stella: more code style fixes.
2009-05-25 13:42:56 +00:00
Dries Buytaert
76957a25e6
- Patch #470594 by Moshe: convert more pages and blocks to return arrays.
2009-05-25 10:43:54 +00:00
Dries Buytaert
a24a6c2bba
- Patch #471070 by stella: millions of code style fixes.
2009-05-24 17:39:35 +00:00
Angie Byron
ef14b0df89
#61856 by blakehall, Pancho, and jredding: Trim e-mail addresses before validation/submission.
2009-05-22 08:04:40 +00:00
Angie Byron
4bc255ba79
Roll-back of #310467 : Breaks installer requirements check and update.php.
2009-05-21 23:07:16 +00:00
Dries Buytaert
51948a790b
- Patch #468978 by Bohjan: removed user administration description.
2009-05-21 21:10:07 +00:00
Angie Byron
f577c125e8
#196862 by Damien Tournoud, et al: Replace COUNT(*) queries with SELECT 1 ... LIMIT 1 queries when all that's required is a check for whether rows exist.
2009-05-16 15:23:16 +00:00
Dries Buytaert
1778c5cca9
- Patch #310467 by chx, moshe weitzman: made hook_theme slimmer.
2009-05-14 08:23:15 +00:00
Dries Buytaert
417e2fc2bb
- Patch #399248 by deekayen: detect when a signature is too long to prevent SQL errors.
2009-05-12 09:07:18 +00:00
Dries Buytaert
847304a293
- Patch #353069 by Moshe Weitzman, dmitrig01: make drupal_get_form() return unrendered forms.
2009-05-12 08:37:45 +00:00
Dries Buytaert
5f08579bfe
- Patch #240873 by Gábor Hojtsy, sun: block system clean-ups. Thanks for the review sun.
2009-04-30 21:44:20 +00:00
Dries Buytaert
1faa09b1af
- Patch #394594 by Berdir: additional conversion to the new database abstraction layer plus clean-up.
2009-04-30 16:10:10 +00:00
Dries Buytaert
94c3dceeda
- Patch #240873 by Gábor Hojtsy: move custom help settings to blocks. Very exciting.
2009-04-29 08:04:24 +00:00
Dries Buytaert
840be5ba4e
- Patch #444966 by dereine: code style clean-up.
2009-04-26 09:53:50 +00:00
Angie Byron
fb5d44bc2c
#303965 by moshe weitzman and snufkin: Allow data import scripts to set /->is_new programmatically.
2009-04-25 17:52:43 +00:00
Dries Buytaert
e99838fbf4
- Patch #147310 by c960657: added tests for private files, fixed a problem with private files and minor improvements.
2009-04-24 08:16:56 +00:00
Angie Byron
d91848a92a
#368559 by moshe weitzman: Return renderable arrays from profile pages.
2009-04-20 04:41:35 +00:00
Angie Byron
d30a41e791
Roll-back of #333054 ; needs more discussion.
2009-04-20 02:23:17 +00:00
Dries Buytaert
3b4e3d0334
- Patch #437930 by soxofaan: remove tabindex attributes from user_login form.
2009-04-19 20:54:02 +00:00
Dries Buytaert
a85971199d
- Patch #394594 by ksenzee: converted most of the user module code to the new database abstraction layer.
2009-04-13 12:14:57 +00:00
Dries Buytaert
27d7455edb
- Patch #333054 by c960657: page cache should be case sensitive.
2009-04-01 20:00:47 +00:00
Angie Byron
eecab1083a
#369964 by yched and bjaspan: Refactor field validation and error reporting. Field API no longer coupled to Form API. Hooray.
2009-03-26 13:31:28 +00:00
Dries Buytaert
32076b4d32
- Patch #273137 by pwolanin, David_Rothstein, chx, et al: split navigation to user and administration menu. Will require follow-up patches.
2009-03-20 19:18:11 +00:00
Angie Byron
aae42b23b7
#347250 follow-up by c960657: Fix OpenID failure introduced by user_load_multiple().
2009-03-17 02:07:42 +00:00
Angie Byron
72b4442af4
#347250 follow-up by yched: Re-order fields load to before the general module load.
2009-03-15 13:50:45 +00:00
Angie Byron
3b30509599
#347250 by catch, drewish, and Berdir: Add function for loading multiple users in one request.
2009-03-14 23:01:38 +00:00
Dries Buytaert
b46e90ad36
- Patch #322344 by merlinofchaos, Frando, catch, sun: form improvements from Views.
2009-03-14 20:13:27 +00:00
Angie Byron
665c9fdc2c
Roll-back of users -> user table name change in #330983 : Broken pgsql is no fun.
2009-02-26 07:30:29 +00:00
Dries Buytaert
802f7aa03d
- Patch #374568 by chx: remove useless JOIN from permission query.
2009-02-19 12:09:30 +00:00
Angie Byron
ff9e842730
#330983 by recidive and boombatower: Rename users/users_roles tables to user/user_role for consistency.
