14 Commits

Author SHA1 Message Date
plegall
20c2586d42 (cp ab46632) Revert "Include pwg_token in user list POST request (Fixes #748) (#866)"
This reverts commit 65ac272179.
2019-04-02 14:08:14 +02:00
plegall
90243ddb0c (cp 65ac272) Include pwg_token in user list POST request (Fixes #748) (#866)
* user list: set pwg_token in POST data to user_list_backend.php

The POST data for the user data table request was empty, which could
cause user data retrieval to error out with HTTP 403 due to missing
the authentication token.

* user_list_backend: fix uninitialized variables

If iSortCol_0, sEcho, or sSearch are unset in the HTTP request, it
could cause variables to be uninitialized, potentially causing error
messages to be included in the HTTP response. These error messages,
if present, can prevent the JSON response from being parsed.

* user list: delete unnecessary quotes

Javascript object key names don't generally need to be quoted.
Remove some quotes that were introduced by a recent change that added
a body to the AJAX POST request to retrieve the user list.
2018-07-06 10:52:47 +02:00
plegall
33a03e9afb (cp 1da9d6a) fixes #823 add input user check to avoid SQLi on users list 2017-12-18 14:06:28 +01:00
plegall
42920897ce (cp 6ce14fc) fixes #705, check user_list_backend.php input params 2017-06-13 12:32:49 +02:00
plegall
c789347c51 happy new year 2016, all headers updated 2016-01-14 12:17:58 +01:00
plegall
393b1b38ef merge r27996 from branch 2.6 to trunk
bug 3065 fixed: avoid SQL errors with external authentication



git-svn-id: http://piwigo.org/svn/trunk@27997 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-03-28 13:26:30 +00:00
plegall
6aa62e8613 merge r27836 from branch 2.6 to trunk
bug 3053 fixed: columns "groups" and "privacy level" come back in Piwigo 2.6
user manager (which still needs improvement on filtering options...)



git-svn-id: http://piwigo.org/svn/trunk@27837 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-03-18 22:23:38 +00:00
mistic100
bbb59ee3f9 add two triggers and user_list_backend.php and don't fail on unknown column
git-svn-id: http://piwigo.org/svn/trunk@26618 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-01-11 13:08:26 +00:00
mistic100
636650309a Update headers to 2014. Happy new year!!
git-svn-id: http://piwigo.org/svn/trunk@26461 68402e56-0260-453c-a942-63ccdbb3a9ee
2014-01-05 00:19:25 +00:00
plegall
09a00911c2 feature 1668: protect dataTables backend script (ajax called, serverside processing)
git-svn-id: http://piwigo.org/svn/trunk@26050 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-12-20 12:59:07 +00:00
plegall
76315b650c feature 1668: translate user status in user list
git-svn-id: http://piwigo.org/svn/trunk@26049 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-12-20 12:36:59 +00:00
rvelices
7726147445 - ws users/groups/perms returns int instead of strings for ids
- fix ws permissions getList (sometimes got objects sometimes arrays)
- users_list data table uses POST (avoid extra lengthy urls)

git-svn-id: http://piwigo.org/svn/trunk@25545 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-11-18 05:03:00 +00:00
plegall
146ee8c26f feature 1668: new display of userDetails, manage group list in user details,
display registration date in user list.

work in progress, not finished yet.


git-svn-id: http://piwigo.org/svn/trunk@25475 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-11-13 14:40:00 +00:00
plegall
2fdcfdddfe feature 1668, in progress: redesign user manager (jQuery datatables, AJAX calls)
git-svn-id: http://piwigo.org/svn/trunk@25194 68402e56-0260-453c-a942-63ccdbb3a9ee
2013-10-28 16:25:46 +00:00