Commit Graph

952 Commits

Author SHA1 Message Date
Laurent Destailleur
ecee1ec547 A better way to block injections 2011-03-07 23:11:54 +00:00
Laurent Destailleur
7a37a2ce88 Code cleaner 2011-03-07 22:35:35 +00:00
Laurent Destailleur
467b33ae0b Try a more complete sql injection test. It is also faster. 2011-03-07 01:50:38 +00:00
Regis Houssin
0c1e2a21e2 Fix: clean PHP_SELF for prevent XSS attack 2011-03-06 20:42:36 +00:00
Laurent Destailleur
29498070cb Demo need to go through the public/demo page 2011-03-05 18:02:25 +00:00
Laurent Destailleur
065df83da3 Qual: Removed old usage of code. 2011-02-25 19:05:47 +00:00
Laurent Destailleur
55e6a09df8 Fix: Avoid tooltip errors when content too large 2011-02-25 18:20:22 +00:00
Regis Houssin
669fef0014 Fix: compatibility with pgsql, replace all addslashes in particular files 2011-02-24 18:36:27 +00:00
Laurent Destailleur
d31dbaf85a Now dolibarr_main_url_root is detected automatically. Value in conf file is used only to forge links to show for external access. 2011-02-23 12:24:09 +00:00
Laurent Destailleur
8db6a1037a Enhancement in smartphone menu management 2011-02-20 13:31:25 +00:00
Laurent Destailleur
c693941925 Qual: Reduce memory usage by moving a not required function into a library loaded only when required. 2011-02-20 13:04:53 +00:00
Laurent Destailleur
4e9ccd8571 Qual: Reduce memory usage by moving a not required function into a library loaded only when required. 2011-02-20 12:56:50 +00:00
Laurent Destailleur
97b4fef379 Qual: Remove deprecated code 2011-02-20 12:43:18 +00:00
Laurent Destailleur
6f24a7abfd Moved code into correct file 2011-02-20 12:16:18 +00:00
Laurent Destailleur
a8f9a9d0c6 New: a specialized menu is now used when using smartphones 2011-02-16 19:59:16 +00:00
Laurent Destailleur
1423c375f5 New: A module can force menu manager 2011-02-13 15:50:42 +00:00
Laurent Destailleur
684eddf9fe Removed old constant name for menu management. 2011-02-13 13:22:54 +00:00
Laurent Destailleur
89de3de2ae Add user ip address 2011-02-06 12:54:00 +00:00
Regis Houssin
d7f414f84a Fix: problem with gzip version of ckeditor 2011-02-05 10:08:31 +00:00
Regis Houssin
4b87e2ecf3 New: update jQuery libraries and plugins
Todo: the size of jQuery combobox is too large
2011-02-05 09:26:33 +00:00
Laurent Destailleur
507c7bd930 New: Add some code to allow to transform any select list into an autocomplete list with just one line of code. 2011-02-05 03:34:25 +00:00
Laurent Destailleur
bc24336c3d Fix: Pb with Chrome 2011-02-03 22:11:45 +00:00
Regis Houssin
c22c53d750 Fix: add compressed format 2011-02-02 07:59:32 +00:00
Laurent Destailleur
9d364554d9 Keep most possible javascript into head 2011-02-01 18:37:16 +00:00
Regis Houssin
e1e6629043 Fix: call ckeditor class if needed by doleditor function 2011-01-31 20:59:53 +00:00
Regis Houssin
10ded212d0 Test CKEditor 2011-01-31 16:35:55 +00:00
Laurent Destailleur
0d3d71a48f Remove warning 2011-01-26 15:29:45 +00:00
Laurent Destailleur
24ffac6bb6 New: An external module can add its own menu manager 2011-01-23 15:08:21 +00:00
Laurent Destailleur
