summaryrefslogtreecommitdiffstats
path: root/web
AgeCommit message (Expand)AuthorFilesLines
2012-02-19Escape all output strings in the header and footerLukas Fleischer2-4/+4
2012-02-19Fix some more XSS vulnerabilitiesLukas Fleischer3-3/+3
2011-12-17Set the title in the Trusted User pageAndrea Scarpino1-1/+4
2011-11-03RPC: Do not return an error on 0 resultsLukas Fleischer1-1/+1
2011-11-02aurjson: add result count to JSON resultDave Reisner1-5/+6
2011-11-02web/README: Update instructionsAlexander Rødseth1-12/+14
2011-11-02Add a new AUR_LOCATION settingDan McGee7-6/+14
2011-10-25Escape wildcards in "LIKE" patternsLukas Fleischer4-13/+15
2011-10-25Wrap mysql_real_escape_string() in a functionLukas Fleischer12-61/+67
2011-10-24Escape wildcards in "LIKE" patternsLukas Fleischer4-13/+15
2011-10-24Wrap mysql_real_escape_string() in a functionLukas Fleischer12-61/+66
2011-10-24send emails when delteing packagesFlorian Pritz1-0/+38
2011-10-24Show last voted date on account details pageDan McGee2-3/+11
2011-10-24Add LastLogin column to Users tableDan McGee1-1/+4
2011-10-24Require DB handle for most user account functionsDan McGee2-26/+15
2011-10-24Remove a boatload of inline table stylesDan McGee8-40/+35
2011-10-24Move SUPPORTED_LANGS out of config.inc.phpDan McGee3-84/+84
2011-09-23RPC: Coerce numeric values into integersLukas Fleischer1-0/+12
2011-09-23RPC: Provide out-of-date timestampLukas Fleischer1-3/+2
2011-09-05Merge branch 'maint'Lukas Fleischer2-6/+18
2011-09-05web/template/login_form.php: Escape the request URILukas Fleischer1-1/+1
2011-09-05web/html/pkgsubmit.php: Deal with unset category IDLukas Fleischer1-3/+15
2011-09-05Link to current page in the login bar HTTPs linkLukas Fleischer1-2/+2
2011-08-22Merge branch 'maint'Lukas Fleischer2-4/+4
2011-08-22Provide more examples on the RPC info pageLukas Fleischer1-2/+9
2011-08-22RPC: Fix info queries when using package IDsLukas Fleischer1-1/+1
2011-08-22Add missing __() to category info in package detailsLukas Fleischer1-3/+3
2011-08-20web/lib/translator.inc.php: Use vsprintf() in __()Lukas Fleischer1-14/+5
2011-08-20Use "%s" instead of "%h" in format stringsLukas Fleischer4-10/+10
2011-08-20Release 1.9.0v1.9.0Lukas Fleischer1-1/+1
2011-08-20Replace "el_GR" translation by "el"Lukas Fleischer1-1/+1
2011-08-20Add Portuguese (Brazilian) translationLukas Fleischer1-0/+1
2011-08-13Add Finnish and Dutch translationsLukas Fleischer1-0/+2
2011-08-12Use secure and httponly session cookiesLukas Fleischer3-4/+4
2011-08-11Add a configuration setting to disallow HTTP loginLukas Fleischer3-3/+17
2011-08-11Remove unnecessary atype and uid lookup from package_details()Dan McGee2-3/+2
2011-08-11Use 'true' instead of 'True' everywhereDan McGee2-9/+9
2011-08-11Make package creation and update atomicDan McGee1-1/+5
2011-08-11pkgfuncs.inc.php: allow all DB funcs to take handle argDan McGee1-61/+102
2011-08-11aur.inc.php: allow all functions using DB to take handle as argDan McGee1-25/+49
2011-08-11Allow for merging deleted packages into existing onesLukas Fleischer3-2/+18
2011-08-11Add "mergepkgid" argument to pkg_delete()Lukas Fleischer1-1/+30
2011-08-11Rename package_exists() to pkgid_from_name()Lukas Fleischer2-3/+3
2011-08-10Segment the upload directory by package name prefixDan McGee3-5/+6
2011-08-10Allow SQL_DEBUG to be undefinedDan McGee1-1/+1
2011-07-29Fix empty depends database insertLukas Fleischer1-11/+16
2011-06-28Replace split() invocations with explode()Lukas Fleischer1-1/+1
2011-06-25Simplify session ID generationLukas Fleischer1-10/+1
2011-06-25Stricter email address validationLukas Fleischer1-1/+1
2011-06-25Honor epoch field in PKGBUILD files.Slavi Pantaleev1-6/+10