cigamit
d70f9718dc
resolve login redirect loops
...
Corner case where you have forced a password change, but have not
granted that permission to the user. We are also now blocking the save
when the user tries to make this setting.
We need better interactions with the login screen under certain failure
modes. But for now this is good enough.
2016-12-19 18:18:05 -06:00
cigamit
99f21a253d
resolving display issues with user and group realms
2016-09-01 06:17:27 -05:00
cigamit
1aa80816f2
standardize not found messaging
2016-08-31 16:23:20 -05:00
cigamit
2bae3e0365
resolving bug#2346
2016-08-28 15:57:13 -05:00
cigamit
b523f1dea5
remove addslashes, prepared statements, wc3 validation, double to single quote
...
this is required for preparation of magic_quotes_gpc.
2016-08-28 15:27:48 -05:00
cigamit
ce4f00acc9
rolling out new filter_value() function to all pages
...
additionally fixed several minor filtering bugs in many pages
2016-08-22 13:31:06 -05:00
cigamit
7f936441a6
change external link wording
2016-07-12 17:45:38 -05:00
cigamit
39af17cca8
adding external link support to cacti
2016-07-10 19:02:09 -05:00
cigamit
54d97035a2
large commit, separate table pager from tables
...
this change impacts all plugins and css. css changes are included in
this commit. plugin changes will be forthcoming.
2016-07-09 12:44:37 -05:00
cigamit
6e90fe2427
minor syntax fixes
2016-06-23 17:59:45 -05:00
cigamit
35993291a9
control the vertical size on a single action page
2016-06-18 15:19:35 -05:00
cigamit
34b5d19ce8
minor filter changes
2016-06-18 12:13:27 -05:00
cigamit
ac9fbda633
adding some aria labels for accessibility
2016-05-23 09:22:58 -05:00
cigamit
ea51a91e2e
i18n user_admin.php
2016-05-22 15:54:15 -05:00
cigamit
666be85a66
unable to save email address
2016-04-29 20:53:36 -05:00
cigamit
c399664082
rows selector consistency
2016-04-27 12:41:02 -05:00
cigamit
685e98fe23
add validation to the tab variable
2016-04-11 08:12:54 -05:00
cigamit
530836b307
minor graph perms tweak
2016-03-27 10:44:54 -05:00
cigamit
7631d9d2bc
light visual touch up in user and group management
2016-03-20 08:39:08 -05:00
cigamit
2153b6402b
make the timespan selector mandatory
2016-03-19 14:07:44 -05:00
cigamit
c707dd23fd
fixin form glitch
2016-03-09 21:21:42 -06:00
cigamit
8faf7e2463
allow cacti to maintain stronger passwords
...
If using PHP 5.5 and above, use PHP's built in password hashing and
verification functions.
2016-03-06 16:17:49 -06:00
cigamit
d5d2e74405
fix a few minor issues with latest password change
2016-03-06 15:34:34 -06:00
cigamit
56334fc980
improve admin change password behavior
2016-03-06 15:24:26 -06:00
cigamit
2362b6cca8
add permission check functions
...
if an admin changes the setting of a user or group, insure that all
logged in users get those permission changes right away.
2016-03-06 15:05:06 -06:00
cigamit
7e40b66e4b
fixin issue with user plugin realms and cleanup
...
user would loose realm permissions upon save
2016-03-06 09:44:21 -06:00
cigamit
9efa4dc505
define four standard roles
...
cleanup the permissions page
2016-02-27 15:08:29 -06:00
cigamit
c8b700abea
fixin multiple issues
...
change includes moving constant definition to global, changing
pagination presentation, correcting function name in graphs_new.php
2016-02-15 08:04:32 -06:00
cigamit
9f79d702f3
rename settings_graphs to settings_user, rename settings_graphs_group to settings_user_group
...
If you are running in development, you have to issue these two commands
rename table settings_graphs to settings_user;
rename table settings_graphs_group to settings_user_group
2016-02-14 14:26:48 -06:00
cigamit
26053b7527
replace deprecated get_request_var_post() with get_nfilter_request_var()
...
replace the deprecated calls and also start developer mode injection
checking
2016-02-11 16:46:14 -06:00
cigamit
a3875aea8a
completion of removal of $_REQUEST, $_GET, $_POST in base directory
...
the lib directory still must be updated.