ce94eef996 Fix: bug #30386 : Visualisation pour impression incorrect pour rapport TVA 2011-01-19 10:37:59 +00:00
Regis Houssin
7c9fc91c0b Fix: use full option 2011-01-17 16:02:04 +00:00
Regis Houssin
1b467a9350 Fix: dynamic position depending on the modules activated 2011-01-10 08:13:31 +00:00
Regis Houssin
da736ec2c2 Fix: use dol_buildpath
Fix: add .css and .js extension
2011-01-06 20:29:14 +00:00
Regis Houssin
026bb66ddd Fix: use full path in module 2011-01-06 20:01:32 +00:00
Regis Houssin
3566889b3a Fix: path is ok 2010-12-29 12:44:08 +00:00
Laurent Destailleur
20991abe04 Fix: Another try to make usage of alt feature working. 2010-12-29 12:13:36 +00:00
Laurent Destailleur
0da915b6eb Fix: No init of var by default before being in init area. 2010-12-29 10:47:36 +00:00
Regis Houssin
c791f3f19a Fix: add constant for dev only 2010-12-29 10:36:19 +00:00
Regis Houssin
1f75c0aaf8 Fix: add constant for dev only 2010-12-29 09:47:46 +00:00
Laurent Destailleur
da484f8524 Fix: Fix security holes 2010-12-27 19:45:16 +00:00
Laurent Destailleur
9a4c903211 Fi:x Restore a security system broken by adding alt feature. 2010-12-27 19:25:59 +00:00
Laurent Destailleur
14e70e6e53 Fi:x Restore a security system broken by adding alt feature. 2010-12-27 19:13:06 +00:00
Regis Houssin
82a35d3954 Fix: session lost if use custom2 for external module 2010-12-27 10:48:50 +00:00
Regis Houssin
e1ab6c053f Fix: rename dol_file_exists to dol_buildpath 2010-12-19 18:43:44 +00:00
Regis Houssin
17df30b7fa Fix: more compatible with alternative path
Fix: uniformize code
2010-12-19 11:05:07 +00:00
Laurent Destailleur
1e151d9864 Fix: Fix a lot of regression. There still a lot of new bugs to fix (like compatibility through proxy, or restore performance by avoiding huge number of fil_exists). 2010-12-19 02:42:53 +00:00
Regis Houssin
69631134d3 Fix: regression and use an exist alternative root 2010-12-16 18:58:15 +00:00
Laurent Destailleur
b5e5dc3849 Fix: Fix regression by adding "custom" feature making web server hang in infinite loop. 2010-12-15 18:15:08 +00:00
Laurent Destailleur
2498426867 Fix: Restore stable version for 3.0 2010-12-14 23:27:17 +00:00
Laurent Destailleur
38df4415ed Fix: Removed warning 2010-12-14 22:17:44 +00:00
Regis Houssin
aa84b15651 New: update jquery and jquery UI
Fix: rename version num with "latest" expression
Todo: add compressed js
2010-12-11 11:45:30 +00:00
Laurent Destailleur
0d4aa481cd New: Function dol_now('tzuser') is now supported. 2010-12-08 11:45:47 +00:00
Laurent Destailleur
5caf3d9b09 Restore work lost by savannah backup 2010-12-01 21:28:08 +00:00
Laurent Destailleur
adfb9ea341 Sec: Removed security holes 2010-11-20 13:08:44 +00:00
Regis Houssin
2468ae22ab Fix: table versus div 2010-11-19 15:37:33 +00:00
Laurent Destailleur
e93f512d9e Qual: Removed duplicate menu entries 2010-11-10 23:18:23 +00:00
Regis Houssin
2ac06a875c Fix: sql injection 2010-11-10 19:18:06 +00:00
Laurent Destailleur
1a1749127e Qual: Removed completey scriptaculous and prototype 2010-11-07 13:07:22 +00:00
Laurent Destailleur
b766ab6832 Qual: Removed completey scriptaculous and prototype 2010-11-07 13:07:21 +00:00
Laurent Destailleur
