summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-07-04Added choice of project, r/w perms, and fixed up some cssmemoryMrYummy
2017-07-01Added basic hexfile reading that respects r/w permsMrYummy
2017-06-21hiMrYummy
2017-01-08allow markdown emphasis inside of wordsjomo
2017-01-08add CookieJar patch to flag cookies as secure based on the connection protocoljomo
rails only allows to globally flag session cookies as either secure or not this patch sets the secure flag for cookies based on the protocol (http/https) this is used to send cookies via http but flag them secure for https which allows use with HTTP over Tor for an onion domain this is acceptable because nginx redirects clearnet http to https
2016-12-14rescue and fail gracefully when updated user can't be savedjomo
saving the user can fail when the new ign or name are already assigned to a different user. it's not worth implementing automatic correction because there can be multiple or even circular 'dependencies' of unique names that need to be changed
2016-11-19ensure donor tag color is always whitejomo
2016-10-14adjust max size of thread reply to that of threads, see #11jomo
2016-10-14Merge commit '00fc8b3fcd10860abb70a57fb6aaab3c476259f2'jomo
2016-10-03Changed the content length of forumthreads to 20k because NemesJonas Folvik
2016-09-27remove index 'email' from register_tokensjomo
only records with the same UUID are deleted before INSERTing new ones meaning a player could prevent another one from using a certain address when emails are unique. There's no good reason to force uniqueness on emails in this table
2016-07-24remove annoying permission check for comments, forums, threads, repliesjomo
2016-07-20update slack URLjomo
2016-07-19fix edit link permission checks for comments, threads, repliesjomo
2016-07-19check mod+ rank when dealing with forum threadsjomo
2016-07-19check mod+ rank when dealing with thread repliesjomo
2016-07-19check mod+ rank when updating commentjomo
2016-07-11restrict edit page access to users allowed to updatejomo
2016-06-24resend mail bug fixJonas Folvik
We can now send the mail when you are mod and you also don't need to be unconfirmed yourself. a better fix this is just a better fix to my last commit
2016-06-21allow mods to resend confirmation emails for other usersjomo
2016-06-21don't allow other users or confirmed users to resend confirmation emailjomo
2016-06-21fix confirmation redirectjomo
2016-06-21fix resend button stylejomo
2016-06-21Merge branch 'master' of https://github.com/Futseh/redstoner.comjomo
2016-06-17An Option to resend the confirmation mailJonas Folvik
You should now be able to resend the confirmation mail with the click of a link that is next to the warning that the mail isn't confirmed. Resend the confirmation mail cleaning Just a way to re use the files and stuff we already have instead of the file I created even though I could use the register_mail we have. Change of route and link to button I changed the route from GET to POST because of security reasons, and changed the link_to to a button_to changed the notice I changed the notice so it said check for the mail instead of check for the link Changed notice and button Changed the notice to say "Check your inbox" instead of "Check your mail" also changed the way the class looks
2016-06-12clarify write-only noticejomo
2016-06-12fix syntax error when deleting invalid role from POST paramsjomo
2016-05-19remove a few unnecessary html_safejomo
2016-05-19fix potential XSSjomo
2016-05-08fix thread & reply navigator linksjomo
2016-05-08require uuid for password reset, destroy token after each tryjomo
2016-05-07allow relative return_path only, check validityjomo
2016-03-09add rendering support for youtube usernamesjomo
2016-03-09switch from youtube username to channel IDjomo
updates legacy code that really needs to be gone
2016-03-08don't ignore :label_id on thread creationjomo
2016-03-08link to correct user in profile edit viewjomo
2016-02-07fix old migration file namesjomo
2016-02-07fix utf8mb4 / MySQL5.5 crapjomo
2016-01-30Revert "remove mysql 5.6 fix"jomo
This reverts commit ceaec53d39b6a51135ece76d0ffdc098a3058e08. Revert "try fixing mysql utf8mb4 issues" This reverts commit 1a04b3c8822e131536073a48c29b9f4e920733e3.
2016-01-29remove mysql 5.6 fixjomo
2016-01-29try fixing mysql utf8mb4 issuesjomo
2016-01-29use ruby 2.0.0-p648jomo
2016-01-29Revert "ruby 2.3.0 \o/"jomo
This reverts commit f47b2b5129bbc4c99d80630950cf55ba95cf436f.
2016-01-29update donation pagejomo
2016-01-28ruby 2.3.0 \o/jomo
2016-01-25update rails for securityjomo
See https://github.com/rails/rails/commit/2c8f567e53580872d8c6dfe61201e58793ca131e for info
2016-01-25fix IPv6 style email validationjomo
example: jsmith@[IPv6:2001:db8::1]
2016-01-18Merge pull request #6 from Futseh/masterjomo
Removed methods that are unused and not needed
2016-01-18Removed methods that are unused and not neededJonas Folvik
Removed the haspaid?, correct_case?, ign_is_not_skull and ign_is_not_mojang methods because they aren't used anymore, since we now have a connection between the server and the website to check if they have paid and that the skull is a skull. I also removed the account_exists? method because it makes problems when you setup the database since some users can be seen to not exist.
2016-01-18changes for rails 5jomo