2016-02-07 18:20:55 -06:00
cigamit
2387bd4a08
removing many $_GET, $_REQUEST, and $_POST variable usage
...
There are still three steps to go in this overall. The first is to
replace all the page filtering session storing and validation functions
and the second is to propagate those changes into various areas of the
lib directory that include the use of the various variables, lastly,
developer mode will have to be enable to see if there are any variables
used in the code that have not been sanitized. Note, at this point the
develop branch should be thought of as slightly unstable
2016-02-07 12:51:49 -06:00
Linegod
aeb6ae7174
correct isset_request_var
2016-02-06 11:24:45 -06:00
Linegod
8dadf2d9a9
first pass of _POST to get_request_var_post
2016-02-06 10:44:05 -06:00
cigamit
da34108e21
remove use of deprecated function get_request_var_request(). replace it with get_request_var()
...
this is part three of project to remove the use of $_GET, $_REQUEST, and
$_POST in the code. Parts one and two have already been completed.
Part one was to remove the use of $_GET throughout the code, part two
was the incorporation of wrapper functions to handle specific
validation, verification and sanitization cases. This third part will
remove the use of the get_request_var_request() from the code. Part
four, and beyond will include the removal of both $_REQUEST and $_POST
super globals from the code.
2016-01-30 15:53:08 -06:00
Micke2k
d188f1631d
Change Copyright year 2015 -> 2016
2016-01-29 21:46:02 +04:00
cigamit
671579002a
Resolve more issues with csrf magic
...
After the inclusion of pace.js, csrf magic does not properly interact
with $.post(). This is a workaround.
2015-11-14 12:07:04 -06:00
cigamit
4fc14f929d
Remove deprecated tags and remove inline styles
...
Removing <strong> in many areas
Moving inline styles to classes
2015-08-09 19:55:44 -05:00
cigamit
3cfb59d166
Allow 'password_change' to be saved. Correct validation logic
...
Allow 'password_change' setting to be saved. Correct password
validation logic in form. Clear passwords in form on page
initialization.
2015-08-09 08:14:59 -05:00
cigamit
4547bdafc0
Resolving issues with password management
...
Create a 'Change Password' user option in user_auth table
Don't show 'Change Password' unless user is in Local realm and has
permission
Move $auth_realms function to a library call
Add message when a user attempts to access auth_changepassword.php
incorrectly
2015-08-08 22:28:37 -05:00
cigamit
614ab70ad2
More inline style removal
2015-08-07 19:53:35 -05:00
cigamit
edb2ac0d41
Fixing broken pages due to ajax implementation
...
Moving to Ajax rendering causes some pages to break. Fixing.
2015-08-02 16:39:20 -05:00
cigamit
52f5c0d093
More inline style removal
...
Removing more inline styles
2015-08-02 09:02:40 -05:00
cigamit
c6b7666f8b
Remove several inline styles and non html5 compatible attributes
...
Remove several inlines styles and replace with css
Remove several non-HTML5 attributes
Correct title/alt on image objects
2015-08-02 08:18:15 -05:00
cigamit
8350a5f88e
Unable to save Users and Groups
...
Correcting some issues with users and groups based upon header and HTML5
changes
2015-07-27 18:41:19 -05:00
cigamit
e91b163e56
syncing with 0.8.8e SVN repository
...
syncing changes with upcoming 0.8.8e release.
2015-07-05 21:56:38 -05:00
cigamit
4e4dd6784a
improve the processing of selected_items
...
improve the processing of selected_items to guard against sql injections
2015-06-17 07:05:53 -05:00
cigamit
e33f692d2c
new form functions for ajax
...
add two new form functions to support ajax
move some double to single quotes
2015-06-15 00:14:43 -05:00
cigamit
1cdb8dab9a
Major confirmation form standardization and QA phase III
...
HTML5 requires sane forms. Let's make all forms sane then.
2015-05-30 21:49:03 -05:00
cigamit
d4b5c8d300
Major confirmation form standardization and QA phase II
...
Add table form action ajax
Fix alignment in reporting
Add jQuery form manipulation in reporting
2015-05-30 15:32:23 -05:00
cigamit