2009-02-18 15:19:57 +00:00
Angie Byron
962a7783d3
#371327 by quicksketch: Fix user picture rendering (with fixed tests).
2009-02-09 07:36:15 +00:00
Dries Buytaert
29c8e40e91
- Patch #355236 by Frando: refactor drupal_render() theming.
2009-02-03 18:55:32 +00:00
Dries Buytaert
607e9626d5
- Patch #361683by Barry, Yves, Karen, Moshe Weitzman, David Strauss, floriant, chx, David Rothstein: initial field API patch. More work to be done, but ... oh my!
2009-02-03 17:30:13 +00:00
Dries Buytaert
938c7c07a3
- Patch #360605 by Berdir: made CVS HEAD compatible with PHP5.3.
2009-01-22 12:46:07 +00:00
Angie Byron
a8c0d79fae
#357591 by sun: Add watchdog calls for user cancel operations.
2009-01-22 04:43:32 +00:00
Dries Buytaert
2c57079558
- Patch #362003 by Steven Jones: minor language massaging.
2009-01-21 16:42:50 +00:00
Dries Buytaert
daf4acf2be
- Patch #195976 by mcarbone: made error message more accurate and more informative.
2009-01-21 14:37:35 +00:00
Angie Byron
0ec23b9b43
#357403 by drewish: Make user pictures managed files.
2009-01-20 03:10:00 +00:00
Dries Buytaert
d20e457121
- Patch #201122 by c960657, Moshe Weitzman: never write anonymous sessions, unless something has been written to . This is an important performance improvements -- as long as you use modules that use carefully. It might be good to report some analytics about this in the performance settings page so administrators can see if there is a 'broken' module.
2009-01-19 10:46:52 +00:00
Angie Byron
424cf1b182
#358021 by drewish: Remove unnecessary indirection of hook_user_X code.
2009-01-13 06:27:01 +00:00
Angie Byron
9a32ca468a
#8 by sun and most of #drupal: Users can now cancel their accounts. Fixing the 8th issue, almost 8 years later, on January 8th, after working 8 days full-time on it. GREAT WORK :D
2009-01-08 08:42:13 +00:00
Dries Buytaert
6690a4ec4c
- Patch #353480 by dereine, justinrandell: remove from hook_comment().
2009-01-04 16:10:48 +00:00
Dries Buytaert
92a8adea65
- Patch #352470 by scor: fixed typos and grammar in comments.
2008-12-30 16:43:20 +00:00
Dries Buytaert
a04728577f
- Patch #352054 by catch: convert calls to db_placeholders() in static queries.
2008-12-29 16:03:57 +00:00
Dries Buytaert
31e791b9a4
- Patch #109588 by fago, cdale: make hook_user use instead of arg(1).
2008-12-23 14:18:31 +00:00
Dries Buytaert
0c63d9e24f
- Patch #349504 by keith.smith: clean up sentence spacing in code comments.
2008-12-20 18:24:41 +00:00
Dries Buytaert
1415f6b743
- Patch #330090 by j.somers: avoid duouble escaping.
2008-12-20 03:53:18 +00:00
Dries Buytaert
574a2e47ee
- Patch #345866 by alexanderpas, justinrandell, Dave Reid: remove from hook_block().
2008-12-16 23:57:33 +00:00
Dries Buytaert
9fe9144ae7
- Patch #169937 by Heine, drumm: user_save should not regenerate the session even when the current user is not the edited user.
2008-12-16 21:09:55 +00:00
Dries Buytaert
bc719d0c55
- Patch #337820 by Dave Reid, Damien Tournoud, et al: rename menu path 'logout' to 'user/logout'. For real now.
2008-11-29 09:33:51 +00:00
Angie Byron
d7f706f291
Reverting #337820 once more, as it causes mysterious test failures.
2008-11-27 07:07:01 +00:00
Dries Buytaert
c01f85bc37
- Patch #337820 by Dave Reid: rename menu path logout to user/logout.
2008-11-25 13:16:39 +00:00
Dries Buytaert
96dc47665e
- Patch #280934 by pwolanin, swentel, et al: harden session regeneration. It took a while, but it comes with tests and extra features now.
2008-11-24 06:12:46 +00:00
Angie Byron
bd9554952c
Reverting #337820 which causes menu tests to fail, unbeknownst to testing bot. Hrm...
2008-11-24 04:22:02 +00:00
Angie Byron
251a761eaa
#337820 by Dave Reid: Rename menu path 'logout' to 'user/logout' for consistency.
2008-11-23 21:17:48 +00:00
Angie Byron
53f53b6db5
#11077 by mfb, KarenS, macgirvin, and jjkd: Can you say Daylight Savings Time? I bet you didn't think Drupal ever would! :)
2008-11-20 06:56:17 +00:00
Angie Byron
b4e9d52b3b
#107051 by Dave Reid, gdevlugt, and vladimir.dolgopolov: Remove duplicate names from Who's Online block.
