Commit Graph

762 Commits

Author SHA1 Message Date
Evan Prodromou
858e55f5b4 change how Foreign_link fetches, and fix mixup between user-ids and foreign-ids in twittersettings
darcs-hash:20080923054413-5ed1f-a317e07925101215e87d2db0c574d20c1cfac665.gz
2008-09-23 01:44:13 -04:00
Evan Prodromou
44f7dc2a76 403 for a message that isn't yours.
darcs-hash:20080923050637-5ed1f-c568033b5c00ac32d9ad63b5a4d18a81c09ad525.gz
2008-09-23 01:06:37 -04:00
Evan Prodromou
d2fb829296 CSRF protection in newmessage.php
darcs-hash:20080923031419-5ed1f-5435509496b882de27d4c3acca4697cc410ee7be.gz
2008-09-22 23:14:19 -04:00
Evan Prodromou
6e646570de Fix quotes in favorite notification
darcs-hash:20080922232328-5ed1f-846910a5f0bb379130055d035c3686e3e639912d.gz
2008-09-22 19:23:28 -04:00
Evan Prodromou
c060a84c5b check for cur before message link
darcs-hash:20080922225620-5ed1f-0dd8e76bcb8850744040e234e04b3182a0e13add.gz
2008-09-22 18:56:20 -04:00
Evan Prodromou
ac60342e89 merge CiaranG's changes for subs
darcs-hash:20080922225031-84dde-c6967f46ae642f8943b0de77d9a82892ecadb4ce.gz
2008-09-22 18:50:31 -04:00
Evan Prodromou
d73ed53535 don't notify you favor your own notice
darcs-hash:20080918152823-5ed1f-bc7bea3305c39cfbc41f4a116b9a602ada556365.gz
2008-09-18 11:28:23 -04:00
Evan Prodromou
bd828b9fc7 add favor/disfavor to profile
darcs-hash:20080918152612-5ed1f-5ce8b0a834ffa50e04d6b47d1cac4c4b94f28e9e.gz
2008-09-18 11:26:12 -04:00
Evan Prodromou
054b4d0be6 if favor/disfavor submitted through ajax, return micro-html of form
darcs-hash:20080918135608-5ed1f-d753cb01f96e04871eb4f503ccd258674a03623a.gz
2008-09-18 09:56:08 -04:00
Evan Prodromou
560cab3427 remove tabs from showmessage
darcs-hash:20080918025713-5ed1f-8bb2f106a567ef657a314f800da32efb7409ce2b.gz
2008-09-17 22:57:13 -04:00
Evan Prodromou
ff5f0a15a6 more id -> message shenanigans
darcs-hash:20080918025543-5ed1f-c017a351fce611516b18d64724ee2d7977a0bd47.gz
2008-09-17 22:55:43 -04:00
Evan Prodromou
d5b4dbbca3 fetch -> find
darcs-hash:20080918025232-5ed1f-825b72c981ee5e03391d5c84eca5dc4f9805227c.gz
2008-09-17 22:52:32 -04:00
Evan Prodromou
35bf8d7eaf return correct data structure for messages in showmessage
darcs-hash:20080918023032-5ed1f-e8789b391eb88a181bb6232a5e5f199b0ccb2098.gz
2008-09-17 22:30:32 -04:00
Evan Prodromou
8ef9d9d0cc no instructions for 'to' dropdown
darcs-hash:20080918022410-5ed1f-0c4f5ca478246d4d8e56a0b71419d179ea66ff2b.gz
2008-09-17 22:24:10 -04:00
Evan Prodromou
892132549e change id of message textarea
darcs-hash:20080918021926-5ed1f-93d05fdd25606664a619e027178d188a46cbde83.gz
2008-09-17 22:19:26 -04:00
Evan Prodromou
edc11b1157 rearrange paragraphs in message form
darcs-hash:20080918021727-5ed1f-ad74f71450db27e587b04fe19dfbbaf51f4d0300.gz
2008-09-17 22:17:27 -04:00
Evan Prodromou
671282fcd5 some minor fixes for new messages
darcs-hash:20080917192121-5ed1f-15603b7f7d5246caed3e1633cc3361e1288d8653.gz
2008-09-17 15:21:21 -04:00
Evan Prodromou
823737891b fix titles in showmessage
darcs-hash:20080917190745-5ed1f-c9305b7ee5f4cd79524491e8e0d676cf42f6ebc1.gz
2008-09-17 15:07:45 -04:00
Evan Prodromou
24496bafd2 skip over Mailbox::handle to Action::handle
darcs-hash:20080917190445-5ed1f-4fdf97356c40eb076185eff790ce0d34b5117699.gz
2008-09-17 15:04:45 -04:00
Evan Prodromou
46965a816d not a nickname so don't canonicalize
darcs-hash:20080917185723-5ed1f-1795b591692f804df3140012af69560aa8204b77.gz
