61 Commits (e0de2c2c656e708f13bd69a0c98bacb7fdb4104c)

Author SHA1 Message Date
Igor Scheller 944c29b964 Require POST for sending forms
* Ensure that the form is submitted with a post request
* Replaced several links with forms

Closes #494 (Security Vulnerability)
6 years ago
Igor Scheller 88f3bafa5e Replaced `Auth()` with `auth()` 6 years ago
Igor Scheller a2aaba9cab User: Bugfixes & code cleanup 6 years ago
Igor Scheller d7aea575ff Replaced more sql queries and old data 6 years ago
Igor Scheller 4e09ee3eb2 Replaced more user related stuff
(Contains some buggy stuff too...)
6 years ago
Igor Scheller 7c6afc2bfe Removed `User($id)` function 🎉 6 years ago
Igor Scheller 89e62c95a7 Changed more functions 🎉 6 years ago
Igor Scheller b069a938c6 Changed user_link and some other user functions to use the user id 6 years ago
Igor Scheller 2dcb7cc2de Replaced some global `$user` variables 6 years ago
Bot e8f8fc7f5f Replaced gettext translation `_()` with `__()` that uses the Translator class 6 years ago
Igor Scheller fe58e4f422 database: updated checks for selectOne 7 years ago
msquare c961269bb7 better hour formatting 7 years ago
msquare 86a38a3372 add user work log entries feature 7 years ago
msquare 3993e553d1 small improvements of user view 7 years ago
msquare b59d17918e small improvements of user view 7 years ago
msquare c3b8fa892d tshirt-score for forced active 7 years ago
msquare 1e8f0c4845 fixes #208, fixes #310: T-Shirt Score™ should be shown on the user view page below your shifts 7 years ago
Bot 952c7892f3 Formatting & Docstrings 7 years ago
msquare 50f24271eb fix all redirects to home (because of new urls redirect to ? wont work anymore) 7 years ago
Igor Scheller d0074cf006 Merge remote-tracking branch 'engelsystem/feature-igel-rewrite'
# Conflicts:
#	includes/controller/angeltypes_controller.php
#	includes/pages/admin_groups.php
#	includes/pages/user_settings.php
#	includes/sys_page.php
#	src/Exceptions/Handler.php
#	src/Http/Request.php
7 years ago
Igor Scheller cc01c906ba #336: Integration of symfony/http-foundation request 7 years ago
Igor Scheller 73175e2b64 #337: Added routing 7 years ago
msquare a0af8d4624 further switching to db exceptions instead of return false 8 years ago
msquare 5794c4cab8 clear delete queries from false resuls 8 years ago
msquare a157004f4a handle failed db queries in Db class 8 years ago
Igor Scheller b7ebb05b8e Passwords should be posted 8 years ago
Igor Scheller 3a1e460249 Changed $_GET, $_POST and $_REQUEST to use the Request object 8 years ago
Igor Scheller 8506d6d27e Refactoring: Config cleanup / moved to class 8 years ago
Igor Scheller 9a3ad88834 Changed from mysqli to PDO, some refactorings, faster sql queries 8 years ago
Bot 55141154c0 Replaced " with ' 8 years ago
Bot 356b2582f3 PPHDoc, formatting, fixes, cleanup 8 years ago
Bot d71e7bbfad Formatting 8 years ago
Bot 7313e15ce8 PSR-2 formatting 8 years ago
Igor Scheller 1f8d1eb4bb Fixed "Constant already defined" notice
Added more ugly global variables
8 years ago
msquare b8ebd23f6d bring back filtering by occupancy 8 years ago
msquare fe5dec73ba bring back filtering by occupancy 8 years ago
msquare 4407604793 move data sorting to begin 8 years ago
msquare 34248bb20c show freeload comments to supporters (user shift admin) 8 years ago
msquare f2630162e9 reduce complexity of password recovery controller 8 years ago
msquare eec10ebfc5 reduce complexity of user angeltypes controller 8 years ago
msquare 1debe567f5 simplify user_angeltype_add_controller 8 years ago
msquare f05f1a3cd4 rename to 8 years ago
msquare bd9003f5d5 prohibit inline control structures on controllers 8 years ago
msquare 53ad1b5110 fix codacy unused code 8 years ago
Philip Häusler ef60b95555 add a more secure way to delete users containing a password request 9 years ago
Philip Häusler 902a5852a4 fix user result check on user controller 9 years ago
Philip Häusler 803c0a552f make multiple vouchers possible 10 years ago
Philip Häusler 6bede2fd22 harden the sql queries 10 years ago
Philip Häusler 16ce2eb969 begin cleanup of user edit 10 years ago
Philip Häusler 8ed077bcec user voucher feature 10 years ago