2008-11-19 15:10:56 +00:00
Dries Buytaert
0056cf3abb
- Rollback of patch #334671 by Steve Dondley: still tests failing.
2008-11-18 15:06:47 +00:00
Dries Buytaert
3390569295
- Patch #334671 by Steve Dondley: users cannot be assigned to roles or removed from them -- comes with tests. Yay.
2008-11-18 14:59:16 +00:00
Dries Buytaert
97fdc49191
- Patch #334030 by justinrandell: replace module_list with module_implements when calling a hook.
2008-11-15 11:45:04 +00:00
Dries Buytaert
59ece2e39d
- Patch #325665 by chx, Damien Tournoud, justinrandell et al: improved the cache registry lookups.
2008-11-11 22:39:59 +00:00
Angie Byron
0762f60073
#315798 by Rob Loach, mfer, Grugnog2, and sun: Add weighting to drupal_add_js().
2008-11-10 05:23:01 +00:00
Dries Buytaert
54a03ca95d
- Patch #329646 by Damien Tournoud: properly reset user_access().
2008-11-05 14:12:34 +00:00
Dries Buytaert
df2cf40d2c
- Patch #266358 by Rob Loach, mfer: use array in drupal_add_css().
2008-10-26 18:06:39 +00:00
Dries Buytaert
b4ab2ac2ce
- Patch #199870 by alpritt et al: beter password strength checker. Really cool.
2008-10-19 20:55:07 +00:00
Angie Byron
f76acb2d9d
#282405 by Damien Tournoud, lilou, Dave Reid: Enforce coding standard on elseif.
2008-10-12 04:30:09 +00:00
Angie Byron
d59ba41f65
#313213 by maartenvg, Gábor Hojtsy: Add a 'title' attribute for permissions to allow for localization of permission names
2008-10-09 15:15:55 +00:00
Angie Byron
f841d1a764
#142995 by dopry, drewish, quicksketch, jpetso, and flobruit: Adding hook_file_X(). This is an enabler of lots and lots of goodies. See CHANGELOG.txt for more. Awesome work, guys. :)
2008-10-09 00:02:29 +00:00
Dries Buytaert
026af5df34
- Patch #310212 by justinrandell, catch, et all: killed in _user hook, as well as two small kittens.
2008-10-06 11:30:12 +00:00
Dries Buytaert
19329548f9
- Patch #305236 by crell: made OpenID work again. We need tests for this.
2008-09-21 15:08:39 +00:00
Angie Byron
a3bb66e4e8
#259623 by dopry and Damien Tournoud: Convert includes/requires to use absolute paths.
2008-09-20 20:22:25 +00:00
Dries Buytaert
7f29b14277
- Patch #305645 by pwolanin: ['REQUEST_TIME'] -> REQUEST_TIME. Improved developer experience.
2008-09-17 07:11:59 +00:00
Dries Buytaert
312b97e9e9
- Patch #253702 by Damien Tournoud et al: further clean-up of the session handling code.
2008-09-15 15:18:59 +00:00
Angie Byron
e7ac5c58fd
#308434 by drewish, dopry, quicksketch, aaron, jhedstrom, and friends: Massive file.inc cleanup aaaaaand... tests! Yay! :D
2008-09-15 09:28:50 +00:00
Angie Byron
763b11c8c7
#259679 by Damien Tournoud: Fix user/X/edit tab on user tracker page.
2008-09-08 15:44:57 +00:00
Dries Buytaert
e5b0e5f76c
- Patch #302763 by Dave Reid, Rob Loach: replace time() by ['REQUEST_TIME'] as per Rasmus' suggestion. Removed drupal_referrer() for consistency.
2008-09-06 08:36:22 +00:00
Dries Buytaert
69e6f411a9
- Patch #225450 by Crell, chx, bjaspan, catch, swentel, recidive et al: next generation database layer for Drupal 7.
2008-08-21 19:36:39 +00:00
Dries Buytaert
0b9e7c07e8
- Patch #265899 by mfb: uri_brief mail token did not support https URLs.
2008-08-17 10:46:30 +00:00
Dries Buytaert
dbdda5471e
- Patch #237381 by beeradb, flobruit: renamed () parameter from user_save() to .
2008-08-14 19:37:22 +00:00
Dries Buytaert
9db1abf5aa
- Patch #165642 by Damien Tournoud et al: fixed SQL error.
2008-08-08 19:48:43 +00:00
Dries Buytaert
e1dd1e3482
- Patch #218189 by Arancaytar, fago, et al: invoke hook_user before deleting user from database.
2008-08-02 20:08:24 +00:00
Dries Buytaert
57fe5103da
- Patch #252013 by Eaton, pwolanin, Susurrus et al: drupal_render() now printes #markup, not #value.
2008-07-16 21:59:29 +00:00
Dries Buytaert
32afb32935
- Patch #266488 by Damien Tournoud: cleanup for user_validate_name().
