c33940f64a
Moved permission checks to Authenticator class
2018-12-02 12:53:31 +01:00
944c29b964
Require POST for sending forms
...
* Ensure that the form is submitted with a post request
* Replaced several links with forms
Closes #494 (Security Vulnerability)
2018-11-21 19:24:36 +01:00
88f3bafa5e
Replaced `Auth()` with `auth()`
2018-10-31 13:43:23 +01:00
a2aaba9cab
User: Bugfixes & code cleanup
2018-10-31 13:43:23 +01:00
d7aea575ff
Replaced more sql queries and old data
2018-10-31 13:43:23 +01:00
4e09ee3eb2
Replaced more user related stuff
...
(Contains some buggy stuff too...)
2018-10-31 13:43:23 +01:00
7c6afc2bfe
Removed `User($id)` function 🎉
2018-10-31 13:43:23 +01:00
89e62c95a7
Changed more functions 🎉
2018-10-31 13:43:23 +01:00
b069a938c6
Changed user_link and some other user functions to use the user id
2018-10-31 13:43:23 +01:00
2dcb7cc2de
Replaced some global `$user` variables
2018-10-31 13:43:23 +01:00
b443b53919
Translation: added pluralization support
2018-10-30 22:50:22 +01:00
7f61dc95be
EventConfig: Merge event configuration from database to global config
2018-10-30 21:13:56 +01:00
d0abc27c07
Merge remote-tracking branch 'MyIgel/translations'
2018-09-15 14:58:31 +02:00
e8f8fc7f5f
Replaced gettext translation `_()` with `__()` that uses the Translator class
2018-08-29 23:46:32 +02:00
1090d5e889
Update shifts_controller.php
...
fix problem when missing needed angeltype entry
2018-08-28 18:28:09 +02:00
d6c8f1a614
Merge branch 'master' to 'rebuild-database'
2018-08-20 21:07:57 +02:00
6dbec2e2fb
remove unused code
2018-01-28 14:52:26 +01:00
646ffc1910
$bugfixes...
2018-01-14 18:50:37 +01:00
5227fe6a94
Formatting
2018-01-14 18:09:34 +01:00
fe58e4f422
database: updated checks for selectOne
2018-01-14 17:47:26 +01:00
c961269bb7
better hour formatting
2017-12-30 12:07:10 +01:00
ee9fbda098
add work date to work log
2017-12-29 18:57:11 +01:00
86a38a3372
add user work log entries feature
2017-12-29 17:19:27 +01:00
3993e553d1
small improvements of user view
2017-12-29 13:12:56 +01:00
b59d17918e
small improvements of user view
2017-12-29 13:09:35 +01:00
c3b8fa892d
tshirt-score for forced active
2017-12-27 20:30:05 +01:00
b00743d6d3
Formatting
2017-12-27 13:50:53 +01:00
1e8f0c4845
fixes #208 , fixes #310 : T-Shirt Score™ should be shown on the user view page below your shifts
2017-12-27 12:24:55 +01:00
abf4b1da30
check if logged in before sign up
2017-12-27 11:35:26 +01:00
f8d0a7c5b0
Updated translation / Formatting / Test
2017-12-26 00:21:44 +01:00
75eea1681e
Removed dead function call
2017-12-25 23:51:15 +01:00
952c7892f3
Formatting & Docstrings
2017-12-25 23:51:15 +01:00
a6cf4c9ce9
spelling fixes
2017-12-25 21:29:00 +01:00
5f34e15712
fix broken public dashboard shift links
2017-12-23 22:49:56 +01:00
fbbea4eb5f
add show on dashboard flag for angeltypes
2017-12-23 11:59:13 +01:00
2c04e35bed
introduce new shift signup state for not arrived angels
2017-12-20 23:05:46 +01:00
7a3bdda483
rewrite controller for creating shift entries
2017-12-20 00:54:57 +01:00
1289101f6e
rewrite controller for creating shift entries
2017-12-20 00:42:58 +01:00
afd7c59d1d
fix shift entry delete
2017-12-19 22:24:06 +01:00
fd85034e7f
redo shift signoff and icons for delete/confirm/acknowledgment questions
2017-12-19 20:58:01 +01:00
567ed9ebd2
remove flags since they do not belong to language selection
2017-12-19 19:17:50 +01:00
769d8c4af9
better logging of needed angeltypes for shifts and rooms
2017-12-17 13:22:29 +01:00
c70e268a2e
add fullscreen button to dashboard and update translation to german
2017-12-13 17:50:52 +01:00
5278be1f0f
add link to public dashboard from shift view
2017-12-13 12:53:07 +01:00
ff94df53d6
finish basic public dashboard
2017-12-12 21:57:57 +01:00
74f3677f19
add quick+dirty public dashboard
2017-12-11 22:26:36 +01:00
4143680297
remove room number and visible flag, rename pentabarf to frab and introduce map/c3nav integration as well as markdown description for rooms
2017-12-10 15:02:37 +01:00
32d14f493b
Fix sign-up to shifts by supporter
...
Any user with the `shiftentry_edit_angeltype_supporter` privilege was
able to sign up any users of the correct angeltype to any shift that
they could sign up themselves because the shift entry controller only
checks for the global privilege an not the fact that the user is indeed
supporter for the angeltype in question.