2008-09-17 14:57:23 -04:00
Evan Prodromou
f65039212d to parameter is an ID not a nickname
darcs-hash:20080917185142-5ed1f-1f87afb283161609bfc202824a39c53f3239b716.gz
2008-09-17 14:51:42 -04:00
Evan Prodromou
e42de1ccc1 fancy urls for show message, new message
darcs-hash:20080917180244-5ed1f-06e2ac2d8f094eacd12b316794b0599b57d76596.gz
2008-09-17 14:02:44 -04:00
Evan Prodromou
ae6ba61d43 don't show message link on your own page
darcs-hash:20080917175512-5ed1f-0242ead7766806165266e424ed6d1cb9dd19abca.gz
2008-09-17 13:55:12 -04:00
Evan Prodromou
124762160a add new message link to showstream
darcs-hash:20080917175356-5ed1f-5a84dc8363d7c1dbf60a82782aefe5a0bd6f3d59.gz
2008-09-17 13:53:56 -04:00
Evan Prodromou
130ba28886 newmessage and showmessage
darcs-hash:20080917174741-5ed1f-c090055487bab0df52d25ad6550d3850ef5f7661.gz
2008-09-17 13:47:41 -04:00
CiaranG
1c3afaea89 Fix missing nickname in rss replies to title
darcs-hash:20080915190953-f6e2c-40510d7407ccb621680489780dec79e581e59d1c.gz
2008-09-15 15:09:53 -04:00
CiaranG
3632a76773 PostgreSQL: support for full text searching (notice and people)
darcs-hash:20080914201744-f6e2c-71b2a3aec4c0b91557465323d79645e7eab2bfd1.gz
2008-09-14 16:17:44 -04:00
CiaranG
b13233fed4 PostgreSQL: Make tag cloud query work - also fixes what is surely an ignored error in the mysql query
darcs-hash:20080911192348-f6e2c-b846b777b382386de56ca01d957dc5e55161fced.gz
2008-09-11 15:23:48 -04:00
CiaranG
ce2eaf84aa Fix unquoted array key, causes b0rkage on some php setups (via @bopuc)
darcs-hash:20080911163558-f6e2c-ae857f68936ed4328d4e38323f7e77ce25a0236a.gz
2008-09-11 12:35:58 -04:00
CiaranG
e322732bd3 Fix remote sub when redirected via login (Ticket #618)
darcs-hash:20080909202259-f6e2c-8c7e836fd1f0ce9de3ea3802161e1068e346e5dd.gz
2008-09-09 16:22:59 -04:00
Zach Copley
2fcc9ff65f Twitter integration - wording change
darcs-hash:20080907063339-7b5ce-bce7b96763adcac5746b1b4d930b636ae0852491.gz
2008-09-07 02:33:39 -04:00
Zach Copley
9eca4e0874 Fold password form into profile settings
darcs-hash:20080907053604-7b5ce-4e01cefdbab4cc73a28960b265c23abf5e2f2b0a.gz
2008-09-07 01:36:04 -04:00
Zach Copley
4f19a9462c Moved avatar upload down below timezone on profile settings
darcs-hash:20080906070651-7b5ce-23c17932cc9c474dfbeb530d29b1bd1adb3a4260.gz
2008-09-06 03:06:51 -04:00
Zach Copley
4f1c30fd88 Conflated Avatar and Profile settings + removed a bunch of unnecessary whitespace
darcs-hash:20080905194732-7b5ce-2797acd4d04f3b02c4ad67be629badbae469e8ed.gz
2008-09-05 15:47:32 -04:00
Zach Copley
6c4dc071bf CSRF protection in twittersettings.php
darcs-hash:20080829045724-7b5ce-66fdc5e54155012e41eb09c6a41bc94619bf520f.gz
2008-08-29 00:57:24 -04:00
Zach Copley
a637f36214 CSRF protection for invites.php
darcs-hash:20080829045441-7b5ce-a1382496d8d6b043a1a72c0fb32051f1b43163c8.gz
2008-08-29 00:54:41 -04:00
Zach Copley
bf14709fe2 Twitter integration - support for new foreign_link table and prefs now save/update
darcs-hash:20080828072205-7b5ce-16510357343f1d9a3acc696f39a28a723005f3a4.gz
2008-08-28 03:22:05 -04:00
Zach Copley
f5c9a6ebcf Twitter integration - decided to change Twitter to service ID #1
darcs-hash:20080827021635-7b5ce-9b96743999aa85a505aecd5f25867937f0c34434.gz
2008-08-26 22:16:35 -04:00
Zach Copley
3cf6cef9b9 Twitter integration - Foreign_user::getForeignUser() to retrieve
Foreign_user by multi-part key: user_id + service