2008-06-27 07:25:11 +00:00
Dries Buytaert
6e2358b232
- Patch #270045 by drewish, Susurrus: clean up return values.
2008-06-18 03:36:24 +00:00
Dries Buytaert
c529e4afbe
- Patch #101543 by webchick: document all constants.
2008-05-26 17:12:55 +00:00
Dries Buytaert
21000956a2
- Patch #259463 by dmitrig01: notification e-mail for pending user registrations had blank subject line.
2008-05-17 17:02:56 +00:00
Dries Buytaert
b9f1018ea4
- Patch #73874 by pwolanin: normalize the permissions table and wrote simpletests for the (new) permission handling. At last.
2008-05-07 19:34:24 +00:00
Dries Buytaert
2e18cb8924
- Patch #221964 by chx, dopry, webernet, moshe, webchick, justinrandall, flobruit
...
et al. Can you say 'registry'? Drupal now maintains an internal registry of
all functions or classes in the system, allowing it to lazy-load code files as
needed (reducing the amount of code that must be parsed on each request). The
list of included files is cached per menu callback for subsequent loading by
the menu router. This way, a given page request will have all the code it needs
but little else, minimizing time spent parsing unneeded code.
2008-05-06 12:18:54 +00:00
Dries Buytaert
d1bc889242
- Patch #227830 by JohnAlbin: link attributes added to l() incorrectly.
2008-05-02 15:11:05 +00:00
Dries Buytaert
21576021bf
- Patch #249546 by pwolanin: rip menu access inheritance -- was already committed to D6.
2008-04-23 20:01:56 +00:00
Dries Buytaert
9feab1f2ea
- Patch #228594 by catch and flobruit: some code clean-up.
2008-04-19 17:10:50 +00:00
Dries Buytaert
56d2664a90
- Patch #245115 by kkaefer, John Morahan, JohnAlbin et al: after a long discussion we've decided to make the concatenation operator consistent with the other operators.
2008-04-14 17:48:46 +00:00
Dries Buytaert
79b016d915
- Patch #216072 by recidive, David Rothstein, ptalindstrom et al: switched from numeric block IDs to string IDs.
...
The short explanation is that Drupal uses a lot of numeric deltas in the block system; blocks are identified by the 'module' and the 'delta'. In early Drupal, delta was numeric, but somewhere along the line it was changed to be possibly a string. In modern Drupal, block overrides are easily done via block-MODULE-DELTA.tpl.php. The primary motivation to switch to string IDs everywhere is to make these deltas friendlier to themers:
block-user-0.tpl.php --> block-user-navigation.tpl.php
block-user-1.tpl.php --> block-user-login.tpl.php
You get the picture.
2008-04-10 10:28:23 +00:00
Dries Buytaert
1dc36aa3d3
- Patch #244597 by drumm: remove login form text as this can now be accomplished using hook form_alter.
2008-04-10 01:35:31 +00:00
Dries Buytaert
08aa23227e
- Patch #228594 by catch et al: removed access rule functionality from core.
...
The access rules capability of user module has been stripped down to a
simple method for blocking IP addresses. E-mail and username restrictions
are now available in a contributed module. IP address range blocking is
no longer supported and should be done at the server level.
This patch is partly motiviated by the fact that at the usability testing,
it frequently came up that users went to "access rules" when trying to
configure their site settings.
2008-04-08 22:50:55 +00:00
Dries Buytaert
ed59911f9e
- Patch #29706 by pwolanin, solardiz, et al: more secure password hashing.
...
This is a big and important patch for Drupal's security. We are switching
to much stronger password hashes that are also compatible with the Portable
PHP password hashing framework.
The new password hashes defeat a number of attacks, including:
- The ability to try candidate passwords against multiple hashes at once.
- The ability to use pre-hashed lists of candidate passwords.
- The ability to determine whether two users have the same (or different)
password without actually having to guess one of the passwords.
Also implemented a pluggable password hashing API (similar to how an alternate
cache mechanism can be used) to allow developers to readily substitute an
alternative hashing and authentication scheme.
Thanks all!
2008-03-31 20:50:05 +00:00
Dries Buytaert
e89ead0ae2
- Patch #226501 by webchick: permission descriptions were used incorrectly at admin/user/user.
2008-03-19 07:35:15 +00:00
Dries Buytaert
584f3e886a
- Patch #30984 by webchick, keith.smith, kkaefer, Crell et al: provide descriptions for permissions on the permission administration page.
2008-02-20 13:46:43 +00:00
Dries Buytaert
38e0ab1f62
- Patch #181578 by Moshe: removed distributed authentication code from user_save(). Factored the relevant code out to a separate function.
2008-02-18 19:34:08 +00:00
Dries Buytaert
60688d68db
- Patch #181411 by Moshe: use schema API for saving and updating user records.
