- 22 Oct, 2013 1 commit
-
-
Robert Lyon authored
Currently if there is html in an error message used by pieforms it escapes the html so the link becomes not usable. I have made a change where you can tell pieforms not to escape the error message. So instead of using: $form->set_error($field, $message); you can use: $form->set_error($field, $message, false); Where false means do not escape the message. As the terms and conditions are displayed on the page already I've updated the link to jump to the terms section Change-Id: Ia8650a9f2284fb007cbe81a4a94223f127c4f6cd Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 08 Oct, 2013 1 commit
-
-
Aaron Wells authored
Bug 1223063: ArtefactTypeCachedProfileField was only updating the session cache when you updated a value, not when you deleted it. Of course, the only one that can get deleted and that is shown anywhere is the PreferredName (aka display name) so only this one shows the problem. Change-Id: I55f9c96b59c91ced5cba3cf6443ba2e222201ef7 Signed-off-by:
Aaron Wells <aaronw@catalyst.net.nz>
-
- 02 Oct, 2013 8 commits
-
-
Son Nguyen authored
Signed-off-by:
Son Nguyen <son.nguyen@catalyst.net.nz>
-
Son Nguyen authored
Signed-off-by:
Son Nguyen <son.nguyen@catalyst.net.nz>
-
Son Nguyen authored
-
Son Nguyen authored
-
Son Nguyen authored
-
Aaron Wells authored
Bug1158625: If the user hasn't made their profile public, don't even show their pic and name to logged-out users. And in order to prevent enumeration attacks, show the same access denied screen to a logged-out user, whether they hit the URL for an exising profile or whether they entered an invalid URL. Change-Id: Ic926fde3e04a59728868fffecc9272136fb83855
-
Robert Lyon authored
Change-Id: I262b2460195c663fd461964b9bd5a60efd8b297a Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
Son Nguyen authored
When editing a page, check the ownership of blocks before 1. update the configuration data 2. delete/move them Change-Id: I0eab3d99ffe908db3b7c2e852dfdaabeafce1497 Signed-off-by:
Son Nguyen <son.nguyen@catalyst.net.nz>
-
- 01 Oct, 2013 3 commits
-
-
Kristina Hoeppner authored
IE only picks up the alt and not the title tag. I added both so that users will see the description. Change-Id: I2f1c9342363d3372e5aa1549da7fcfc3086177b1 Signed-off-by:
Kristina D.C. Hoeppner <kristina@catalyst.net.nz>
-
Kristina Hoeppner authored
Lang string was missing for "Allowed iframe sources" Change-Id: I1cab612134a334fac7f0ca54fcf406b4a08f3226 Signed-off-by:
Kristina D.C. Hoeppner <kristina@catalyst.net.nz>
-
Hugh Davenport authored
A user should not be able to view/publish an artefact if - they don't have view/publish permission of that artefact - they don't have view permission of all parents of that artefact A user should not be able to edit an artefact if - they don't have edit permission of that artefact - they don't have edit permission of the immediate parent of that artefact - they don't have view permission of any parents below the immediate This is similar to the UNIX permissions, you shouldn't be able to view a directory unless all directories below have read (r) and executeable (x) bits set. The same for editing, you need write (w) permissions of the immediate parent, and rx for all parents. In Mahara, there are no executeable bits, but it can be assumed that view is basically the same as rw for container artefacts, and the same as r for non container artefacts. Change-Id: I4f84aca05dd08d02b05fbe084e4724f78c8681a0 Signed-off-by:
Hugh Davenport <hugh@catalyst.net.nz>
-
- 24 Sep, 2013 1 commit
-
-
Aaron Wells authored
Bug #1175446 Change-Id: Ide5cf394fe1c0d7ebd062bd28f4497f3c2c830d2
-
- 22 Sep, 2013 1 commit
-
-
Aaron Wells authored
Bug1195269 Change-Id: Ia0652570c7fc495b34e04716a6b339956e5ff017
-
- 19 Sep, 2013 1 commit
-
-
John Kelsh authored
Bug 1215190 Change-Id: I9cc40f1a528bd92398b16df833fcaf8aaf314ff7 Signed-off-by:
Aaron Wells <aaronw@catalyst.net.nz>
-
- 16 Sep, 2013 1 commit
-
-
Nitish Bezzala authored
Added string under the 'general view stuff' section. Change-Id: Ic2134d6f47601b8672df58f6a33f35d7f227ab1b Signed-off-by:
Nitish Bezzala <nbezzala@yahoo.com>
-
- 04 Sep, 2013 1 commit
-
-
Son Nguyen authored
-
- 02 Sep, 2013 1 commit
-
-
Evonne Cheung authored
Some RSS/Atom feeds provide an over-large channel image/logo which disrupts display of the External Feed block in a Mahara Page. See e.g. this feed link from the BBC http://downloads.bbc.co.uk/podcasts/worldservice/digitalp/rss.xml Change-Id: Ib6db4b1261abbf6feefabccddb60adad605d9a25
-
- 29 Aug, 2013 1 commit
-
-
Robert Lyon authored
Change-Id: I3bba238312182d4eedd88165d948da1a52a3fbde Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 27 Aug, 2013 1 commit
-
-
Aaron Wells authored
Bug #1213908: If a group shares a page with another group, and that other group has "Participation report" turned on, and an admin views that participation report, it was failing to properly show the name of the first group that was sharing that page. Change-Id: Id4d2b7c7bf3616233091f828f39ff040ebab64bd
