summaryrefslogtreecommitdiff
path: root/modules/user
AgeCommit message (Expand)Author
2009-09-15CSRF / auth fixes, golden data file checkpointAndy Staudacher
2009-09-10Use abs_url() inside url::redirect() calls so that we don't just windBharat Mediratta
2009-09-08Move specialized (pretty) url generation back into Item_Model so thatBharat Mediratta
2009-09-05Change click() to change() so that we immediately update the UI whenBharat Mediratta
2009-09-05Revert previous edit. Prefer « none » (sweet, nice Unicode characters) inst...Andy Staudacher
2009-09-05Add missing view for language selectionAndy Staudacher
2009-09-04placeholder for a missing viewBharat Mediratta
2009-09-04Shorten the name in the block so that it doesn't wrap.Bharat Mediratta
2009-09-04When changing user preferences, reset the session based locale preferences.Andy Staudacher
2009-09-04Add new locale preferences: Adding per session (cookie) locale preferences an...Andy Staudacher
2009-09-01XSS / style fixes for newly detected issues (after fixing XSS scanner)Andy Staudacher
2009-08-31Fix XSS vectors in HTML attributes (mostly t() calls)Andy Staudacher
2009-08-31Rename mark_safe() to mark_clean()Andy Staudacher
2009-08-30Change all instances of SafeString::of_safe_html() to html::mark_safe() in vi...Andy Staudacher
2009-08-29Update all code to use helper method html::clean(), html::purify(), ... inste...Andy Staudacher
2009-08-29Undo url helper changes - url methods no longer return a SafeString.Andy Staudacher
2009-08-29Merge commit 'upstream/master'Andy Staudacher
2009-08-29Refactor all calls of p::clean() to SafeString::of() and p::purify() to SafeS...Andy Staudacher
2009-08-29Fix active() to not use user::guest() as the fallback for our Session::get() ...Bharat Mediratta
2009-08-29Adding SafeString which is going to replace p::clean() and p::purify().Andy Staudacher
2009-08-27Remove 'ENGINE=InnoDB' specification from tables that we create. UseBharat Mediratta
2009-08-27Don't ask for csrf when we're resetting passwords. They're not gonna have on...Bharat Mediratta
2009-08-09Require a valid url for users. Fixes ticket #612.Bharat Mediratta
2009-08-08Change galleryPanel and galleryDialog widgets to gallery_panel and gallery_di...Tim Almdal
2009-08-08Refactor the gallery dialog into a jQuery widgetTim Almdal
2009-08-08Don't show the ajaxy login link in the top right corner if we're on the login...Bharat Mediratta
2009-08-06Cleanup the javascript for enabling dialog or panel links.Tim Almdal
2009-08-02Change the API for getting to the original state of an ORM.Bharat Mediratta
2009-07-29Clean up user form events. Thanks to Ben Smith (glooper).Bharat Mediratta
2009-07-28Use events to generate menus, instead of having xxx_menu helpers.Bharat Mediratta
2009-07-25fix for ticket #574. The user->url database wasn't being set when the user wa...Tim Almdal
2009-07-25Pass the variable when the "user_edit_form" event is fired.Tim Almdal
2009-07-23Add form processing events:Bharat Mediratta
2009-07-23Convert instances of theme_url() to just url() to match the API changeBharat Mediratta
2009-07-22Use the Kohana cascading filesystem to locate resources loaded by theBharat Mediratta
2009-07-21In the logout link, urlencode the continue url so that ampersands, etcBharat Mediratta
2009-07-21Escape bare & symbols so that we use valid entities. Fixes ticket #577.Bharat Mediratta
2009-07-19More thorough fix for #421. Create User_Model::display_name() whichBharat Mediratta
2009-07-21Changed "Forgot Your Password" text to use capital 'Y' on the word YourShai Ben-Naphtali
2009-07-17Rename "locale" helper to "locales" to avoid conflicting with PHP 5.3.Bharat Mediratta
2009-07-16Second non-trivial change to the event code. We now publish modelBharat Mediratta
2009-07-16Non-trivial changes to the event handling code:Bharat Mediratta
2009-07-16Add missing ) dropped in 8f9a943f.Bharat Mediratta
2009-07-13Add quotes around all values that contain spaces in them, and add aBharat Mediratta
2009-07-02Use Unicode characters (looks better to translator, and fixes normalization i...Andy Staudacher
2009-07-01Fix a bunch of XSS vulnerabilities turned up by manual inspectionBharat Mediratta
2009-06-28Rename $theme->url() to $theme->theme_url() for consistency wihtBharat Mediratta
2009-06-28Use $theme->script() method to render module javascript filesTim Almdal
2009-06-23Refactor the install/upgrade code to be more flexible.Bharat Mediratta
2009-06-15Add string to localizerunostar