Commit graph

144 commits

Author SHA1 Message Date
Tom Hughes
e434cb154c Convert OpenID authentication to generic third party authentication 2015-02-25 01:07:23 +00:00
Tom Hughes
dc2a2c8ebd Standardise on double quoted strings 2015-02-20 19:47:26 +00:00
Tom Hughes
5cbd4038ed Fix rubocop style issues 2015-02-20 08:56:16 +00:00
Tom Hughes
baf10cd392 Fix rubocop lint issues 2015-02-20 08:56:16 +00:00
Tom Hughes
ef7f3d800c Fix most auto-correctable rubocop issues 2015-02-20 08:56:16 +00:00
Tom Hughes
8fa9763281 Set default formats in the database now that rails handles enums
Because rails now reads the defaults from the database correctly it
no longer works to set them conditionally in after_initialise as they
have already been set.
2015-01-11 12:54:16 +00:00
Tom Hughes
4d44f188e1 Include number of recent diary entries in spam scoring 2014-11-20 21:18:00 +00:00
Tom Hughes
8598db3233 Tidy up changeset comment code 2014-10-23 21:24:51 +01:00
Łukasz Gurdek
14ac1babc2 Changeset discussions
Add support for commenting on changesets with RSS feeds and email
notification of comments to other commenters and people that have
chosen to subscribe to a changeset.
2014-10-23 21:24:51 +01:00
Tom Hughes
c83778df8c Ban usernames which match special URLs
Trac #5236
2014-10-02 13:37:26 +01:00
Tom Hughes
56d39b06f2 Rename User#public to User#identifiable 2014-07-04 19:24:25 +01:00
Tom Hughes
0cc579b287 Improve blocking of characters not allowed in XML 2014-06-19 00:25:18 +01:00
Tom Hughes
32c385e8d7 Probit control characters in user names 2014-06-15 16:33:26 +01:00
Tom Hughes
e36aa53f49 Update to paperclip 4.x and add content type validation 2014-02-10 00:34:23 +00:00
Tom Hughes
029547855f Remove debugging code 2013-09-24 17:14:40 +01:00
Tom Hughes
ca30b879f6 Eliminate deprecated scope and association arguments 2013-09-21 11:35:46 +01:00
Tom Hughes
f0feca800d Replace attr_accessible with strong parameters 2013-09-21 11:35:46 +01:00
Tom Hughes
3875882172 Remove multiline regular expression anchors from validations 2013-09-21 11:35:46 +01:00
Tom Hughes
b9daf06684 Upgrade passwords to the latest hashing scheme on login 2013-08-14 00:24:33 +01:00
Tom Hughes
15d29c646b Strengthen password hashing algorithm 2013-08-14 00:23:03 +01:00
Tom Hughes
ac1f210736 Replace the spam observer with simple after_save callbacks 2013-06-25 21:54:02 +01:00
Tom Hughes
898cc828dd Merge branch 'master' into notes
Conflicts:
	Gemfile.lock
2013-03-28 00:36:07 +00:00
Tom Hughes
abd29001a3 Reimplement User#is_friends_with? in a non-insane way 2013-03-24 09:52:03 +00:00
Tom Hughes
3a06235b02 Preload sender/recipient details for messages 2013-03-24 09:52:03 +00:00
Tom Hughes
7599f98957 Merge branch 'master' into notes
Conflicts:
	Gemfile
	Gemfile.lock
	app/assets/stylesheets/common.css.scss
	app/helpers/application_helper.rb
2012-11-20 19:08:30 +00:00
Tom Hughes
ec6f14df0c Use counter caches to improve spam scoring
Now that we have the counter caches we can take all edits and traces
into account without incurring the cost of having to scan the database
to count them all.
2012-11-12 09:39:44 +00:00
Paweł Paprota
ad43499205 Implemented Gravatar support 2012-10-18 18:59:38 +01:00
Tom Hughes
4d91fe3dd9 Merge branch 'master' into openstreetbugs
Conflicts:
	Gemfile
	app/helpers/application_helper.rb
	app/views/site/index.html.erb
2012-09-20 16:01:24 +01:00
Tom Hughes
adcf9edc54 Clear the openid URL when an account is deleted 2012-09-05 15:33:01 +01:00
Tom Hughes
0d3a9ed9cb Merge branch 'master' into openstreetbugs
Conflicts:
	Gemfile.lock
	app/views/browse/_map.html.erb
	app/views/user/view.html.erb
	config/locales/en.yml
	config/openlayers.cfg
	db/structure.sql
	vendor/assets/openlayers/OpenLayers.js
2012-08-22 20:52:08 +01:00
Tom Hughes
fbabed694b Improve blocks on/by links on user pages
All block related links are now only shown if the user has given
or received any blocks, and include a count of active blocks.
2012-08-10 08:27:37 +01:00
Tom Hughes
a770d020f9 Replace deprecated update_attribute method 2012-07-27 12:32:13 +01:00
Tom Hughes
07df3f9809 Clear pass_crypt_confirmation when encrypting a new password
If we change pass_crypt (by encrypting it) without clearing the
confirmation then the user record becomes invalid.
2012-07-27 12:05:19 +01:00
Tom Hughes
e4be816ca0 Don't allow hash signs in usernames 2012-07-23 12:59:50 +01:00
Tom Hughes
5af8d51865 Don't allow percent signs in usernames 2012-07-23 10:38:29 +01:00
Tom Hughes
f3c9f4edb4 Adjust spam scoring to try and reduce false positives 2012-03-20 13:28:57 +00:00
Tom Hughes
8f4a9a4b87 Make spam scoring work with new rich text system 2012-03-17 16:36:58 +00:00
Tom Hughes
aa4205482a Treat all newly entered blocks of text as Markdown 2012-03-17 16:36:55 +00:00
Tom Hughes
6de8c2e6b3 Get the per-user note list view working again 2012-03-09 12:54:19 +00:00
Tom Hughes
1340fca8f1 Turn on mass assignment protection
Require any attribute that is going to be mass assigned to be
whitelisted, and whitelist those attributes which need it
2012-03-06 08:54:45 +00:00
Tom Hughes
f2150a94cf Serve up paperclip attachments in a cache friendly way 2012-02-21 12:31:38 +00:00
Tom Hughes
e70396d70b Replace the file_column plugin with paperclip 2012-02-15 17:48:15 +00:00
Tom Hughes
52be0e81a0 Reduce the effect of the user description on the spam score 2012-02-15 16:24:43 +00:00
Tom Hughes
78db9e72bb Convert friend changeset selection to use Arel queries 2011-12-15 21:47:43 +00:00
Tom Hughes
293265a00b Look up names and emails case insensitively for authentication
If the name entered is not found then try a case insensitive lookup
and if that finds a single result then use it.
2011-12-13 21:25:37 +00:00
Tom Hughes
af2b13c2c1 Require user names and emails to be case insensitively unique
Any existing clashes are allowed to remain for now, byt any new
accounts, or changes to names on existing accounts, must be unique
without regard to case.
2011-12-12 19:11:06 +00:00
Tom Hughes
3227f40193 Make more use of named scopes 2011-11-14 09:42:51 +00:00
Tom Hughes
8ae5d94b2f Update some more queries to use AREL in place of deprecated methods 2011-11-14 09:42:51 +00:00
Tom Hughes
c00a3e948a Avoid using string interpolation in conditions 2011-11-14 09:42:48 +00:00
Tom Hughes
0dba53c023 Declare callbacks explicitly 2011-11-14 09:42:43 +00:00