-
- 23 Aug, 2013 1 commit
-
-
Aaron Wells authored
Bug #1215702 This one gets me a lot of false positives, so I'm changing the message to explain that it's triggered by the words "from" and "join", and make it so that it doesn't perform this check on lines that are probably comments Change-Id: I5d1acc5eed0a31acc0a570b9bdac564ca514707f
-
- 22 Aug, 2013 1 commit
-
-
Aaron Wells authored
The patch for Bug #1207140 erroneously raised the Mahara 1.6 version number too high. Mahara versioning policy says that version numbers within a stable branch should only increment by 1. Change-Id: Iedcca7281494f4826df60621fe48df0cba4f36e1
-
- 20 Aug, 2013 3 commits
-
-
Robert Lyon authored
This time around instead of changing the protocol-relative URLs to be matching the protocol of what Mahara is using I've changed how html purifier checks iframes to allow protocol-relative URLs. Change-Id: I50c848e7ae6c123b2b88de2021cecb1711a07520 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
Mark Webster authored
error text red. Change-Id: I2ba6874cec0f55bf8ba0d118621b583b2d58b28b Signed-off-by:
Mark Webster <mark.webster@catalyst-eu.net>
-
Aaron Wells authored
Bug1195489 Change-Id: I3d567f85bedfb92e0105e969d1770cd4e38413b5
-
- 24 Jul, 2013 3 commits
-
-
Robert Lyon authored
Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
Robert Lyon authored
Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
Aaron Wells authored
Bug1180194 Change-Id: Idfaad6ba9138eabc8e0efa4f72a5a3da224c7eab
-
- 23 Jul, 2013 1 commit
-
-
Robert Lyon authored
To get a private -> public comment moderated the system needs to check: * if the view has approvecomments set to 1 * if the submitter has checked the make public checkbox * if the submitter is not the owner of the view * if the view is a group view * if the approvecomments are set per view And update the comment table accordingly and now sends off notify message if needed. Removed some unneeded variable declarations Change-Id: I74d44f5dab6442c2cae11df1dc588bd753471f8e Signed-off-by:
robertl <robertl@catalyst.net.nz>
-
- 12 Jul, 2013 1 commit
-
-
Robert Lyon authored
The auth_remote_user db table was not being updated correctly when users were being moved from one auth method to another in bulk. Fix adds in the correct lines to that table. Code similar to what is used in admin/users/edit.php for single user update. Moved some things around to improve performance and fixed a mistake Change-Id: Ieb2d453bc06646444aadaff92ea5b42af4246411 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 01 Jul, 2013 3 commits
-
-
Aaron Wells authored
Functions created by create_function() don't ever get deallocated, which contributes to scripts running out of memory. Change-Id: Ifd78bf05bab67a9b1593a7d9722dd2433e7ad7ca Signed-off-by:
Aaron Wells <aaronw@catalyst.net.nz>
-
Aaron Wells authored
Bug #1150831: Some links to directory index.php files left off the trailing slash, i.e. "{$WWWROOT}/view". This caused unnecessary redirects and greater potential for errors in users' web server setups. While I was at it, for all links to directories other than $WWWROOT itself, I changed them to be explicitly links to "index.php". Also fixed the Windows-style line endings in homeinfo.tpl Fix all implicit links Change-Id: I82b2cb51d5af161e1b41c272178476e156991032
-
Kristina Hoeppner authored
The password should not be displayed in plaintext. I changed the type of the input field to "password" to account for that. Change-Id: I5d64470291e1c81b31bc0aaeb8cd65d809412ae7 Signed-off-by:
Kristina D.C. Hoeppner <kristina@catalyst.net.nz>
-
- 10 Jun, 2013 1 commit
-
-
Son Nguyen authored
Use the command 'SHOW ENGINES' instead of 'SHOW VARIABLES' See also: http://dev.mysql.com/doc/refman/5.6/en/server-system-variables.html#sysvar_have_innodb Change-Id: Ib97f7e1fdcc3c305db7864359fee7626f2f8a4f3 Signed-off-by:
Son Nguyen <son.nguyen@catalyst.net.nz> Signed-off-by:
Aaron Wells <aaronw@catalyst.net.nz>
-
- 05 Jun, 2013 3 commits
-
-
Son Nguyen authored
-
Robert Lyon authored
Problem was the $smarty instance created before forms were generated. I moved the smarty instance call to after form generation and passed the $smarty->assign calls to it then Change-Id: I12705f06b22cee76cd84017e807ba2b0c5ef213e Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
Robert Lyon authored
The greyed out field needed to be readonly rather than disabled as the value was not being passed on form submit Change-Id: Ifce5e8701fa7b2dd381b7ef18567359692a4994f Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 13 May, 2013 1 commit
-
-
Aaron Wells authored
Bug 1177187 Signed-off-by:
Aaron Wells <aaronw@catalyst.net.nz> Change-Id: I5c0bc5c7067571042bd8c4f5d51664f40b8fe671
-
- 02 May, 2013 1 commit
-
-
Aaron Wells authored
Signed-off-by:
Aaron Wells <aaronw@catalyst.net.nz>
-