Commit Graph
34 Commits
Author SHA1 Message Date
cigamit d90b9455cb Adding additional checks for issue #867 2017-07-27 18:32:22 -05:00
cigamit 104090aeea Resolving Issue #867
Cross-site scripting (XSS) vulnerability in auth_profile.php
2017-07-20 19:02:07 -05:00
cigamit 0673e3c725 Resolving Issue #861
- The search filter does not support Cyrillic
- Also adding more __esc() to title and value attributes
- Also adding more missing i18n via audit
2017-07-19 20:16:27 -05:00
DavidLiedke c961425b67 Switch StorageAPI.js 2017-06-05 15:05:58 +02:00
Tony Roman 8a179d7d7f Fix up to move if elseif else blocks to PSR 2017-05-07 19:57:36 -04:00
cigamit d702c74242 issue: When changing your language, Cacti would not do a full page refresh
This would result in both the menu and top tabs being in the wrong
language.
2017-05-07 14:33:58 -05:00
cigamit d678a25f80 Add clog padding, and change auth_profile class for consistency 2017-05-06 05:48:55 -05:00
cigamit ff125d01cb Update all pages to include div based forms
This requires a CSS change which is going to be committed next and
separately to call out the changes required there.
2017-04-30 13:15:58 -05:00
patrick f98e6541b5 Reverting changes because $user is required. 2017-04-29 00:31:28 +02:00
Patrick b154c3e89e Optimisations for tree view
lib/auth.php:
- is_device_allowed()
  - removed unused parameter $user
- get_allowed_tree_level()
  - removed unused parameter $user
- get_allowed_tree_content()
  - removed unused paramters $sql_where, $order_by, $limit, $total_rows and $user
  - refactored the code to apply for these unused parameters
- get_allowed_tree_header_graphs()
  - removed unused parameters $order_by, $limit, $total_rows and $user
  - refactored the code to apply for these unused parameters
- get_allowed_trees()
  - removed unused parameters $edit, $sql_where, $limit, $total_rows and $user
  - refactored the code to apply for these unused parameters

lib/functions.php:
- removed get_graph_tree_array() because it's unused after refactor

lib/html_tree.php
- draw_dhtml_tree_level():
  - removed unused parameter $graphing
  - removed unused global $config
- create_dhtml_tree()
  - removed unused global $config
  - refactored get_graph_tree_array() to alias: get_allowed_trees()

auth_profile.php:
  - refactored get_graph_tree_array(true) to alias: get_allowed_trees(true)
2017-04-28 18:16:46 +02:00
patrick cc1cc7eab2 PHP7.2 changes:
- Replaced deprecated each() for foreach()
- Removed reset() calls used for each() loops
2017-04-15 18:00:13 +02:00
cigamit 8f6fa03d8d Resolving Issue #533
User settings not cleared after saving profile
2017-04-07 17:26:28 -05:00
cigamit aa97a7820e Resolving Issues #211 2017-01-16 07:45:48 -06:00
cigamit a8c560966a Correcting spelling and grammar issues 2017-01-12 19:09:16 -06:00
Tony Roman 35a5988f41 Update source code files copyright to new year 2017-01-01 13:45:29 -05:00
cigamit 4d4e92a2d1 minor syntax issues 2016-07-04 16:51:47 -05:00
Browniebraun 42bba0dd0b i18n updates 2016-04-26 22:00:52 +02:00
Browniebraun a76991ce11 take care of user defined language (see: user profile) 2016-04-04 22:08:01 +02:00
cigamit 2153b6402b make the timespan selector mandatory 2016-03-19 14:07:44 -05:00
cigamit 9f79d702f3 rename settings_graphs to settings_user, rename settings_graphs_group to settings_user_group
If you are running in development, you have to issue these two commands
rename table settings_graphs to settings_user;
rename table settings_graphs_group to settings_user_group
2016-02-14 14:26:48 -06:00
cigamit f2edfcbe53 update theme to a user setting 2016-02-14 10:48:34 -06:00
cigamit 26053b7527 replace deprecated get_request_var_post() with get_nfilter_request_var()
replace the deprecated calls and also start developer mode injection
checking
2016-02-11 16:46:14 -06:00
cigamit 2387bd4a08 removing many $_GET, $_REQUEST, and $_POST variable usage
There are still three steps to go in this overall.  The first is to
replace all the page filtering session storing and validation functions
and the second is to propagate those changes into various areas of the
lib directory that include the use of the various variables, lastly,
developer mode will have to be enable to see if there are any variables
used in the code that have not been sanitized.  Note, at this point the
develop branch should be thought of as slightly unstable
2016-02-07 12:51:49 -06:00
Linegod dabfabf219 replace ['action'] with set_default_action 2016-02-06 09:57:05 -06:00
Micke2k d188f1631d Change Copyright year 2015 -> 2016 2016-01-29 21:46:02 +04:00
cigamit 4fc14f929d Remove deprecated tags and remove inline styles
Removing <strong> in many areas
Moving inline styles to classes
2015-08-09 19:55:44 -05:00
cigamit 614ab70ad2 More inline style removal 2015-08-07 19:53:35 -05:00
cigamit 21686a1360 Allow users to clear all of their authentication tokens
Provide users to clear all of their authentication tokens.
2015-07-12 14:19:27 -05:00
cigamit e33f692d2c new form functions for ajax
add two new form functions to support ajax
move some double to single quotes
2015-06-15 00:14:43 -05:00
cigamit 017ca55c4e Major confirmation form standardization and QA phase 1
Major confirmation form standardization and QA Phase 1
New loadPageNoHeader function
Convert subTabs to use Ajax Load
Remove more inline styles
2015-05-30 12:03:05 -05:00
cigamit 63c7e79922 edit profile clear private data button
add ability to clear private data stored in local and session storage
2015-04-25 12:54:14 -05:00
cigamit 1f6ba2f2c9 This fixes some issues with Zoom and Realtime, and removes some spurious 2015-03-01 00:11:43 -06:00
Jimmy Conner 262097062d 1) Correct visibility issues with Authentication methods
2) Insure that all form spacers can be collapsible, even with visibility 
events tied to them
3) Set initial visibility of the general header to none
4) Fix auth_profile.php to behave as expected, (save,return)
5) Minor tweak to graph_settings.php
6) New button function
7) Add some core jQuery functions

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7666 860744bd-22fc-0310-8c96-e9fe5004b5ca
2015-01-04 18:03:36 +00:00
Jimmy Conner a4d8dbaf5a 1) Add user profile management page for users (save not working yet)
2) Add user email field in upgrade
3) Extend collapsible columns to more pages and sections, and soon all 
sections
4) More modern theme tweaks like form objects and calendar widget
5) Add new realm for user profile management.

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7663 860744bd-22fc-0310-8c96-e9fe5004b5ca
2015-01-04 02:16:11 +00:00