summaryrefslogtreecommitdiff
path: root/modules/user
AgeCommit message (Collapse)Author
2009-10-04Renamed most, if not all css selectors from gName to g-name. Moved a few ↵Chad Kieffer
shared images from wind to lib. Deleted unused images in the admin_wind. This will likely break a few ajax features.
2009-10-03Renamed and moved gOdd/gEven CSS classes.Chad Kieffer
2009-09-30Convert gDialog and gCancel over to g-dialog and g-cancel. Refactor CSS id's ↵Chad Kieffer
and classes in the login/reset password dialog.
2009-09-30Apply button style and hover effect to password reset button.Chad Kieffer
2009-09-30Missed g-right application on add groupChad Kieffer
2009-09-30Removed blank line.Chad Kieffer
2009-09-30Merge branch 'master' into talmdal_devTim Almdal
2009-09-30Use the block_manager to manage site sidebar panels. Fixes ticket #110.Tim Almdal
* Extend block_manager to handle sidebar blocks. get_available has become get_available_admin_blocks, get_list becomes get_admin_list. * Create new functions get_available_site_blocks which will look for gallery_block get_available_site_blocks. * Refactor sidebar_blocks into a separate function and then call block_manager::get_html(site.sidebar). Convert image_block to use block management instead of theme::sidebar_blocks * Change the block_manager api so that the theme is passed into the get method. convert info to the new sidebar block approach * Convert the user module to use the new sidebar block structure. remove the installers for info and image_block modules. * Convert tag and rss modules to the new sidebar framework. reset the version number to 1 for info and image_block modules. * Change the get_html method to ignore empty blocks and change the individual handlers to return an empty string if no block is generated * Add a warning message if no sidebar blocks are active and provide a link to the admin page that configures the sidebar.
2009-09-30Replaced gButtonLink with g-button.Chad Kieffer
2009-09-30First round of CSS refactor updates. Added calls to gallery.common.css from ↵Chad Kieffer
wind and admin_wind. Replaced basic text align and block float classes. Removed section #2 from both themes screen styles.
2009-09-15CSRF / auth fixes, golden data file checkpointAndy Staudacher
2009-09-10Use abs_url() inside url::redirect() calls so that we don't just windBharat Mediratta
up tacking onto the base url.
2009-09-08Move specialized (pretty) url generation back into Item_Model so thatBharat Mediratta
we're not relying on overriding url::site() to do tricks around item urls. This means that you won't get item urls by doing url::site("albums/37"), for example, but it also means that we won't get pretty urls where we don't expect them (like in the action of a <form> element). Incidentally, this will help us move over to using the slug format because if you've got a bad character in a url, the edit forms will now work on it since they'll be id based.
2009-09-05Change click() to change() so that we immediately update the UI whenBharat Mediratta
the user picks a new option.
2009-09-05Revert previous edit. Prefer « none » (sweet, nice Unicode characters) ↵Andy Staudacher
instead of HTML entities.
2009-09-05Add missing view for language selectionAndy Staudacher
2009-09-04placeholder for a missing viewBharat Mediratta
2009-09-04Shorten the name in the block so that it doesn't wrap.Bharat Mediratta
Use &laquo; and &raquo; in the << none >> text.
2009-09-04When changing user preferences, reset the session based locale preferences.Andy Staudacher
2009-09-04Add new locale preferences: Adding per session (cookie) locale preferences ↵Andy Staudacher
and check the browser's / OS' locale preferences. Ticket 582.
2009-09-01XSS / style fixes for newly detected issues (after fixing XSS scanner)Andy Staudacher
2009-08-31Fix XSS vectors in HTML attributes (mostly t() calls)Andy Staudacher
2009-08-31Rename mark_safe() to mark_clean()Andy Staudacher
2009-08-30Change all instances of SafeString::of_safe_html() to html::mark_safe() in ↵Andy Staudacher
views.
2009-08-29Update all code to use helper method html::clean(), html::purify(), ... ↵Andy Staudacher
instead of SafeString directly.
2009-08-29Undo url helper changes - url methods no longer return a SafeString.Andy Staudacher
Adding SafeString::of_safe_html() calls where urls are passed as parameters to t() and t2().
2009-08-29Merge commit 'upstream/master'Andy Staudacher
Conflicts: modules/akismet/views/admin_akismet.html.php modules/comment/helpers/comment_rss.php modules/gallery/helpers/gallery_rss.php modules/gallery/libraries/I18n.php modules/gallery/views/permissions_browse.html.php modules/gallery/views/simple_uploader.html.php modules/info/views/info_block.html.php modules/organize/controllers/organize.php modules/organize/views/organize.html.php modules/organize/views/organize_album.html.php themes/default/views/album.html.php themes/default/views/movie.html.php themes/default/views/photo.html.php
2009-08-29Refactor all calls of p::clean() to SafeString::of() and p::purify() to ↵Andy Staudacher
SafeString::purify(). Removing any p::clean() calls for arguments to t() and t2() since their args are wrapped in a SafeString anyway.
