science-ation

Go to file

james dc63df156c Fix SQL Injection and XSS vulnerability - woohoo our first 0-day exploit!

http://inj3ct0r.com/exploits/12613
http://packetstorm.linuxsecurity.com/1006-exploits/fairinabox-sqlxss.txt

2010-06-23 05:07:57 +00:00

admin

Couple small tweaks - science olympics event rename to science olympics activity, sort events by eventtype first

2010-06-17 19:31:50 +00:00

config

Massive overhaul of the configuration variables

2010-06-22 21:32:03 +00:00

Massive overhaul of the configuration variables

2010-06-22 21:32:03 +00:00

fckeditor

Don't process basic UTF-8 Characters into HTML Entities, makes it impossible to obtain plain text version!!

2009-12-03 19:16:37 +00:00

images

Add a (non-working for demo only!) superconfig page to turn on/off the science fair and science olympics components

2010-05-27 20:33:08 +00:00

layout tweaks

2010-06-22 17:14:23 +00:00

Rmail

Working email sending from fundraising module, and implement new emailqueue system. None of the existing emails are migrated to the new system yet, and both old and new work in parallel until we can finish migration

2009-12-01 22:02:03 +00:00

scripts

Somehow the "exit" got remarked from the top of populate_fake. Unremarked it.

2010-06-10 16:13:19 +00:00

super

Added team management for SOIAB. Minor typo correction in conferences.php

2010-06-14 18:30:39 +00:00

tcpdf

Add TABLOID to tcpdf

2010-06-09 05:21:38 +00:00

theme

Add schedule view for school access, allow schools to register teams for events

2010-06-15 21:43:21 +00:00

.htaccess

Apache/PHP seems to let us turn off magic quotes in the .htaccess. Yay.

2010-04-18 22:40:05 +00:00

ajax.inc.php

refactor the standard ajax stuff to a common file

2007-12-10 20:53:41 +00:00

cms.php

Shrink the summarytable headers a bit in size

2008-08-20 20:25:42 +00:00

committee_main.php

Start of adding 'conferences' and ability to switch between running conferences

2010-06-03 19:21:27 +00:00

committee.inc.php

Dont do a save, or we get nested

2009-12-03 23:32:13 +00:00

committees.php

Merge all changes from branch r1284:1498 into trunk

2009-09-09 00:26:12 +00:00

common.inc.php

Remove a bunch of conferenceid=0 checks -- we now always have a conference id

2010-06-17 21:14:00 +00:00

config_editor.inc.php

Massive overhaul of the configuration variables

2010-06-22 21:32:03 +00:00

config.inc.php.template

move config.inc.php TO config.inc.php.template

2005-05-25 19:36:33 +00:00

confirmed_participants.php

If there's a regfee, and we show a red * then there's no point showing "complete" becuase everyone is "complete" and only some will have a red star. saves bandwidth and real-estate on the page.

2009-03-24 18:21:26 +00:00

contact.php

Fix contact to actually work with the new user code

2009-09-09 03:05:45 +00:00

csvimport.inc.php

Add a generic CSV reader that properly handles multi-line fields

2006-09-11 17:32:02 +00:00

fair_additional_materials.inc.php

- Put dob, not age on the form. SFIAB doesn't seem to use age.

2009-09-25 19:48:42 +00:00

fair_info.php

- Replace class "tableedit" with class "editor", undo the alignment on class tableedit

2009-10-01 04:42:55 +00:00

fair_main.php

Use icons in the fair main, need to re-integrate the status checks

2010-01-27 20:24:09 +00:00

fair_stats.php

Remove debug line, fix tab indent

2010-02-23 19:58:07 +00:00

fair.inc.php

Merge all changes from branch r1284:1498 into trunk

2009-09-09 00:26:12 +00:00

gpl.txt

get rid of the GPL post-amble

2005-01-25 15:04:40 +00:00

gplheader.txt

add the actual GPL, move the GPL file header to a separate file

2005-01-25 15:02:17 +00:00

important_dates.php

Update front-end dates

2010-06-04 16:48:02 +00:00

index.php

Add cms table, and move the 'index' pagetext to cms

2008-08-19 21:13:29 +00:00

install2.php

Added updates for converting from Latin1 to utf8 character encoding

2010-06-04 20:23:59 +00:00

install3.php

Fix broken install script - i hope

2010-01-04 16:51:47 +00:00

install.php

Update the installer, and split it into two steps (maybe a third to come?)

