summaryrefslogtreecommitdiff
path: root/modules/tag/controllers
AgeCommit message (Expand)Author
2009-09-17Minor style fix: (string) $var, not (string)$var, and move the explicit cast ...Andy Staudacher
2009-09-17use an implicit cast to convert the translated error message to a string as i...Tim Almdal
2009-09-17Cleanup issues with the original fix for #779Tim Almdal
2009-09-16When editing tags in place, and there is a validation error, highlight the ta...Tim Almdal
2009-09-15Stricter input handling (cast to int)Andy Staudacher
2009-09-15Controller auth / CSRF fixesAndy Staudacher
2009-09-15CSRF / auth fixes, golden data file checkpointAndy Staudacher
2009-08-29Update all code to use helper method html::clean(), html::purify(), ... inste...Andy Staudacher
2009-08-29Refactor all calls of p::clean() to SafeString::of() and p::purify() to SafeS...Andy Staudacher
2009-07-28Clean up amd simplify the tag processing: Only allow comma separators betweenTim Almdal
2009-07-28Standardize the specification of tags.Tim Almdal
2009-07-24Partial implementation of ticket #80. Provide auto complete and suggestions o...Tim Almdal
2009-07-23Make tag handling consistent by converting spaces to periods and using commas...Tim Almdal
2009-07-04Found another place that p:purify was required.Tim Almdal
2009-07-01Fix a bunch of XSS vulnerabilities turned up by manual inspectionBharat Mediratta
2009-06-15Fix up the titles in the default theme. They've been broken for aBharat Mediratta
2009-06-03Sanitize all data we return via json_encode() to guard against XSS andBharat Mediratta
2009-06-01Don't throw an error if there are no visible tags.Bharat Mediratta
2009-06-01Security pass over all controller code. Mostly adding CSRF checkingBharat Mediratta
2009-05-27Update all references to the core application to now point to theBharat Mediratta
2009-05-26Since organize is now in the preview stage and will probably beTim Almdal
2009-05-22Implement a basic tag management interface with the organize drawerTim Almdal
2009-05-13Gee it's May already. Update copyright to 2009.Bharat Mediratta
2009-05-13Allow users to enter multiple tags at once, split by space, semicolonBharat Mediratta
2009-03-25tag changes in the tag admin should now work as expectedJakob Hilden
2009-03-12Move the setting of the page title into the controller that isTim Almdal
2009-03-12Rename tag.html.php to dynamic.html.php as part of ticket #115Tim Almdal
2009-02-27Continue the journey of replacing raw sql with ORM or Database methodTim Almdal
2009-01-15Changing t() placeholder syntax from {{replace_me}} to %replace_me.Andy Staudacher
2009-01-08i18n refactoring: Rename all _() (reserved by gettext) calls to t().Andy Staudacher
2009-01-04Put up an error if you try to reuse an existing tag nameBharat Mediratta
2009-01-04Allow renaming of tags using a modal dialog. Put up a confirmationBharat Mediratta
2009-01-04Simple admin tags interface.Bharat Mediratta
2008-12-29Remove rest::JSON content type; it's causing lots of problems and it doesn't ...Bharat Mediratta
2008-12-25Big round of normalization of the way that our controllersBharat Mediratta
2008-12-25Convert tag module over to returning JSON.Bharat Mediratta
2008-12-24Normalize our Admin controllers so that functions always print outBharat Mediratta
2008-12-17Add Item_Model::viewable() which we can use to restrict any query toBharat Mediratta
2008-12-14Should be get_var not set_varTim Almdal
2008-12-13Don't have to check if the item is loaded now, access::can will guard against...Bharat Mediratta
2008-12-13Fix security pattern. We can't successfully call access::can unless the item...Bharat Mediratta
2008-12-13Add permission check on the tag add controller, in case some bypasses the vie...Tim Almdal
2008-12-13Add a permissions check to determine if the active user has edit permission o...Tim Almdal
2008-12-12Remove a couple of todo's by store the "theme name", "admin theme name" and "...Tim Almdal
2008-11-271) Create a Theme_View class that combines the functionality of the Theme cla...Tim Almdal
2008-11-27Move form generation off into tag::get_add_form(). We can't use a controller...Bharat Mediratta
2008-11-27Get rid of the placeholder "add tags here..." text, and clear the formBharat Mediratta
2008-11-27Refactor cloud generation into a helper so that we can call it fromBharat Mediratta
2008-11-27Clean up REST pattern in tags:Bharat Mediratta
2008-11-27We are now submitting the ajax tag add form to the server correctly and rehoo...Tim Almdal