Florent Bruneau [Fri, 14 Nov 2008 20:07:29 +0000 (21:07 +0100)]
Merge commit 'origin/master' into fusionax
Conflicts:
ChangeLog
htdocs/xorg.php
templates/profile/general.tpl
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Laurent Penou [Tue, 11 Nov 2008 11:34:53 +0000 (12:34 +0100)]
Small update to manage NomDusage correctly
Aymeric Augustin [Sun, 9 Nov 2008 14:07:16 +0000 (15:07 +0100)]
Read-only version of the globally whitelisted websites for openid
Adding a site can be done directly in SQL with user_id == NULL
Aymeric Augustin [Sun, 9 Nov 2008 13:53:23 +0000 (14:53 +0100)]
Users can delete entries from their openid whitelid
Florent Bruneau [Sat, 8 Nov 2008 11:53:17 +0000 (12:53 +0100)]
Oops, fix dynpost.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sat, 8 Nov 2008 11:47:22 +0000 (12:47 +0100)]
Oops, fix vcard query to retreive user pictures.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 18:34:01 +0000 (19:34 +0100)]
Rewrite goodiesPopup with jQuery, cleanup.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 18:24:00 +0000 (19:24 +0100)]
Rewrite auto_links stuff using jQuery.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 17:32:11 +0000 (18:32 +0100)]
Rewrite our pour implementation of Ajax using jQuery.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 16:26:35 +0000 (17:26 +0100)]
Update ChangeLog
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 16:22:28 +0000 (17:22 +0100)]
Wiki preview uses 'post' instead of 'get' (Closes #918)
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 15:51:09 +0000 (16:51 +0100)]
Update core and ChangeLog: version will be 0.10.0
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Aymeric Augustin [Mon, 3 Nov 2008 20:35:17 +0000 (21:35 +0100)]
Update ChangeLog
Aymeric Augustin [Sun, 2 Nov 2008 22:16:57 +0000 (23:16 +0100)]
Simplify detection of bounces by using the MIME type (which was checked anyway)
Improve the detection of the "out of office"
Fix an error message
Aymeric Augustin [Sun, 2 Nov 2008 21:27:45 +0000 (22:27 +0100)]
Script to automatically process the NL bounces
Florent Bruneau [Sun, 2 Nov 2008 16:47:09 +0000 (17:47 +0100)]
Oops, forgot some references to plpage.devel.tpl.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 2 Nov 2008 16:43:54 +0000 (17:43 +0100)]
common.content.tpl and common.devel.tpl have been moved to the core.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 2 Nov 2008 16:15:40 +0000 (17:15 +0100)]
Move plugin compiler.icon in the core.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Aymeric Augustin [Fri, 31 Oct 2008 23:11:45 +0000 (00:11 +0100)]
Coding rules discourage excessive comments
Aymeric Augustin [Fri, 31 Oct 2008 22:57:39 +0000 (23:57 +0100)]
Oops
Aymeric Augustin [Fri, 31 Oct 2008 22:52:30 +0000 (23:52 +0100)]
User can choose to always trust websites
TODO implement a way to remove websites from the whitelist
Aymeric Augustin [Fri, 31 Oct 2008 22:33:39 +0000 (23:33 +0100)]
Remove a page that is no longer used since the associated error case disappeared
Aymeric Augustin [Fri, 31 Oct 2008 22:32:29 +0000 (23:32 +0100)]
Add the possibility for globally whitelisted websites
(TODO admin interface to handle them)
Aymeric Augustin [Fri, 31 Oct 2008 22:31:12 +0000 (23:31 +0100)]
Reflow and drastically simplify logic
Since we do automatic user identifier selection, we can remove some checks
Aymeric Augustin [Fri, 31 Oct 2008 22:19:14 +0000 (23:19 +0100)]
Implement a list of trusted websites and check it during authentication
Aymeric Augustin [Fri, 31 Oct 2008 21:19:33 +0000 (22:19 +0100)]
Enable the usage of an OP Identifier instead of on User Identifier
Stéphane Jacob [Thu, 30 Oct 2008 22:17:59 +0000 (23:17 +0100)]
Adds a toggle button and a larger click target to toggle people in the ML/directory synchronisation page (Closes #914). Updates ChangeLog.
