Commit Graph

61 Commits (1a5c10dd417646af74581a567608e904dc96a62f)

Author SHA1 Message Date
Igor Scheller 4e709d0d23 Log messages without inline HTML
Igor Scheller 1bb2c57842 comments: Don't strip characters
closes  (htmlentities-like content in a comment gets removed)
Igor Scheller c33940f64a Moved permission checks to Authenticator class
Igor Scheller 944c29b964 Require POST for sending forms
* Ensure that the form is submitted with a post request
* Replaced several links with forms

Closes  (Security Vulnerability)
Igor Scheller 88f3bafa5e Replaced `Auth()` with `auth()`
Igor Scheller 89e62c95a7 Changed more functions 🎉
Igor Scheller 2dcb7cc2de Replaced some global `$user` variables
Bot e8f8fc7f5f Replaced gettext translation `_()` with `__()` that uses the Translator class
Bot 952c7892f3 Formatting & Docstrings
msquare 81b4e9d2bc solve problem with autobreaks in news text when building html tables
msquare 34da670b6f solve problem with autobreaks in news text when building html tables
msquare 2b52d24c59 solve problem with autobreaks in news text when building html tables
msquare 9969208be2 solve problem with autobreaks in news text when building html tables
msquare a0f70d9819 solve problem with autobreaks in news text when building html tables
Igor Scheller d0074cf006 Merge remote-tracking branch 'engelsystem/feature-igel-rewrite'
# Conflicts:
#	includes/controller/angeltypes_controller.php
#	includes/pages/admin_groups.php
#	includes/pages/user_settings.php
#	includes/sys_page.php
#	src/Exceptions/Handler.php
#	src/Http/Request.php
Igor Scheller 3002ed9e93 Security: Only allow angels with admin_news_html privilege to use HTML
Igor Scheller cc01c906ba : Integration of symfony/http-foundation request
Igor Scheller 73175e2b64 : Added routing
msquare f82e5456d2 dried code by introducing selectOne for select queries with only one result line expected
Igor Scheller 3a1e460249 Changed $_GET, $_POST and $_REQUEST to use the Request object
Igor Scheller 8506d6d27e Refactoring: Config cleanup / moved to class
Bot 740026a9de Replaced [0-9] with \d
Bot 915ce28fee Replaced " with '
Igor Scheller 9a3ad88834 Changed from mysqli to PDO, some refactorings, faster sql queries
Bot 55141154c0 Replaced " with '
Bot 356b2582f3 PPHDoc, formatting, fixes, cleanup
Bot d71e7bbfad Formatting
Bot 7313e15ce8 PSR-2 formatting
msquare eec10ebfc5 reduce complexity of user angeltypes controller
msquare 9ad9088260 make short variable names longer
msquare 91dafb19ec prohibit inline control structures on pages
msquare de917bc543 remove unused code
msquare 53ad1b5110 fix codacy unused code
Philip Häusler 6bede2fd22 harden the sql queries
Philip Häusler dc412ba826 sort meetings by date
Philip Häusler 9007bb6790 sort news by date
Felix Favre 8bcce0e003 change button size in user_news
Felix Favre 524acb15ba use the new very cool glyph button
Philip Häusler 46575d90c2 pulled complete menu to the top (go for mobile...)
Philip Häusler f5a094fd8b add user view, better bootstrap
Philip Häusler 74647e16d3 add basic bootstrap theme
Philip Häusler e107dff1ce button style and redirect fixes
Philip Häusler 71feeee3f2 innodb and foreign keys
Philip Häusler e60b0df2ec gettext some german translation
Philip Häusler 1e05da6c81 gettext for user sites
Philip Häusler 85d9bf4f9c angel views in english complete
Philip Häusler aad54bfe88 basic gettext integration
Philip Häusler bfb0cacd54 mysql to mysqli and a lot of cleanup and mvc
Philip Häusler b60603d76c news reload duplication bug fixed
Philip Häusler 7c42769ab8 finnished logging