2008-02-18 16:53:37 +00:00
Dries Buytaert
b8a1eab1fb
- Patch #210131 by dvessel, catch, John, et al: updated jQuery library.
2008-02-06 19:38:28 +00:00
Gábor Hojtsy
c306d56a74
#216858 by jvandyk, moshe weitzman: fix plain wrong and misleading user module phpdoc blocks
2008-02-03 19:23:01 +00:00
Gábor Hojtsy
7747e1e8e0
#215335 by jvandyk: fix user_login_submit() phpdoc
2008-01-29 18:56:56 +00:00
Gábor Hojtsy
a44341a822
#208888 by jvandyk: set access time when externally authenticated user first logs in
2008-01-27 20:00:46 +00:00
Gábor Hojtsy
ba5468e508
#119038 by ximo, Pancho: user role editing usability: include disabled checkbox for authenticated role
2008-01-22 07:51:56 +00:00
Gábor Hojtsy
5ecb68806b
#210211 by chx, theborg: removing the broken admin user search, which would provide the same as the public facing user search anyway
2008-01-16 22:54:41 +00:00
Gábor Hojtsy
b17cd3b613
#18954 by kkaefer, Pancho: built-in role names were not translated and some user_roles() call cleanups
2008-01-10 20:22:57 +00:00
Gábor Hojtsy
a816feaddf
#206078 by Pancho, traxer: order roles with system roles first (usability)
2008-01-10 16:00:44 +00:00
Gábor Hojtsy
c5aa55b38e
#204705 by pwolanin: abort user_save on SQL errors, to avoid data corruption
2008-01-10 15:03:53 +00:00
Gábor Hojtsy
b78a990270
#207569 by ScoutBaker (minor code style): clean up @see usage in phpdoc blocks
2008-01-08 10:35:43 +00:00
Dries Buytaert
a88c178b91
- Patch #204221 by webernet: code style fixes.
2007-12-28 12:02:52 +00:00
Gábor Hojtsy
79d927f7aa
#152497 by bjaspan, with more docs from myself: user_external_login() was not updated to latest login process
2007-12-27 16:00:09 +00:00
Gábor Hojtsy
34afaf8f28
#176748 follow up by pwolanin: fix bad breadcrumbs and missing/wrong titles
2007-12-27 14:03:37 +00:00
Gábor Hojtsy
a8e1fb4351
#191914 by chx: admin check was missing from menu user_register_access()
2007-12-27 12:21:58 +00:00
Dries Buytaert
2a1e980cdd
- Patch #203509 by pwolanin, chx, cwgordon7 et al: fixed menu inheritenace.
2007-12-26 19:02:24 +00:00
Gábor Hojtsy
ac4c8f7ab0
#203274 by Pasqualle: remove excessive witespace from our code (minor)
2007-12-22 23:24:26 +00:00
Gábor Hojtsy
374a452738
#172993 by drewish, Lynn: remove old user picture even when the newly uploaded one uses a different format
2007-12-20 21:59:17 +00:00
Dries Buytaert
100329ad03
- Patch #201894 by David Rothstein: fixed typo in user output.
2007-12-18 19:20:01 +00:00
Gábor Hojtsy
81ecb970bc
#199387 by Pancho: revert user login/register/request password page titles to 'User account' as it was in Drupal 5, instead of the bugos 'Log in'
2007-12-17 13:46:36 +00:00
Gábor Hojtsy
7bcd7429df
#110474 by dww and keith.smith: passwords are not sent in welcome mails, so do not mislead our users
2007-12-14 18:29:59 +00:00
Gábor Hojtsy
b6532a4fdb
#200069 by keith.smith: new standard for 'more information' links in module help texts, as the handbook we referred to before was renamed
2007-12-14 18:08:50 +00:00
Gábor Hojtsy
7b52f8d52e
#131493 by spatz4000, ChrisKennedy, keith.smith: consistent username field description wording in installer and runtime interface
2007-12-14 16:07:42 +00:00
Gábor Hojtsy
ce3542d8ab
#152497 by JohnAlbin, bdragon, moshe weitzman, chx and myself: several user login tasks, such as session id regeneration were not performed in all cases, so centralize this
2007-12-13 12:53:47 +00:00
Gábor Hojtsy
c6d841c096
#197297 by DanW (as GHOP 17), and keith.smith: clean up lots of help texts, update to drag and drop functionality, drupal.module removal, etc
2007-12-13 09:34:40 +00:00
Gábor Hojtsy
5622bce2d5
#198579 by webernet and hswong3i: a huge set of coding style fixes, including:
...
- whitespaces at end of lines
- indentation
- control structure usage
- whitespace in empty lines
- phpdoc comment formatting
2007-12-08 14:06:23 +00:00
Dries Buytaert
9a96837b89
- Patch #163246 by keith smith, freso, O Govinda, catch, webchick et al: fixed minor spelling issues and fixed spacing issues.