Aymeric Augustin [Thu, 30 Oct 2008 22:38:39 +0000 (23:38 +0100)]
Properly advertise XRDS on /
Aymeric Augustin [Thu, 30 Oct 2008 22:14:45 +0000 (23:14 +0100)]
Re-add a proper identification provider XRDS
We're going to enable users to enter an OP identifier and not a claimed identifier
Florent Bruneau [Thu, 30 Oct 2008 21:02:06 +0000 (22:02 +0100)]
Add poison emails in the bandeau.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Thu, 30 Oct 2008 20:38:28 +0000 (21:38 +0100)]
Add /pet/ to get emails inside <a href="mailto"> tags without <html>. Fix
links in footer, add links on xnet footer.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Aymeric Augustin [Wed, 29 Oct 2008 21:11:27 +0000 (22:11 +0100)]
Advertise sreg
Aymeric Augustin [Wed, 29 Oct 2008 21:01:29 +0000 (22:01 +0100)]
Use hruid as openid identifier
Aymeric Augustin [Wed, 29 Oct 2008 20:26:27 +0000 (21:26 +0100)]
ID provider XRDS was not used in our context
Florent Bruneau [Wed, 29 Oct 2008 20:50:09 +0000 (21:50 +0100)]
Fix check_ip with invalid HTTP_X_FORWARDED_FOR.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Wed, 29 Oct 2008 09:00:17 +0000 (10:00 +0100)]
Adds pictures for new medals.
Aymeric Augustin [Tue, 28 Oct 2008 22:44:45 +0000 (23:44 +0100)]
Only allow melix alias in openid URLs when the melix alias is public
Enable the hook
Aymeric Augustin [Tue, 28 Oct 2008 22:28:59 +0000 (23:28 +0100)]
Always redirect to the canonic URL before discovery can occur
(this is a good feature)
Add an alias for the openid page based on the melix alias
(this might be a bad thing, because it provides public alias => realname resolution; the feature is inactive)
Aymeric Augustin [Sun, 26 Oct 2008 09:41:17 +0000 (10:41 +0100)]
Improve session use
Aymeric Augustin [Sun, 26 Oct 2008 09:12:18 +0000 (10:12 +0100)]
Implement Simple Registration support
TODO: determine if date of birth can be given, and if there is a sensible implementation for postcode, country, language and timezone
Aymeric Augustin [Sun, 26 Oct 2008 08:40:34 +0000 (09:40 +0100)]
Check behaviour with a testing suite, fix behaviour when denying trust
Add comments and explanations
Better respect of the spec
Aymeric Augustin [Sat, 25 Oct 2008 21:23:29 +0000 (23:23 +0200)]
Working OpenId implementation, including basic security features
Still needs code improvements, error handling, and testing
Change path for OpenId library and update Makefile
Create a spool for the OpenId library with the Makefile
Aymeric Augustin [Sat, 25 Oct 2008 12:51:31 +0000 (14:51 +0200)]
XRDS for ID provider and user
Change path to library to simplify includes
Aymeric Augustin [Sat, 25 Oct 2008 11:02:47 +0000 (13:02 +0200)]
Create an openid discovery page for each user
Aymeric Augustin [Sat, 25 Oct 2008 09:08:33 +0000 (11:08 +0200)]
Add a Makefile task to download the JanRain openid library into the include folder
Ignore that folder in git
Fix mixed space/tabs in Makefile
Vincent Zanotti [Sat, 25 Oct 2008 21:06:36 +0000 (23:06 +0200)]
Adds support of plat/al's aliases in Google Apps.
It will solve the issue of the "Sender:" header being added to outgoing mails on GoogleApps GMail.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 25 Oct 2008 17:23:59 +0000 (19:23 +0200)]
Fixes the include path for some of our scripts (platal/core split).
