Tim Almdal
f943a2deef
Don't show a link to the user profile for the guest user
2010-01-28 08:14:33 -08:00
Tim Almdal
ed5b07b335
Create a user profile page that is used as a landing page when referencing a user in messages or pages.
...
Partial fix for ticket #889 and a fix for #931 .
2010-01-23 21:38:01 -08:00
Bharat Mediratta
e0f4e6500d
Use text::alternate() instead of hand-rolled even/odd code.
2009-11-15 19:34:44 -08:00
Chad Kieffer
3e6ba7acc3
Renamed most, if not all css selectors from gName to g-name. Moved a few shared images from wind to lib. Deleted unused images in the admin_wind. This will likely break a few ajax features.
2009-10-04 00:27:22 -06:00
Chad Kieffer
9145331fd4
Renamed and moved gOdd/gEven CSS classes.
2009-10-03 12:33:53 -06:00
Andy Staudacher
2bc73e2e36
Fix XSS vectors in HTML attributes (mostly t() calls)
2009-08-31 21:51:57 -07:00
Andy Staudacher
b9bd1681a3
Update all code to use helper method html::clean(), html::purify(), ... instead of SafeString directly.
2009-08-29 22:54:20 -07:00
Andy Staudacher
c01ac42c46
Refactor all calls of p::clean() to SafeString::of() and p::purify() to SafeString::purify().
...
Removing any p::clean() calls for arguments to t() and t2() since their args are wrapped in a SafeString anyway.
2009-08-29 12:48:40 -07:00
Bharat Mediratta
41b8f943a6
Convert instances of theme_url() to just url() to match the API change
...
made in dbeadc1407
2009-07-23 10:20:49 -07:00
Tim Almdal
d6648c0aff
Fix for ticket #477 . Use nl2br method when rendering comment::text and
...
item::description. In addition add p::clean or p::purify to places that
xss cleaning had missed (i.e. rss feeds)
2009-07-04 08:17:12 -07:00
Tim Almdal
54ffea2419
Split the clean method into two clean and purify. clean is a light weight
...
approach using html::specialchars and purify uses HTMLPurifier to intelligently
cleanse the output fields. Use purifier for text and title fields where it is
likely that a user would enter html to format their data.
2009-07-03 21:44:10 -07:00
Bharat Mediratta
6e8a8c53e6
Rename $theme->url() to $theme->theme_url() for consistency wiht
...
$theme->theme_script().
2009-06-28 19:49:48 -07:00
Andy Staudacher
40b107dd64
Fix html bug in l10n message
2009-06-16 14:12:40 -07:00
Bharat Mediratta
26314d0ef8
Create gallery::date_time(), gallery::date() and gallery::time()
...
functions that format a unix timestamp into a date+time/date/time
string.
Partial fix for ticket #347 .
2009-06-12 22:44:51 -07:00
Bharat Mediratta
708f27f483
Run p::clean() on any variables that contain data entered by users.
2009-05-31 00:11:48 -07:00
Chad Kieffer
cd8d1c6582
Temp fix for photostreamin admin dashboard, other miscellaneous css fixes. Apply jQuery UI button css to submit inputs in the admin theme.
2009-02-23 05:14:05 +00:00
Chad Kieffer
55cd2afde5
Admin theme style cleanup. Merged separate selected, available, unavailable into a single set of reusable classes. Applied alternating row bg colors. Removed inline CSS from admin views. Moved user admin css into admin_default theme style sheet.
2009-01-24 20:06:13 +00:00
Andy Staudacher
e4a9b19bf9
Changing t() placeholder syntax from {{replace_me}} to %replace_me.
2009-01-15 10:02:41 +00:00
Chad Kieffer
82848bd3a9
HTML format cleanup
2009-01-10 19:13:00 +00:00
Bharat Mediratta
9b90b4b0cd
Use the theme's avatar as the default if Gravatar doesn't have one.
2009-01-10 06:18:35 +00:00
Andy Staudacher
a631fe29f3
i18n refactoring: Rename all _() (reserved by gettext) calls to t().
...
- And refactor printf to our string interpolation / pluralization syntax
- Also, a slight change to the translations_incomings table, using binary(16) instead of char(32) as message key.
2009-01-08 17:13:06 +00:00
Bharat Mediratta
cd1d023754
Change the preamble for views in two ways:
...
1) drop unnecessary semicolon
2) start with <?php for extra security in the case that the server itself doesn't
have short_tags enabled (the app won't work, but we need to make sure that we're
still secure)
2009-01-01 00:23:29 +00:00
Bharat Mediratta
78ce8615f3
Implement the "recent comments" block with real data.
2008-12-21 02:02:41 +00:00
Bharat Mediratta
ad0ddc236c
Fix preamble
2008-12-20 07:30:27 +00:00
Bharat Mediratta
b933d1a170
Move Recent Comments into its own block.
2008-12-20 01:25:03 +00:00