2005-05-26 21:05:26 +00:00

judge_availability.php

- Make it clear that by selecting >1 judging timeslots, the committee expects the judge to be there for ALL timeslots.

2009-12-14 20:34:03 +00:00

judge_expertise.php

Make the status on the judge other and judge expertise pages work.

2009-11-26 19:09:37 +00:00

judge_main.php

Reverting some changes that I inadvertently committed.

2010-04-13 20:33:27 +00:00

judge_other.php

- Fix the judge question formatting too

2009-12-14 20:30:20 +00:00

judge_project_summary.php

Add a judge scheudle page that lists the times, teams, and projects

2010-03-18 05:22:56 +00:00

judge_schedule.php

Add a new date 'judge schedule available' to specify when judge assignments and schedules become available to judges. When the chief judge is playing with the scheduler he doesnt want to have judges thinkign they are assigned to their final teams/projects/timeslots, so only make them available to judges after this date has passed.

2010-04-06 14:29:50 +00:00

judge_special_awards.php

Make the status on the judge other and judge expertise pages work.

2009-11-26 19:09:37 +00:00

judge.inc.php

Properly detect complete status if special awards is turned off

2010-01-15 15:20:11 +00:00

lcsv.php

addTextX function added

2010-03-22 02:20:04 +00:00

Start of adding 'conferences' and ability to switch between running conferences

2010-06-03 19:21:27 +00:00

lpdf.php

Add a "setDefaultFontSize" function to lpdf, and set it to something reasonable for backwards compatability

2010-03-23 16:42:59 +00:00

ltxt.php

- A text writer similar to the CSV and PDF writer... will allow for much faster

2006-10-19 07:32:02 +00:00

projects.inc.php

Overhaul the winners entry (add ajax, mutliple fair support, fairs

2010-01-27 20:24:19 +00:00

questions.inc.php

Support custom judge questions in the report editor

2010-02-02 19:40:52 +00:00

register_participants_emergencycontact.php

Remove debug

2009-10-22 19:41:03 +00:00

register_participants_isefforms.php

Add the start of the isef form collection page for participant registration and the database setup in db.999 until its ready to go live

2008-09-28 18:36:56 +00:00

register_participants_main.php

Switch the namecheck to check both/any/all students in the project, not just the one logged in.

2008-09-05 18:50:36 +00:00

register_participants_mentor.php

- Add an 'X' button to the "REmove this mentor from this project". To clean up

2007-12-21 19:24:12 +00:00

register_participants_namecheck.php

Backport namecheck fix from branch to trunk

2008-11-07 04:41:44 +00:00

register_participants_project_divisionselector.php

Add GPL headers to ALL PHP files

2005-01-24 18:00:03 +00:00

register_participants_project.php

- Add support for short project titles in addition to the regular project

2008-01-23 05:54:03 +00:00

register_participants_safety.php

Merge safety changes from banch into trunk

2009-01-21 22:33:27 +00:00

register_participants_signature_pdflib.php

New TCPDF signature page

2010-06-09 17:05:21 +00:00

register_participants_signature.php

New TCPDF signature page

2010-06-09 17:05:21 +00:00

register_participants_spawards.php

- More GVRSF stuff that I missed. Add two fields to the award_awards:

2008-01-24 07:46:12 +00:00

register_participants_students.php

Add x-small as tshirt size

2010-01-13 22:40:24 +00:00

register_participants_tours.php

- Add a participant name check page for students to double check their name.

2007-12-22 23:28:14 +00:00

register_participants.inc.php

Merge all changes from branch r1284:1498 into trunk

2009-09-09 00:26:12 +00:00

register_participants.php

Fix missing space

2010-03-16 16:57:39 +00:00

remote.php

Send IDs for divs/cats as part of the array data, not just as the index.