2007-11-26 16:36:44 +00:00
Gábor Hojtsy
045002e25c
#111481 by chx and pwolanin: profile categories may contain slashes, but this was not yet supported by the user object menu loader
2007-11-26 08:15:32 +00:00
Dries Buytaert
a1e5ac031e
- Patch #192110 by profix898: fixed hook_profile_alter API.
2007-11-20 13:44:38 +00:00
Gábor Hojtsy
b0676c8f27
#192692 by jrbeeman and mfer: (security) protect profile category page menu items with the visibility settings already available
2007-11-19 11:24:11 +00:00
Dries Buytaert
8ebc345b9d
- Patch #191914 by chx: you cannot add user/register to a menu. Also removed some whitespace.
2007-11-17 14:25:23 +00:00
Gábor Hojtsy
2d8259c764
#25605 by Rob Loach et al: disallow editing user data of uid 0
2007-11-14 16:01:30 +00:00
Gábor Hojtsy
69da830ced
#171117 by JirkaRybka: set access time for admin created or edited accounts so they are exempt from the spam protection we have for accounts never logged in
2007-11-06 12:20:14 +00:00
Gábor Hojtsy
235621a072
#185209 by ChrisKennedy: only provide picture deletion option if there is an actual user picture present
2007-11-06 08:53:52 +00:00
Gábor Hojtsy
856ae39d35
#186903 by marcingy, Rob Loach and chx: (regression) restore my recent posts functionality in tracker
2007-11-06 08:51:23 +00:00
Gábor Hojtsy
207e6f145f
#184729 by hazexp: remove duplicate wording about the username in mail sent out to new users
2007-11-04 16:02:32 +00:00
Gábor Hojtsy
0d58aae221
#176342 by dmhouse, spatz4000 and Wim Leers: add reset parameter to user_access()
2007-11-04 15:42:52 +00:00
Gábor Hojtsy
8dcb5ab976
#182528 by RobRoy: move drupal_set_message() out of user deletion API function to UI function
2007-10-27 14:01:12 +00:00
Gábor Hojtsy
13f9882979
#179276 by JirkaRybka: (regression) fix profile field sections to order properly by weight.
2007-10-25 10:30:40 +00:00
Gábor Hojtsy
8903cda5ca
#179519 by chx, webchick and Desbeers: fix blog/[uid] to only display posts for that user and also set proper title
2007-10-24 11:17:01 +00:00
Gábor Hojtsy
b94f2716cf
#184867 by deekayen, catch and keith.smith: fix some spelling errors in our source code and messages printed
2007-10-21 18:59:02 +00:00
Gábor Hojtsy
09e2701892
#181088 by fajerstarter, catch and JirkaRybka: rename 'access control' to 'permissions' for usability reasons
2007-10-12 10:41:48 +00:00
Dries Buytaert
0313d80108
- Patch #181284 by killes and chx: performance improvements for user_access().
2007-10-07 19:27:40 +00:00
Gábor Hojtsy
35c0e44330
#179695 by chx: only anonymous users should have permission to visit user/login, so this menu item is automatically hidden when a user is logged in
2007-10-03 13:01:04 +00:00
Gábor Hojtsy
74def328c8
#167284 by Heine and pwolanin: proper field type placeholders in IN() queries, setting a best practice to avoid vulnerabilities
2007-09-27 16:52:00 +00:00
Gábor Hojtsy
310dbd432e
#172765 follow up patch by pwolanin: fix user path access, which was broken by the user module split
2007-09-19 18:00:52 +00:00
Gábor Hojtsy
439942db98
#168261 by mvc: redirect registered users back to the front page if admin approval is required, so their user account page is not directly accessible after registration
2007-09-14 17:38:08 +00:00
Gábor Hojtsy
6bb5c304f3
#174440 by kkaefer: properly translatable filter dropdown elements on user admin page
2007-09-13 09:51:11 +00:00
Gábor Hojtsy
ac7637bc9b
#172773 by numerous contributors: Make the actions interface usable by mere mortals (including rename of actions.module to trigger, but keeping the actions themselfs).
...
Complete previous history of actions module:
- #148410 by jvandyk: added rewrite of the actions module!
- #155986 by Uwe: fixed typos.
- #155828 by Eaton, pwolanin and jvandyk: let actions live even if actions.module is not turned on
2007-09-11 14:50:05 +00:00
Gábor Hojtsy
e3daf88ec7
#166742 by Crell and dvessel: split user module (for performance reasons)
2007-09-10 13:14:38 +00:00
Gábor Hojtsy
ea0f102c21
#174224 by kkaefer: send user notification email after the user object is updated
2007-09-09 20:21:02 +00:00
Gábor Hojtsy
4a347be7ed
#173225 corrective fix: there were two uses of the ip variable, so revert to the original patch
2007-09-08 13:57:22 +00:00
Dries Buytaert
15b52931a2
- Patch #173225 by killes: missing ip_address(). Slightly modified by me.
