This reverts the change made in commit ae7f17b3


since it was breaking some configurations of Apache and causing
Internal Server errors.

So instead, I've added a few empty index.html to important
directories we want to hide.

Ultimately though, it's up to system administrators to secure their
web servers properly, there's just so much we can do with generic
.htaccess files.

We should improve our documentation to teach people how to properly
serve Mahra.

LP: #571709
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

Corrected & to & in URL for internalmedia (Fixes #3438).

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

LP: #571709
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

These settings are insufficient for a real production site and
only work on Apache.

Given they could interfere with a well configured webserver, let's
remove them until we come up with a more complete solution.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

Ideally these should be resizable, but it may cause various browser
issues so for now, let's just make the default size a bit nicer.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

LP: #547856
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

This fixes installation of Mahara code taken from a local CVS.

LP: #605986
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Fix for find_remote_user when 2 xmlrpc users with the same username are both in 'No institution' (bug #548181)
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

The "make minaccept" script now outputs "All good!" if everything
parses OK. Otherwise the first error will be displayed.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

This was introduced in 0e2f1c39

Signed-off-by: Francois Marier <francois@catalyst.net.nz>

LP: #604954
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

LP: #598155
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

Deleted the one that comes with jscalendar and replaced it with a
better one done by Mits.

Also got rid of the incomplete Slovenian translation which was
already superseded by Gregor's one.

LP: #597909
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

By turning 'HTML.SafeEmbed' and 'HTML.SafeObject' ON, we can avoid
having to write and maintain all kinds of filters.

I have deleted all of the filters that are no longer necessary.

Unfortunately, we have to keep two around, Skype and Twitter,
since their embed code includes Javascript.

LP: #604840
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Change small header: put logo on the left & edit links on the right for consistency with the normal header
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

- Add param to force display_name to show usernames
- Fix full_name, display_default_name to deal with deleted users
- Simplify display_name by calling full_name, display_default_name
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

usability wise
Signed-off-by: Stacey Walker <stacey@catalyst.net.nz>

Signed-off-by: Stacey Walker <stacey@catalyst.net.nz>

Signed-off-by: Stacey Walker <stacey@catalyst.net.nz>

This is version 1.5 of the upstream code. (Version 2.2 is the latest.)
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

This is pretty much the same code but without the formatting
customisations we had.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

This is based on the proposal in the Appendix of this page:

  http://www.gnu.org/philosophy/javascript-trap.html



We now explicitly give permission to minify/compress the Mahara
javascript files.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>

- Use template rather than js to generate groupbox html
- Combine invite & controlled memberships into single groupbox form
- Only show one user's membership form at any time, in the middle of the page
- Add a close button
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>