Age | Commit message (Collapse) | Author | Files | Lines |
|
Made the name field (the only field) on this form as required.
|
|
Added handler function to common model to create new use groups from the
modal view.
|
|
This function will initialize a new group object and write it to the
database, with a given group name and owner user.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
These are extra files distributed with Bootstrap that I do not need. I
am keeping the minified Bootstrap main JS file, which is already used by
the Scrott application.
|
|
These are extra files distributed with Bootstrap that I do not need, I
am retaining the minified main Bootstrap CSS file, which is already used
by the Scrott application.
|
|
|
|
|
|
Added handler for the button added in the previous commit.
|
|
Added button for admins to remove any user account
|
|
This action will validate the user's password, and make sure you're not
removing the last admin, then proceed to delete the current user's
account from the database and log them out, for good.
|
|
Function to count the number of admin accounts that exist. This is used
to make sure that while deleteing accounts, the number of administrators
never drops to zero.
|
|
This page prompts for user password before actually deleteing their
account.
|
|
There are two functions that need called in the common model whenever a
page is rendered. Rather than requiring all of the base MVC controllers
to call them, I am placing them in a constructor for this model class.
This constructor should fire automatically (since base mvc models
inherit this class), unless base classes define their own constructors.
I don't antisipate this happening, however in that case, they would just
need to call parent::__construct().
|
|
|
|
This will prompt the user for their password if they opt to delete their
own account. This is to prevent malicious attempt by others to trick
users into having there accounts deleted by way of a XSS attack.
|
|
Links to a confirmation page which will require the user's current
password to succeed.
|
|
|
|
|
|
This is the image used by each user object which does not have its own
image in the heads directory. I made this myself since I couldn't find
anything that looked very appealing on the internet without running into
copyright issues. Hopefully, this image will get replaced later.
|
|
|
|
|
|
Function to delete the user image file for the given user object.
|
|
Included initial function assertConfirm(), function to present user an
"Are you sure?" prompt before submitting a web form.
|
|
Only log an error if we get an upload error besides err code 4 (No file
uploaded)
|
|
Now supports file upload to replace the user's head image
|
|
Created class-scope vars to define allowable sizes and types for
uploaded user images
|
|
Now supports file upload to replace the user's head image
|
|
|
|
Also restructured the web form a little and added the form-group to select a new image to upload
|
|
This function will return the path to the head image (user image) for the user object.
This path should be something like: <APP_ROOT>/file.php?d=img/heads&f=<GUID>
|
|
|
|
This is a rework of how the framework handles performing file uploads.
Rather than attaching new fields to a form (of type file) and handling
them during populate() then saving later, users can call what is
essentially a static function and save files in isolation. Since each
webform I can conceive using in Scrott at this time won't be uploading
more than one file at a time, this model should work nicely moving
forward; however can be easily adjusted if need be.
|
|
This reverts commit 8ad6e8f9223bd3ee214478b3e1247f9c7d8e91ec.
See parent commit message
|
|
Form::field_file()"
This reverts commit 1f8b53e426b8c0a1546e9d5c21573be9003cb556.
See parent commit message.
|
|
This reverts commit 3d493fc75dc6e3593001c2d9dfef26f4c1d79c2c.
The way I was wanting to handle file uploads isn't going to fly with a
semantic of PHP and POST var mgmt. -.- Rolling back relevant changes to
write up something else.
|
|
|
|
This function asserts that the requester is logged in and that the file exists before either fpassthru()-ing the contents
or returning early.
|
|
Grab the request and decide how to process it based on the directory the resource resides in
|
|
This script is a proxy for downloading file from the public web file tree which Scrott want to enforce access-control over.
|