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Stéphane Jacob [Thu, 23 Oct 2008 19:59:08 +0000 (21:59 +0200)]
Merge commit 'origin/master' into fusionax
Conflicts:
htdocs/xorg.php
Florent Bruneau [Thu, 23 Oct 2008 18:48:43 +0000 (20:48 +0200)]
Transition code from old validation request format.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Wed, 22 Oct 2008 19:54:19 +0000 (21:54 +0200)]
Modules MUST NOT try to reproduce authentication stuff from platal.php.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Wed, 22 Oct 2008 11:09:42 +0000 (13:09 +0200)]
Typos and text improvement.
Florent Bruneau [Tue, 21 Oct 2008 07:46:27 +0000 (09:46 +0200)]
With fixed seed, change the page every month.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 22:03:16 +0000 (00:03 +0200)]
The domain of the email must be included in the poisonous source file.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Mon, 13 Oct 2008 15:55:21 +0000 (17:55 +0200)]
Displayed promotion is now linked to the primery education.
Florent Bruneau [Mon, 20 Oct 2008 21:33:12 +0000 (23:33 +0200)]
Don't get obfuscated.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 21:25:50 +0000 (23:25 +0200)]
Oops, don't activate this one.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 21:24:50 +0000 (23:24 +0200)]
Add poisonous email injector.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Sun, 12 Oct 2008 21:50:58 +0000 (23:50 +0200)]
Updates education and adapts AX data to merge them into Xorg data (Closes #891).
Florent Bruneau [Sun, 19 Oct 2008 12:40:43 +0000 (14:40 +0200)]
Add mYk's poisonous email generator.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Vincent Zanotti [Sun, 19 Oct 2008 03:15:42 +0000 (05:15 +0200)]
Merge commit 'origin/master' into fusionax
Vincent Zanotti [Sun, 19 Oct 2008 03:15:06 +0000 (05:15 +0200)]
Merge branch 'platal-0.9.17'
Vincent Zanotti [Sun, 19 Oct 2008 03:11:17 +0000 (05:11 +0200)]
Merge commit 'origin/master' into fusionax
Conflicts:
include/userset.inc.php
modules/email.php
templates/include/minifiche.tpl
templates/include/plview.trombi.tpl
templates/profile/profile.tpl
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 18 Oct 2008 17:20:37 +0000 (19:20 +0200)]
Fixes an invalid submit button in GoogleApps password change box.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 18 Oct 2008 15:01:24 +0000 (17:01 +0200)]
Update ChangeLog.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 18 Oct 2008 14:58:34 +0000 (16:58 +0200)]
Migrates hruid upgrade script to version 0.9.18.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 18 Oct 2008 14:56:46 +0000 (16:56 +0200)]
Merge commit 'origin/hruid'
Vincent Zanotti [Sat, 18 Oct 2008 14:56:11 +0000 (16:56 +0200)]
Update core.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:19:45 +0000 (16:19 +0200)]
Use last version of core.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:18:15 +0000 (16:18 +0200)]
Removes 'bestalias' and 'forlife' from the session.
This switches the hruid branch to the "let's fix things that have been broken" mode.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:17:19 +0000 (16:17 +0200)]
Converts various user of the in-session 'bestalias' and 'forlife' values to hruid.
Vincent Zanotti [Sun, 12 Oct 2008 14:13:11 +0000 (16:13 +0200)]
Converts the Platal module to hruid (mainly two FIXME).
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:12:34 +0000 (16:12 +0200)]
Converts the remaining bits of the Profile module to hruid.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 03:50:08 +0000 (05:50 +0200)]
Migrates to hruid a few pages (axletter admin, ipwatch, search).
Adds a few TODO for forlife uses that are to be fixed later.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 03:48:13 +0000 (05:48 +0200)]
Migrates the PlSet views to hruid.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 02:12:37 +0000 (04:12 +0200)]
Converts the Events module to hruid. Rewrites the birthday/stale-profile code.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 18:58:47 +0000 (20:58 +0200)]
Fixes a security hole that did allow a third party website to reuse a valid
(challenge, response) pair. This pair, obtainable externally from an approved
groupex website, enabled it to discover personal information from Xs with a
permanent/valid cookie on Xorg.