2010-04-18 22:41:28 +00:00

schedule.inc.php

Show registered teams on admin schedule

2010-06-16 16:15:17 +00:00

schoolaccess.php

s/School Access/School Home

2010-06-16 17:50:12 +00:00

schoolfeedback.php

s/School Access/School Home

2010-06-16 17:50:12 +00:00

schoolinfo.php

s/School Access/School Home

2010-06-16 17:50:12 +00:00

schoolinvite.php

Separated the school access pages into separate documents

2010-06-15 16:57:50 +00:00

schoolschedule_event_dialog.php

Add schedule view for school access, allow schools to register teams for events

2010-06-15 21:43:21 +00:00

schoolschedule_event_tab.php

updated to delete links between schedule registrations and users when a schedule registration is deleted

2010-06-22 19:35:36 +00:00

schoolschedule.php

layout tweaks

2010-06-22 17:14:23 +00:00

schoolstudents.php

updates on the student list editor for teachers

2010-06-17 20:22:18 +00:00

schoolteams.php

s/School Access/School Home

2010-06-16 17:50:12 +00:00

sponsor_main.php

Do a lot of database re-working, renaming and reorganization

2009-10-02 16:46:13 +00:00

tableeditor.class.php

Modified events table to filter properly by event and handle URLs properly

2010-06-14 19:43:10 +00:00

tableeditor.css

Put the award upload on one page. Make the default mappings a modal

2010-04-18 22:40:08 +00:00

tcpdf_config.php

More sensible values for margins

2010-06-08 18:47:59 +00:00

tcpdf.inc.php

Implement fair name/logo as fields in a report instead of special

2010-06-09 07:43:59 +00:00

TODO

Merge all changes from branch r1284:1498 into trunk

2009-09-09 00:26:12 +00:00

tours.class.php

- Add a tour number to the database, and modify the tour editor to include the

2007-12-20 01:05:04 +00:00

translationseditor.inc.php

Helps if you use the right filename, definitely almost 2am

2009-09-11 05:47:58 +00:00

translationseditor.js.php

Set the datepicker z-indez so its above the dialogs (so when used within a dialog it wont be below it)

2009-09-17 19:05:17 +00:00

user_activate.php

- Update the user activate/deactivate form

2009-09-25 23:23:10 +00:00

user_invite.php

Merge all changes from branch r1284:1498 into trunk

2009-09-09 00:26:12 +00:00

user_login.php

Allow existing parents, principals, mentors, and alumni to create mutlirole accounts.

2010-02-10 14:58:10 +00:00

user_multirole.php

Merge all changes from branch r1284:1498 into trunk

2009-09-09 00:26:12 +00:00

user_new.php

if a user exists for the current fair year and is deleted when they try to register, simply undelete them

2010-02-16 17:58:14 +00:00

user_page.inc.php

- New user and volunteer signup system

2007-11-16 06:30:42 +00:00

user_password.php

Fix user_password

2010-01-27 20:24:10 +00:00

user_personal.php

Added updates for converting from Latin1 to utf8 character encoding

2010-06-04 20:23:59 +00:00

user.inc.php

Updates for managing students

2010-06-16 21:33:43 +00:00

version.txt

Lol oops i updated the version in the branch instead of head - now the version is bumped correctly

2009-09-09 01:19:36 +00:00

volunteer_main.php

Merge all changes from branch r1284:1498 into trunk

2009-09-09 00:26:12 +00:00

volunteer_position.php

Merge all changes from branch r1284:1498 into trunk

2009-09-09 00:26:12 +00:00

volunteer.inc.php

Merge all changes from branch r1284:1498 into trunk

2009-09-09 00:26:12 +00:00

winners.php

Fix SQL Injection and XSS vulnerability - woohoo our first 0-day exploit!

2010-06-23 05:07:57 +00:00

Languages

PHP 56.8%

HTML 22.4%

JavaScript 17.4%

ColdFusion 1.2%

CSS 0.9%

Other 1.2%