2007-09-08 08:57:26 +00:00
Gábor Hojtsy
9307321817
#148677 by pwolanin: set active menu item on 403/404 pages (and on the user page)
2007-09-06 12:47:20 +00:00
Dries Buytaert
957997516d
- Patch #172765 by webchick and chx: path 'user' returns 403
2007-09-04 14:37:48 +00:00
Gábor Hojtsy
1e04b134f4
#172453 by webchick: proper default value for user roles (radios need an int, not an array)
2007-09-02 12:46:21 +00:00
Gábor Hojtsy
3d6b273206
#172455 by chx: a notice and missing form API conversions in user module
2007-09-02 12:24:49 +00:00
Gábor Hojtsy
118e91cc40
#155828 by Eaton, pwolanin and jvandyk: let actions live even if actions.module is not turned on
2007-08-29 14:57:50 +00:00
Dries Buytaert
7531f956aa
- Patch #169627 by JirkaRybka: improved logging of mail problems.
2007-08-26 08:00:49 +00:00
Dries Buytaert
5e73b66f3a
- Patch #168028 by dvessler, merlinofchaos, pwolanin et al: both theme functions and templates may need include files. Flush your caches.
2007-08-26 07:46:11 +00:00
Dries Buytaert
74292cd062
- Patch #80951 by killes, yched et al: block caching.
2007-08-19 08:08:45 +00:00
Gábor Hojtsy
8971add849
#163191 follow up patch by hswong3i and pwolanin: use a has_rows flag where we dont need a counter
2007-08-18 20:03:19 +00:00
Gábor Hojtsy
6ecef0ee38
#156796 by webernet, asimmonds and pwolanin: user editing forms cleanup and fixing deletion API remainings
2007-08-16 13:07:31 +00:00
Gábor Hojtsy
c3207e0ec1
#162050 by dvessel: user_comment() now modifies the comment, although hook_comment() was not intended to modify the comment, so we need to pass it in by reference to get modified
2007-08-16 09:32:06 +00:00
Gábor Hojtsy
bc33e002fa
#166688 by pwolanin: user_build_content() needs to have the account passed by reference
2007-08-12 19:25:57 +00:00
Dries Buytaert
c17499b6fe
- Patch #163191 by hswong3i: removed db_num_rows() for compatibility with Oracle and DB2. Also a performance improvement. (Correct version this time.)
2007-08-12 16:12:00 +00:00
Dries Buytaert
b134b023e1
- Patch #163191 by hswong3i: removed db_num_rows() for compatibility with Oracle and DB2. Also a performance improvement.
2007-08-12 15:55:36 +00:00
Gábor Hojtsy
51b0221331
#165358 by John Morahan: do not regenerate the session when the user is saved without a password specified
2007-08-09 10:49:26 +00:00
Dries Buytaert
79d8390f90
- Patch #161510 by dvessel: tplified user.module.
2007-08-02 10:41:26 +00:00
Dries Buytaert
bf7a70f98c
- Patch #156553 by AjK: fixed E_NOTICE
2007-08-02 10:22:45 +00:00
Dries Buytaert
1c55ed7d88
- Patch #162486 by Eaton: user/%user/edit/foo tabs only appear if additional profile categories have been defined.
2007-07-27 13:08:17 +00:00
Gábor Hojtsy
6ea74bfe47
#149092 by Gurpartap Singh slightly modified: Usability: generalize timezone discovery to use on user registration
2007-07-25 17:35:47 +00:00
Gábor Hojtsy
61b225ee8b
161496 by meba: display message about successful login, if registration verification is not required
2007-07-25 14:49:55 +00:00
Gábor Hojtsy
64def7cb3e
#100641 by kkaefer, ChrisKennedy and RobRoy: change 'Submit' buttons to 'Save' to compliy with the desktop metaphor and actually tell what the button does ('we know it submits the form, but what it does?')
2007-07-16 12:43:06 +00:00
Dries Buytaert
83654b3dd9
- Patch #159332 by jakeg: can't save roles on user_save().
2007-07-14 15:21:38 +00:00
Gábor Hojtsy
e4c7378ef3
#158289 by merlinofchaos: Remove paragraph tag from drupal_set_message()
2007-07-11 19:59:11 +00:00
Gábor Hojtsy
806d0a3dee
#156910 by asimmonds: fix code indentation problems introduced with new code in this development cycle; only whitespace changes
2007-07-05 08:48:58 +00:00
Gábor Hojtsy
92a32a8676
#156812 by tangent: coding style issues corrected in user.module, identified with coder module
2007-07-04 21:42:39 +00:00
Dries Buytaert
ee701b3336
- Patch #155986 by Uwe: fixed typos.
2007-07-02 14:41:37 +00:00
Gábor Hojtsy
8caf4da7f1
#82499 by Jose A Reyero and a little bit from myself: send emails localized in the language needed in specific situations, and centralize mail composing operations with hook_mail()
2007-07-01 19:49:19 +00:00
Dries Buytaert
e59852d336
- Rollback of patch #147723 : delete API. Talked to Steven and Gabor and we
...
unanimously agreed to rollback the deletion API. We all support the
features this patch added, yet not its actual design and implementation.