2017-12-07 18:52:07 +01:00
e7d605c6d9
fix log on confirming angels
2017-12-02 14:44:41 +01:00
e54a10b816
add shift calendar to angeltype view fix tab jumps
2017-11-24 12:09:28 +01:00
928e707015
add shift calendar to angeltype view
2017-11-24 12:01:19 +01:00
d8476f244d
complete feature contact info for angeltypes, fixes #275
2017-11-24 10:02:52 +01:00
deae2a1721
fix removing users from shift, fixes #359
2017-11-19 14:52:55 +01:00
50f24271eb
fix all redirects to home (because of new urls redirect to ? wont work anymore)
2017-11-19 10:45:08 +01:00
e9a28eb20e
fix log message from changing event config
2017-11-19 10:32:21 +01:00
db8b6b2520
change shift renderer global add user link
2017-09-16 17:14:45 +02:00
96f1d9fd54
Bugfixes
2017-08-30 15:35:12 +02:00
d0074cf006
Merge remote-tracking branch 'engelsystem/feature-igel-rewrite'
...
# Conflicts:
# includes/controller/angeltypes_controller.php
# includes/pages/admin_groups.php
# includes/pages/user_settings.php
# includes/sys_page.php
# src/Exceptions/Handler.php
# src/Http/Request.php
2017-08-29 23:16:41 +02:00
cc01c906ba
#336 : Integration of symfony/http-foundation request
2017-08-29 21:52:07 +02:00
73175e2b64
#337 : Added routing
2017-08-28 17:34:00 +02:00
7f4aa6daa5
remove exit commands after redirects (redirect does already die)
2017-07-28 20:26:12 +02:00
f82e5456d2
dried code by introducing selectOne for select queries with only one result line expected
2017-07-28 20:11:09 +02:00
5cffcd7fdf
fix angeltype edit and display bugs
2017-07-28 19:44:54 +02:00
a0af8d4624
further switching to db exceptions instead of return false
2017-07-28 19:15:52 +02:00
5794c4cab8
clear delete queries from false resuls
2017-07-28 18:50:00 +02:00
a157004f4a
handle failed db queries in Db class
2017-07-23 11:46:54 +02:00
b7ebb05b8e
Passwords should be posted
2017-07-20 01:03:59 +02:00
3a1e460249
Changed $_GET, $_POST and $_REQUEST to use the Request object
2017-07-19 11:44:16 +02:00
317c91a22f
Reapplied "Merge pull request #319 from jwacalex/gh_317_unable_to_edit_hidden_room_in_admin"
2017-07-17 23:08:15 +02:00
cd30017b97
Some fixes
2017-03-03 08:31:25 +01:00
781f830678
Fixes and improvements
2017-01-22 01:16:00 +01:00
8506d6d27e
Refactoring: Config cleanup / moved to class
2017-01-21 23:07:20 +01:00
740026a9de
Replaced [0-9] with \d
2017-01-21 20:12:48 +01:00
915ce28fee
Replaced " with '
2017-01-21 20:12:35 +01:00
9a3ad88834
Changed from mysqli to PDO, some refactorings, faster sql queries
2017-01-21 13:58:53 +01:00
8254a79c58
Bugfixes & improvements
2017-01-03 15:59:33 +01:00
55141154c0
Replaced " with '
2017-01-03 15:32:59 +01:00
356b2582f3
PPHDoc, formatting, fixes, cleanup
2017-01-03 03:22:48 +01:00
d71e7bbfad
Formatting
2017-01-02 15:49:53 +01:00
7313e15ce8
PSR-2 formatting
2017-01-02 03:57:23 +01:00
1f8d1eb4bb
Fixed "Constant already defined" notice
...
Added more ugly global variables
2017-01-01 18:50:53 +01:00
b8ebd23f6d
bring back filtering by occupancy
2016-12-29 15:33:21 +01:00
fe5dec73ba
bring back filtering by occupancy
2016-12-29 14:51:43 +01:00
4407604793
move data sorting to begin
2016-12-28 14:53:35 +01:00
0603d0dd4e
remove unused code
2016-12-28 12:11:35 +01:00
46528fe1d8
shift view performance improvements
2016-12-27 23:02:05 +01:00
2f2d08c574
fix edit user bug deleting emails
2016-12-27 13:05:30 +01:00
99c7e8ce1a
fixes #298 allow a shift supporter to remove a user from shift
2016-12-24 17:29:12 +01:00
0c15964e6b
#298 hide freeload form from angeltype supporters
2016-12-24 17:02:34 +01:00
e86d75b4d9
begin #298 add privilege and add users to shifts by angeltype supporter
2016-12-24 17:00:03 +01:00
6a591e7557
merged cherry picked commit
2016-11-30 23:31:21 +01:00
45cda10479
merged master and issue
2016-11-30 23:23:49 +01:00
79b9f9448e
initial commit and functionality for no self sign up
2016-11-30 23:20:13 +01:00
1324260e0f
forgot to remove if-statement -.-
2016-11-30 16:17:52 +01:00
f4f6dfefcb
fixed broken logic in controller (cf. to mail to @msquare)
2016-11-30 15:53:47 +01:00
34248bb20c
show freeload comments to supporters (user shift admin)
2016-11-25 14:27:47 +01:00
bae3ede662
fixes #279 fix exporting freeload comment in json export
2016-11-25 13:38:16 +01:00
ff31d0a1c5
fix shift signup state being combined to null
2016-11-24 09:32:32 +01:00
3fd30add3c
fix NPE
2016-11-23 22:31:11 +01:00
356cc9e1d0
reduce complexity of user driver license
2016-11-17 15:04:33 +01:00
Igor Scheller