darcs-hash:20080827005444-7b5ce-2b53a2c1a917539248b68f21f94e0f9f5fe810f2.gz
2008-08-26 20:54:44 -04:00
Zach Copley
803bdff3f6 Twitter integration - Add and remove Twitter accnt now working
darcs-hash:20080827000327-7b5ce-453aad833576b9c76e19b8aa3ba34b24203dd377.gz
2008-08-26 20:03:27 -04:00
zach
661202be3e Twitter-integration - Twitter settings tab now saves Twitter credentials
darcs-hash:20080826225615-462f3-8d881eda7be43623e10b83e8d1e157f4096734cd.gz
2008-08-26 18:56:15 -04:00
zach
a90b556e21 Twitter integration - Oh look, a Twitter settings tab.
darcs-hash:20080822034157-462f3-398e2ba92d9c38520ea6518c3ff614b41f3cc7ec.gz
2008-08-21 23:41:57 -04:00
Evan Prodromou
92d6ae6fae correct title on inbox and outbox
darcs-hash:20080916200942-84dde-257499b7cbc4553d3f4cf5c0eafc891b860a53b8.gz
2008-09-16 16:09:42 -04:00
Evan Prodromou
827fdc63a0 instructions for inbox and outbox
darcs-hash:20080916200703-84dde-4984552dfc6865f6660d45670af6e3dc56395ff5.gz
2008-09-16 16:07:03 -04:00
Evan Prodromou
7416e50daa inbox and outbox for direct messages
Added an inbox and outbox for direct messages.

Factored common code to mailbox.php. Factored common code with
stream.php to personal.php.