The fix forces return url to match a defined regexp; backward compatibility is
retained, though the hole won't be fixed until all entries in groupex_auth are
added a non-empty return url regexp.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 18:24:44 +0000 (20:24 +0200)]
Converts auth-groupex to hruid; this doesn't fix the problem of the 'username' value, which will soon not be translatable to a valid email address anymore.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 17:40:09 +0000 (19:40 +0200)]
Converts module Carnet to the new hruid/User model.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 17:21:03 +0000 (19:21 +0200)]
Merge commit 'origin/master' into hruid
Conflicts:
modules/email.php
templates/emails/redirect.tpl
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 17:13:06 +0000 (19:13 +0200)]
Fixes use of object User in module GoogleApps.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Stéphane Jacob [Tue, 7 Oct 2008 10:36:09 +0000 (12:36 +0200)]
Merge commit 'origin/master' into fusionax
Stéphane Jacob [Fri, 3 Oct 2008 14:19:17 +0000 (16:19 +0200)]
Finishes the interrelation of the id of both databases, the preparation of the views for the merge and the merge of
deceaced dates.
Florent Bruneau [Mon, 6 Oct 2008 15:19:16 +0000 (17:19 +0200)]
Last version of core (again).
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 6 Oct 2008 15:17:13 +0000 (17:17 +0200)]
Use last version of core.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 6 Oct 2008 15:16:22 +0000 (17:16 +0200)]
Merge branch 'platal-0.9.17'
Conflicts:
plugins/compiler.checkpasswd.php
templates/events/rss.tpl
templates/xnetgrp/announce-rss.tpl
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 6 Oct 2008 15:10:42 +0000 (17:10 +0200)]
Better fix for RSS validation.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Mon, 29 Sep 2008 19:10:57 +0000 (21:10 +0200)]
Adds promo 1920 in database.
Stéphane Jacob [Mon, 29 Sep 2008 18:09:49 +0000 (20:09 +0200)]
Some fixes and updates.
Stéphane Jacob [Sat, 27 Sep 2008 16:59:42 +0000 (18:59 +0200)]
Uses trig utilities whenever it is possible.
Vincent Zanotti [Sun, 28 Sep 2008 11:25:13 +0000 (13:25 +0200)]
Fixes hruid-incompatible changes from last merge.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 28 Sep 2008 11:14:11 +0000 (13:14 +0200)]
Merge commit 'origin/master' into hruid
Vincent Zanotti [Sun, 28 Sep 2008 10:26:54 +0000 (12:26 +0200)]
Updates the GoogleApps password, if required, when an above-10-chars password was successfuly detected and stored in the database.
Follow-up to
2b18a8ff and
79afc233.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Stéphane Jacob [Sat, 27 Sep 2008 15:48:51 +0000 (17:48 +0200)]
Adds labels around checkbox and radio inputs.
Stéphane Jacob [Sat, 27 Sep 2008 13:22:38 +0000 (15:22 +0200)]
Ajusts text for password changing according to
2b18a8ff.
Stéphane Jacob [Sat, 27 Sep 2008 13:08:17 +0000 (15:08 +0200)]
A few typos.
Florent Bruneau [Fri, 26 Sep 2008 06:35:12 +0000 (08:35 +0200)]
Don't send transition data if new_pass === old_pass.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Thu, 25 Sep 2008 19:34:49 +0000 (21:34 +0200)]
Remove MD5 -> SHA1 password transition and replace it by (10 characters -> 256 characters)
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Olivier Le Floch [Wed, 24 Sep 2008 19:15:40 +0000 (21:15 +0200)]
In the marketing administration page, fix display of marketings done by the mass-marketing script, which does not define a sender
- The query uses a LEFT JOIN in case sender is not a valid uid,
- If the sender is not found, then the template does not fill in his name in the output table.
Florent Bruneau [Tue, 23 Sep 2008 06:57:30 +0000 (08:57 +0200)]
No HTTPS for cyber_return and paypal_return.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Vincent Zanotti [Sun, 21 Sep 2008 20:24:50 +0000 (22:24 +0200)]
Merge commit 'origin/master' into hruid
Conflicts:
include/emails.inc.php
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
projects / platal.git / log