aurweb - Arch User Repository

Age	Commit message (Collapse)	Author	Files	Lines
2011-11-02	Add a new AUR_LOCATION setting	Dan McGee	1	-1/+1
	This should be set to something like 'http://localhost' for development or 'https://aur.archlinux.org' in production. It ensures all links in the site stay in the development site and there is no sudden jump from development to production environments. Signed-off-by: Dan McGee <dan@archlinux.org> Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-10-24	Wrap mysql_real_escape_string() in a function	Lukas Fleischer	1	-2/+2
	Wrap mysql_real_escape_string() in a wrapper function db_escape_string() to ease porting to other databases, and as another step to pulling more of the database code into a central location. This is a rebased version of a patch by elij submitted about half a year ago. Thanks-to: elij <elij.mx@gmail.com> Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-08-20	Use "%s" instead of "%h" in format strings	Lukas Fleischer	1	-1/+1
	Use the standard string type specifier instead of "%h" in format strings. Both specifiers are treated equally in __() so we shouldn't break anything here. This also allows us to replace the hacky substitution algorithm in __() by vsprintf(). Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-06-22	rename .inc files to .inc.php and adjust imports and references	elij	1	-1/+1
	Lukas: Add note to "UPGRADING". Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-04-27	SQL: treat all UID/ID values as numbers, not strings	Dan McGee	1	-2/+2
	Ensure we are not quoting these values in any of our SQL queries. Thanks-to: elij <elij.mx@gmail.com> Signed-off-by: Dan McGee <dan@archlinux.org> Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2011-04-19	Use HTTPs for links in password reset confirmation mails.	Lukas Fleischer	1	-1/+1
	Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2010-10-07	Modify some strings for translation.	Loui Chang	1	-4/+3
	Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2010-04-17	Support for storing salted passwords	Denis	1	-1/+4
	To upgrade existing databases: ALTER TABLE Users ADD Salt CHAR(32) NOT NULL DEFAULT ''; Signed-off-by: Loui Chang <louipc.ist@gmail.com>
2009-11-13	Implement 'Password Reset' facility (FS#3061)	Evangelos Foutras	1	-0/+137
	This works by adding a new field to the 'Users' table called 'ResetKey', which is a 32 characters long, random string. When the user requests a password reset, a new 'reset key' is generated and sent to the user's e-mail address in the form of a link in the following format: http://aur.archlinux.org/passreset.php?resetkey=<reset key> When the above link is followed, the user is presented with a form to verify his/her e-mail address and specify the new desired password. If the e-mail address matches the reset key in the database, the new password is assigned to the account. If there is an error, a relevant message is displayed and the user is prompted to re-enter the required information. Upon successful completion of this procedure, the ResetKey field in the database is blanked and the specific key cannot be reused. One SQL query is needed to add the ResetKey field to the 'Users' table: ALTER TABLE `Users` ADD `ResetKey` CHAR(32) NOT NULL DEFAULT ''; Signed-off-by: Loui Chang <louipc.ist@gmail.com>