darcs-hash:20080916195346-84dde-b5c846f713a970c41fd1b0671cb333e91f3cb920.gz
2008-09-16 15:53:46 -04:00
Evan Prodromou
dd4c0ebaa8 correct action for showfavorites in disfavor
darcs-hash:20080908182716-84dde-fad2159212dd427d596a8ace7aa4032be8446799.gz
2008-09-08 14:27:16 -04:00
Evan Prodromou
59ef19b7d3 fix requires in dis/favor and correct url in form
darcs-hash:20080908182559-84dde-27b288efd341a4dd148abb641064d9e48ca2aa11.gz
2008-09-08 14:25:59 -04:00
Evan Prodromou
a8a3667774 initial non-Ajax version of favorites
darcs-hash:20080908181624-84dde-8200e1d91eb5f560ef0f296c9e1c56f93ef1b0c5.gz
2008-09-08 14:16:24 -04:00
Evan Prodromou
75f285ddf6 merge in changes for CSRF, too
darcs-hash:20080830162223-84dde-573e490dc4fde68512ea4ec28599019d2740cfcf.gz
2008-08-30 12:22:23 -04:00
CiaranG
bfb22a9932 XMPP daemon updates including help, sub and subsub commands, plus subscribe/unsubcribe logic broken out into standalone module for sharing
darcs-hash:20080816083422-f6e2c-fb8b4e0581719bd8c3f433e661ec9742e1b84cbc.gz
2008-08-16 04:34:22 -04:00
Evan Prodromou
9bff7c9a76 removed the preview, so use "Send" for the button
darcs-hash:20080827011921-84dde-622d4c8eab1b05ce999bba4554b85c08a5840c79.gz
2008-08-26 21:19:21 -04:00
Evan Prodromou
c55e3089c5 fix format string, again again
darcs-hash:20080827010138-84dde-db15d5a4408a9cca08822b4c4946e2dfc60ea3db.gz
2008-08-26 21:01:38 -04:00
Evan Prodromou
37991eace8 lost the names when making a new function send_invitation
darcs-hash:20080827005418-84dde-7e7a4be646c520542e8c065ba90ba759c100b481.gz
2008-08-26 20:54:18 -04:00
Evan Prodromou
ebf5d52f74 send personal message through to send_invitation function
darcs-hash:20080827005155-84dde-02a097e286800519fe5294cb7005ead533db478f.gz
2008-08-26 20:51:55 -04:00
Evan Prodromou
0ce9b20566 fix runon string in invites format
darcs-hash:20080827004854-84dde-a558664ac7f02ff319e3c29ac4516f491abef29a.gz
2008-08-26 20:48:54 -04:00
Evan Prodromou
6a57f42606 fix format for subject
darcs-hash:20080827004755-84dde-d3275abf281b1d4790806357d3d0bcba634f28f3.gz
2008-08-26 20:47:55 -04:00
Evan Prodromou
b158658caa save invitation code and improve format of outgoing mail
darcs-hash:20080827004410-84dde-226101a8482f511ff9df7546342f84dd94ceca54.gz
2008-08-26 20:44:10 -04:00
Evan Prodromou
11be8376dd correct output on invitations
darcs-hash:20080827003529-84dde-614dc517061e76d180823c0aaf3fc9f434f6480c.gz
2008-08-26 20:35:29 -04:00
Evan Prodromou
e248066b74 updates for invitations
Add the code to registration to handle invitation codes.

Some edge cases on invitations: is the user already subbed to this
person? Tell them. Is the person already on the system? Sub the user
to them, then, and tell the user.

Add some code to User to auto-sub invitees whenever the email address
changes. Call it from a new registration with an invite code, and also
from confirmaddress.

Some whitespace cleanup in the files touched.

darcs-hash:20080827001927-84dde-b50e5d921ca3f2fb894821730ff93cac09d2ba66.gz
2008-08-26 20:19:27 -04:00
Evan Prodromou
19614f33a4 skip preview, just send the darn thing
darcs-hash:20080826021227-84dde-22f709bf330bcfa46b93eadd11700723bf640a6b.gz
2008-08-25 22:12:27 -04:00
Evan Prodromou
1e78f020e9 fix instructions
darcs-hash:20080825193738-84dde-d58e63ee015a52ccf065d17a2fc16d2d1899f805.gz
2008-08-25 15:37:38 -04:00
Evan Prodromou
55fe8f8ff8 start the invite form
darcs-hash:20080825192946-84dde-c48e79699e5c0bc51ce5ab1fa921c49abbf2c4f5.gz
2008-08-25 15:29:46 -04:00
Evan Prodromou
a64330b77c blow subscriptions cache when the user deletes a notice
darcs-hash:20080920175339-84dde-e46d0e7b86e0752e8331cdfba26257b3ff9e601c.gz
2008-09-20 13:53:39 -04:00
CiaranG
95d9920d78 Fix typo in finishremotesubscribe
darcs-hash:20080904201921-f6e2c-44a5fc1dbf699b9c2b6919eaabd7db12c7c65ef8.gz
2008-09-04 16:19:21 -04:00
Evan Prodromou
9078e95e5f fix bad args in postnotice for new notices
darcs-hash:20080904195720-84dde-f286bfe898ef3e08f07fd977bfe692e9cff6c375.gz
2008-09-04 15:57:20 -04:00
CiaranG
fff677e6c4 Resolve remote subscribe and omb problems with quotes (Tickets #604 and #567)
darcs-hash:20080904065504-f6e2c-f0c770f52624e7151a93f2ed2b8813657ca88c14.gz
2008-09-04 02:55:04 -04:00
Garret Buell
4d1528734d RequirePassword
Require a password with at least 6 characters when registering.

