Tom Hughes
e434cb154c
Convert OpenID authentication to generic third party authentication
2015-02-25 01:07:23 +00:00
Tom Hughes
dc2a2c8ebd
Standardise on double quoted strings
2015-02-20 19:47:26 +00:00
Tom Hughes
5cbd4038ed
Fix rubocop style issues
2015-02-20 08:56:16 +00:00
Tom Hughes
baf10cd392
Fix rubocop lint issues
2015-02-20 08:56:16 +00:00
Tom Hughes
ef7f3d800c
Fix most auto-correctable rubocop issues
2015-02-20 08:56:16 +00:00
Tom Hughes
8fa9763281
Set default formats in the database now that rails handles enums
...
Because rails now reads the defaults from the database correctly it
no longer works to set them conditionally in after_initialise as they
have already been set.
2015-01-11 12:54:16 +00:00
Tom Hughes
4d44f188e1
Include number of recent diary entries in spam scoring
2014-11-20 21:18:00 +00:00
Tom Hughes
8598db3233
Tidy up changeset comment code
2014-10-23 21:24:51 +01:00
Łukasz Gurdek
14ac1babc2
Changeset discussions
...
Add support for commenting on changesets with RSS feeds and email
notification of comments to other commenters and people that have
chosen to subscribe to a changeset.
2014-10-23 21:24:51 +01:00
Tom Hughes
c83778df8c
Ban usernames which match special URLs
...
Trac #5236
2014-10-02 13:37:26 +01:00
Tom Hughes
56d39b06f2
Rename User#public to User#identifiable
2014-07-04 19:24:25 +01:00
Tom Hughes
0cc579b287
Improve blocking of characters not allowed in XML
2014-06-19 00:25:18 +01:00
Tom Hughes
32c385e8d7
Probit control characters in user names
2014-06-15 16:33:26 +01:00
Tom Hughes
e36aa53f49
Update to paperclip 4.x and add content type validation
2014-02-10 00:34:23 +00:00
Tom Hughes
029547855f
Remove debugging code
2013-09-24 17:14:40 +01:00
Tom Hughes
ca30b879f6
Eliminate deprecated scope and association arguments
2013-09-21 11:35:46 +01:00
Tom Hughes
f0feca800d
Replace attr_accessible with strong parameters
2013-09-21 11:35:46 +01:00
Tom Hughes
3875882172
Remove multiline regular expression anchors from validations
2013-09-21 11:35:46 +01:00
Tom Hughes
b9daf06684
Upgrade passwords to the latest hashing scheme on login
2013-08-14 00:24:33 +01:00
Tom Hughes
15d29c646b
Strengthen password hashing algorithm
2013-08-14 00:23:03 +01:00
Tom Hughes
ac1f210736
Replace the spam observer with simple after_save callbacks
2013-06-25 21:54:02 +01:00
Tom Hughes
898cc828dd
Merge branch 'master' into notes
...
Conflicts:
Gemfile.lock
2013-03-28 00:36:07 +00:00
Tom Hughes
abd29001a3
Reimplement User#is_friends_with? in a non-insane way
2013-03-24 09:52:03 +00:00
Tom Hughes
3a06235b02
Preload sender/recipient details for messages
2013-03-24 09:52:03 +00:00
Tom Hughes
7599f98957
Merge branch 'master' into notes
...
Conflicts:
Gemfile
Gemfile.lock
app/assets/stylesheets/common.css.scss
app/helpers/application_helper.rb
2012-11-20 19:08:30 +00:00
Tom Hughes
ec6f14df0c
Use counter caches to improve spam scoring
...
Now that we have the counter caches we can take all edits and traces
into account without incurring the cost of having to scan the database
to count them all.
2012-11-12 09:39:44 +00:00
Paweł Paprota
ad43499205
Implemented Gravatar support
2012-10-18 18:59:38 +01:00
Tom Hughes
4d91fe3dd9
Merge branch 'master' into openstreetbugs
...
Conflicts:
Gemfile
app/helpers/application_helper.rb
app/views/site/index.html.erb
2012-09-20 16:01:24 +01:00
Tom Hughes
adcf9edc54
Clear the openid URL when an account is deleted
2012-09-05 15:33:01 +01:00
Tom Hughes
0d3a9ed9cb
Merge branch 'master' into openstreetbugs
...
Conflicts:
Gemfile.lock
app/views/browse/_map.html.erb
app/views/user/view.html.erb
config/locales/en.yml
config/openlayers.cfg
db/structure.sql
vendor/assets/openlayers/OpenLayers.js
2012-08-22 20:52:08 +01:00
Tom Hughes
fbabed694b
Improve blocks on/by links on user pages
...
All block related links are now only shown if the user has given
or received any blocks, and include a count of active blocks.
2012-08-10 08:27:37 +01:00
Tom Hughes
a770d020f9
Replace deprecated update_attribute method
2012-07-27 12:32:13 +01:00
Tom Hughes
07df3f9809
Clear pass_crypt_confirmation when encrypting a new password
...
If we change pass_crypt (by encrypting it) without clearing the
confirmation then the user record becomes invalid.
2012-07-27 12:05:19 +01:00
Tom Hughes
e4be816ca0
Don't allow hash signs in usernames
2012-07-23 12:59:50 +01:00
Tom Hughes
5af8d51865
Don't allow percent signs in usernames
2012-07-23 10:38:29 +01:00
Tom Hughes
f3c9f4edb4
Adjust spam scoring to try and reduce false positives
2012-03-20 13:28:57 +00:00
Tom Hughes
8f4a9a4b87
Make spam scoring work with new rich text system
2012-03-17 16:36:58 +00:00
Tom Hughes
aa4205482a
Treat all newly entered blocks of text as Markdown
2012-03-17 16:36:55 +00:00
Tom Hughes
6de8c2e6b3
Get the per-user note list view working again
2012-03-09 12:54:19 +00:00
Tom Hughes
1340fca8f1
Turn on mass assignment protection
...
Require any attribute that is going to be mass assigned to be
whitelisted, and whitelist those attributes which need it
2012-03-06 08:54:45 +00:00
Tom Hughes
f2150a94cf
Serve up paperclip attachments in a cache friendly way
2012-02-21 12:31:38 +00:00
Tom Hughes
e70396d70b
Replace the file_column plugin with paperclip
2012-02-15 17:48:15 +00:00
Tom Hughes
52be0e81a0
Reduce the effect of the user description on the spam score
2012-02-15 16:24:43 +00:00
Tom Hughes
78db9e72bb
Convert friend changeset selection to use Arel queries
2011-12-15 21:47:43 +00:00
Tom Hughes
293265a00b
Look up names and emails case insensitively for authentication
...
If the name entered is not found then try a case insensitive lookup
and if that finds a single result then use it.
2011-12-13 21:25:37 +00:00
Tom Hughes
af2b13c2c1
Require user names and emails to be case insensitively unique
...
Any existing clashes are allowed to remain for now, byt any new
accounts, or changes to names on existing accounts, must be unique
without regard to case.
2011-12-12 19:11:06 +00:00
Tom Hughes
3227f40193
Make more use of named scopes
2011-11-14 09:42:51 +00:00
Tom Hughes
8ae5d94b2f
Update some more queries to use AREL in place of deprecated methods
2011-11-14 09:42:51 +00:00
Tom Hughes
c00a3e948a
Avoid using string interpolation in conditions
2011-11-14 09:42:48 +00:00
Tom Hughes
0dba53c023
Declare callbacks explicitly
2011-11-14 09:42:43 +00:00