2009-08-29Fix active() to not use user::guest() as the fallback for our Session::get() ↵Bharat Mediratta
call.
2009-08-29Adding SafeString which is going to replace p::clean() and p::purify().Andy Staudacher
Refactoring of Xss_Security_Test. t() and t2() return a SafeString instance. TODO: - Update all code to use SafeString where appropriate. - Update golden fole of Xss_Security_Test - Stop reporting CLEAN vars in Xss_Security_Test
2009-08-27Remove 'ENGINE=InnoDB' specification from tables that we create. UseBharat Mediratta
the system's default table specification. Fixes ticket #597.
2009-08-27Don't ask for csrf when we're resetting passwords. They're not gonna have ↵Bharat Mediratta
one. Duh! Fixes #642.
2009-08-09Require a valid url for users. Fixes ticket #612.Bharat Mediratta
2009-08-08Change galleryPanel and galleryDialog widgets to gallery_panel and ↵Tim Almdal
gallery_dialog respectively Signed-off-by: Bharat Mediratta <bharat@menalto.com>
2009-08-08Refactor the gallery dialog into a jQuery widgetTim Almdal
Signed-off-by: Bharat Mediratta <bharat@menalto.com>
2009-08-08Don't show the ajaxy login link in the top right corner if we're on the ↵Bharat Mediratta
login page itself. Signed-off-by: Bharat Mediratta <bharat@menalto.com>
2009-08-06Cleanup the javascript for enabling dialog or panel links.Tim Almdal
1) We don't need to loop over the elements to bind the event handler. 2) Just include gallery.panel.js for all the admin pages. Signed-off-by: Tim Almdal <tnalmdal@shaw.ca>
2009-08-02Change the API for getting to the original state of an ORM.Bharat Mediratta
Old API: $obj->original("field_name") New API: $obj->original()->field_name This allows us to revert the varous xxx_updated events back to passing an original ORM as well as the the updated one. This makes for a cleaner event API. Old API: comment_updated($comment) { $comment->original("field_name") } Old API: comment_updated($old, $new) { $old->field_name }
2009-07-29Clean up user form events. Thanks to Ben Smith (glooper).Bharat Mediratta
2009-07-28Use events to generate menus, instead of having xxx_menu helpers.Bharat Mediratta
This is the first step towards having a simple, lightweight and unified API for module interaction.
2009-07-25fix for ticket #574. The user->url database wasn't being set when the user ↵Tim Almdal
was updated via the admin panel.
2009-07-25Pass the variable when the "user_edit_form" event is fired.Tim Almdal
2009-07-23Add form processing events:Bharat Mediratta
user_add_form_admin admin adding a user user_edit_form_admin admin editing a user user_add_form_admin_completed successfully added a user (admin) user_edit_form user editing their own settings user_edit_form_completed successfully edited a user (admin and user editing own settings)
2009-07-23Convert instances of theme_url() to just url() to match the API changeBharat Mediratta
made in dbeadc1407293d0c7af36723db6fe5699890b845
2009-07-22Use the Kohana cascading filesystem to locate resources loaded by theBharat Mediratta
theme. Because the theme comes first, this means that themes can override any module resources, at the cost that we no longer have namespacing for JS and CSS files. The only file getting used outside of this model is themes/default/screen.css which is used in the admin theme. I fixed that by copying screen.css into admin_default and renaming its screen.css to admin_screen.css. I also copied over all the images that it was referencing. Fixes tickets #48 and #539. Theme API changes: - theme_script(), theme_url() and theme_css() are no longer needed - script(), url() and css() now refer to the first matching asset in the module load path, where gallery3/lib is at the end of the path
2009-07-21In the logout link, urlencode the continue url so that ampersands, etcBharat Mediratta
don't break encapsulation. In the logout controller, don't run the url through url::redirect because that uses url::site(). Just set the Location header directly. This fixes ticket #483.
2009-07-21Escape bare & symbols so that we use valid entities. Fixes ticket #577.Bharat Mediratta
2009-07-19More thorough fix for #421. Create User_Model::display_name() whichBharat Mediratta
uses the full name if there is one, or falls back to the name if that's all we have.
2009-07-21Changed "Forgot Your Password" text to use capital 'Y' on the word YourShai Ben-Naphtali
Signed-off-by: Bharat Mediratta <bharat@menalto.com>
2009-07-17Rename "locale" helper to "locales" to avoid conflicting with PHP 5.3.Bharat Mediratta
Fixes ticket #194