After some talk, we decided that it would be better for Drupal -- in the
long term -- not to go with a solution that isn't 100%. We also recognize
that in the short term, this patch would have been useful addition. So
let's figure out how we can implement this properly in D7.
2007-07-01 17:41:16 +00:00
Gábor Hojtsy
9e6ef53c2c
#154064 by pwolanin: get hook_help() up to speed to menu changes, allowing router path based lookups, and also full path argument lookup with a passed argument array
2007-06-30 19:46:58 +00:00
Dries Buytaert
15bf4681c2
- Patch #130108 by webchick: link to newly created account in admin panel.
2007-06-29 18:19:25 +00:00
Dries Buytaert
2348e7de6f
- Patch #148410 by jvandyk: added rewrite of the actions module!
...
This is a very important patch, but one that is merely an enabler.
Hopefully we'll see more people submitting "action patches" in the
near future.
Thanks for the hard work and persistence, John. *If* you decide
to update the Drupal Pro Development book to Drupal 6, make sure
to add a chapter on actions. ;)
2007-06-29 18:06:51 +00:00
Dries Buytaert
8dd8b0c223
- Patch #118730 by kaerast, kkaefer and webchick: subltle but important documentation improvement
2007-06-29 11:18:40 +00:00
Dries Buytaert
2bf7c1c0e3
- Patch #147662 by Gordon et al: add new #pre_render callback to drupal_render().
2007-06-28 07:48:41 +00:00
Gábor Hojtsy
cc9f167e49
#154218 by Steven: HTML to text email converter, centralizing email wrapping in Drupal core and providing a solid conversion function for contributed modules
2007-06-26 22:21:08 +00:00
Steven Wittens
7093495f7c
#154046 : Optimize confirm_form syntax for common usage (and fix some $form_state bugs).
2007-06-24 10:09:53 +00:00
Steven Wittens
028c8e6050
#148678 : Fix notices/warnings on invalid paths like 'node/zzz'. (chx/pwolanin/webernet)
2007-06-24 00:38:40 +00:00
Gábor Hojtsy
b1d45297e7
#113983 by damien_vancouver and myself: allow administrators to search users by e-mail too
2007-06-23 21:35:08 +00:00
Gábor Hojtsy
68e7598b87
#152492 by JohnAlbin: clean up global user setting, which is done already
2007-06-23 13:15:49 +00:00
Gábor Hojtsy
1d6be6f0b7
#153372 by bjaspan: fix user login form values and openid interacion
2007-06-23 08:58:31 +00:00
Steven Wittens
569ede574f
#115139 : Add centralized json handler (and send text/javascript content-type header).
2007-06-22 08:46:16 +00:00
Steven Wittens
fe8b35f527
#153781 : Convert all remaining confirm_forms() to deletion api.
2007-06-22 08:32:28 +00:00
Steven Wittens
e7d31327cf
#144397 : Use drupal_render for user profiles and convert to themer-friendly .tpl.php files.
2007-06-21 04:38:41 +00:00
Dries Buytaert
6102d02d21
- Patch #149692 by asimmonds: fixed FAPI breakage.
2007-06-17 11:59:05 +00:00
Dries Buytaert
dbaddb73c3
- Patch #148419 by Moshe, bjaspan et al: refactor distributed auth out of user.module.
2007-06-15 06:53:26 +00:00
Dries Buytaert
727304d03d
- Patch #151270 by moshe: fixed braino.
2007-06-12 20:37:07 +00:00
Dries Buytaert
2290800c78
- Patch #143532 by Gurpartap: don't redirect to 'my account' after editing profiles.
2007-06-11 15:27:52 +00:00
Dries Buytaert
bc1c4defa2
- Patch #150167 by fwalch: fixed problem with fapi migration -- one-time login not working.
2007-06-11 15:01:32 +00:00
Dries Buytaert
9e0da3dc7c
- Patch #143026 by ChrisKennedy and Steven: dynamically check password strength and confirmation.
2007-06-08 06:04:15 +00:00
Dries Buytaert
27388f6655
- Patch #149176 by chx, David et al: getting rid of the sequences table, using db_last_insert_id() instead of db_next_id().
2007-06-05 12:13:23 +00:00
Dries Buytaert
e629deb94d
- Patch #146667 by Jeff Eaton: form API fixes.
2007-06-04 15:56:34 +00:00
Dries Buytaert
19b8132289
- Patch #148974 by hunmonk: fixed whois online block on PostgreSQL.
2007-06-04 07:24:53 +00:00
Dries Buytaert
1fe90cba4f
- Patch #146667 by Eaton: correct builder argument ordering, eliminate redundant arguments
2007-06-04 07:22:23 +00:00