darcs-hash:20080830195036-e3c0d-6b4cac221674240e1a8383675b69863f54dd2525.gz
2008-08-30 15:50:36 -04:00
Evan Prodromou
44f02dd9c1 move broadcast in OMB postnotice for bad case
darcs-hash:20080828221420-84dde-713f564d28d2e548a09a325443b37d6dc1e9a7e7.gz
2008-08-28 18:14:20 -04:00
Evan Prodromou
adeb19f1f7 clean up username entered at login
darcs-hash:20080829225258-84dde-6fee5f0beea62f023c13436b8d7044241bc0d01a.gz
2008-08-29 18:52:58 -04:00
Zach Copley
9fb08ec45e CSRF protection in remotesubscribe
darcs-hash:20080829054038-7b5ce-d0503a8eb7f89a9d2de4aadd4550f4342b943b09.gz
2008-08-29 01:40:38 -04:00
Zach Copley
a034e13bf0 CSRF protection in emailsettings
darcs-hash:20080829053337-7b5ce-6d94638c57d185e5d44e02ad458593a3f4de36d9.gz
2008-08-29 01:33:37 -04:00
Evan Prodromou
2dc50d7e37 CSRF protection in user registration
darcs-hash:20080829054017-84dde-c9268e5c815934dcbca2451dd6c9016f2ac4a03a.gz
2008-08-29 01:40:17 -04:00
Zach Copley
47726844a0 CSRF protection in recoverpassword
darcs-hash:20080829052824-7b5ce-39a8fd299b7a85793ad7a19fe00c93813ca882b6.gz
2008-08-29 01:28:24 -04:00
Evan Prodromou
98e941753b session token in userauthorization form
darcs-hash:20080829052847-84dde-a64918a75f8300ec8fb230202881691066147652.gz
2008-08-29 01:28:47 -04:00
Evan Prodromou
63438008e0 csrf protection in userauthorization
darcs-hash:20080829052732-84dde-0ebb7e32236b480cc3aa2eb7a4bb2b41ff6177d6.gz
2008-08-29 01:27:32 -04:00
Evan Prodromou
9b741c4f9a better client error on CSRF problem with subscribe/unsubscribe
darcs-hash:20080829051628-84dde-2a339a35c422afb9ec04f757771764ed43b2c28b.gz
2008-08-29 01:16:28 -04:00
Evan Prodromou
4272da4e9e CSRF protection for subscription/unsubscription
darcs-hash:20080829051104-84dde-9bd23c28c2c8a720046060a33ff3e5f246c47116.gz
2008-08-29 01:11:04 -04:00
Zach Copley
2e239e3fbb CSRF protection in imsettings.php
darcs-hash:20080829035707-7b5ce-69a9ff98390ff8b9671ede948d78fdb37371aac6.gz
2008-08-28 23:57:07 -04:00
Zach Copley
6be7cbc5cd CSRF protection in smssettings.php
darcs-hash:20080829035118-7b5ce-57613e88b29617ea422c7f7003e81ef885e3debb.gz
2008-08-28 23:51:18 -04:00
Evan Prodromou
6afb7f576e add csrf protection to profile settings
darcs-hash:20080829043909-84dde-c70a633c93ab89560bc300817bda66eebf6176cf.gz
2008-08-29 00:39:09 -04:00
Evan Prodromou
9a65f45c45 CSRF protection in openidsettings
darcs-hash:20080829042908-84dde-1d1a22dfd3d89c5521aeb9069dc64c5f6dad3a27.gz
2008-08-29 00:29:08 -04:00
Evan Prodromou
d0a466bdb7 swap around some stuff to show the form correctly on a CSRF error in openidlogin
darcs-hash:20080829040925-84dde-7195734eeb3df6439c099c1139caf77e2c2ea3c1.gz
2008-08-29 00:09:25 -04:00
Evan Prodromou
42a6492152 CSRF protection for OpenID form
darcs-hash:20080829035934-84dde-cf36fd802bed76fdf15ac39b838494a414d5cc1e.gz
2008-08-28 23:59:34 -04:00
Evan Prodromou
d6dd35a66a add a token for CSRF avoidance
darcs-hash:20080829034854-84dde-a636b446dc254aaa77ac65f63be01e49c192bf32.gz
2008-08-28 23:48:54 -04:00
Evan Prodromou
93e67c7133 show error in delete notice
darcs-hash:20080829025559-84dde-bd29b5e6750a1ff72bd39e8e76bde325b0313fb8.gz
2008-08-28 22:55:59 -04:00
Evan Prodromou
dd55916d56 CSRF protection in deletenotice
darcs-hash:20080829025127-84dde-b3e2eb64b7dd8302037f471f6dba6949e2e15ecc.gz
2008-08-28 22:51:27 -04:00
Evan Prodromou
d3c86d0016 add CSRF protection to avatar
darcs-hash:20080829023919-84dde-38e4bf6bddc120a221af5f856d9f88b7a532096b.gz
2008-08-28 22:39:19 -04:00
Evan Prodromou
d146355875 return after failed token
darcs-hash:20080829023731-84dde-8920bbaf1e1f171829d0acff3f89ec987deb6368.gz
2008-08-28 22:37:31 -04:00
Evan Prodromou
ff566a149d add session token check to password change
darcs-hash:20080829014515-84dde-bce51f66ba0b3b4347a55a70b2b266b72c242304.gz
2008-08-28 21:45:15 -04:00
Evan Prodromou
b1ff7d7a2b fix error storing uris of remote notices
darcs-hash:20080826211108-84dde-b277bdb1476b9cec0c0d93fa8d565c4642ba16c8.gz
2008-08-26 17:11:08 -04:00
Evan Prodromou
3fda5a684f notify user of remote subscriptions
darcs-hash:20080824200517-84dde-9662d89dbcd948e3ef7b7f8d4e82d90b4891c684.gz
2008-08-24 16:05:17 -04:00
Evan Prodromou
a20a038542 be a little more liberal for sites that accidentally put whitespace before the xml decl
darcs-hash:20080824013803-84dde-9c5d9ce9c588cfb9baddae64366e3417f0a5fee9.gz
2008-08-23 21:38:03 -04:00
Evan Prodromou
7d6e1bb47f request token is not readonly
darcs-hash:20080824011706-84dde-bf35373c3bfc631f8285f8630155195c3c5cc304.gz
2008-08-23 21:17:06 -04:00
CiaranG
92645bbc57 XMPP sub/unsub and help commands
darcs-hash:20080822191032-f6e2c-a3a7efbbaad1ec7c48ef132a8ba34fc8b8651969.gz
2008-08-22 15:10:32 -04:00
Evan Prodromou
ea40dabb39 better error reporting in user authorization action
darcs-hash:20080822212111-84dde-2770093fcfaa6fe03abb1143d3828f0622382b45.gz
2008-08-22 17:21:11 -04:00
Evan Prodromou
a91cd75c17 local-only is optional on public timeline
darcs-hash:20080822210307-84dde-c90f6e7953d11c5b12c7a084ac23e5578412932c.gz
2008-08-22 17:03:07 -04:00
zach
0b87bf6c54 Twitter-compatible API - RESTfulness checks as per Twitter
darcs-hash:20080819214923-462f3-83ab492cb93c1ba643beb70853578cbd7ac35d61.gz
2008-08-19 17:49:23 -04:00
zach
9c29b9ad62 Twitter-compatible API - /statuses/show - better err msg if notice doesn't exist
darcs-hash:20080819202318-462f3-bc08a105c6b41b6a89a2358962440f68a9a79c7f.gz
2008-08-19 16:23:18 -04:00
zach
e980ebc714 Twitter-compatible API - Added /statuses/followers to methods that
require bareauth only if no nickname/id is supplied.

darcs-hash:20080819195431-462f3-93d27cf980fd09aeb30ea741639c1650baecad60.gz
2008-08-19 15:54:31 -04:00
zach
55f5bea21e Twitter-compatible API - /statuses/destroy method implemented
darcs-hash:20080819194610-462f3-eb736e4cfc817b479e1e8e52db03b5f44cdb3d2a.gz
2008-08-19 15:46:10 -04:00