07edf7bee9 Fix: Better compatibility with old modules 2010-11-05 20:11:33 +00:00
Regis Houssin
c2f43ab94b New: add company link for external user 2010-11-05 17:47:41 +00:00
Regis Houssin
cb61e196cc Fix: adding a name to differentiate cookies (close and reopen browser) 2010-11-04 07:13:17 +00:00
Laurent Destailleur
134fb0e22c Doc 2010-11-03 21:21:35 +00:00
Laurent Destailleur
0328fd2239 Fix: div was sometimes opened sometimes not when option USE_JQUERY_LAYOUT is on. It must never be used when option is off, always when option is on. 2010-11-02 12:28:27 +00:00
Laurent Destailleur
50b51a03c7 Fix: div was sometimes opened sometimes not when option USE_JQUERY_LAYOUT is on. It must never be used when option is off, always when option is on. 2010-11-02 12:14:06 +00:00
Laurent Destailleur
58fffb9a2d Fix: div was sometimes opened sometimes not when option USE_JQUERY_LAYOUT is on. It must never be used when option is off, always when option is on. 2010-11-02 12:03:29 +00:00
Regis Houssin
aa4b890bfd Fix: compatibility with ecm layout 2010-11-02 09:10:43 +00:00
Laurent Destailleur
dfbd72a76a Fix: W3C 2010-11-01 16:00:38 +00:00
Laurent Destailleur
b16d0c9371 Fix: test on option MAIN_MENU_USE_JQUERY_LAYOUT was not done everywhere. This fix borken feature in ecm when MAIN_MENU_USE_JQUERY_LAYOUT is not used. USage when option is one is still broken. 2010-11-01 15:13:38 +00:00
Regis Houssin
a9c506701e Test: use jquery accordion in left menu (test with auguria menu) 2010-11-01 11:12:26 +00:00
Regis Houssin
6428290ddf Test: use jquery accordion in left menu (test with auguria menu) 2010-11-01 09:49:34 +00:00
Regis Houssin
8401fb4f99 Fix: problem with scrollbar 2010-10-31 09:05:56 +00:00
Regis Houssin
803ea1e7cc Test: use jquery layout for the left menu 2010-10-30 10:26:56 +00:00
Regis Houssin
795171a7d8 Test: use jquery layout for the left menu 2010-10-30 10:11:48 +00:00
Regis Houssin
05a66f5b30 Fix: use specific css class of ECM 2010-10-30 10:04:06 +00:00
Regis Houssin
e5e968f456 Fix: use specific css class of ECM 2010-10-30 09:25:13 +00:00
Regis Houssin
bd2243264e Test: use jquery layout for the left menu 2010-10-30 09:16:11 +00:00
Regis Houssin
77cfba92d5 Test: use jquery layout for the left menu 2010-10-30 08:40:53 +00:00
Regis Houssin
0757861af8 Test: use jquery layout for the left menu 2010-10-30 08:32:16 +00:00
Regis Houssin
c5ee9d27b5 Test: use jquery layout for the left menu 2010-10-30 08:12:09 +00:00
Regis Houssin
f677f2e72c Test: use jquery layout for the left menu 2010-10-30 07:54:26 +00:00
Regis Houssin
e1cecca39a Test: use jquery layout for the left menu 2010-10-30 07:54:26 +00:00
Regis Houssin
ad39392d59 Test: use jquery layout for the left menu 2010-10-29 17:54:15 +00:00
Laurent Destailleur
f1cbf70eac Look: Nicer look 2010-10-23 15:45:55 +00:00
Laurent Destailleur
7d84b61945 Look: Nicer look 2010-10-23 15:45:31 +00:00
Laurent Destailleur
31522501ab Fix: Tooltip must not add a scroll bar when mous is on left 2010-10-23 13:01:48 +00:00
Laurent Destailleur
015d265ee9 Fix: A better way to use jQuery tooltips. 2010-10-22 19:18:45 +00:00
Regis Houssin
5d8d690241 Fix: jQuery mobile need jQuery v1.4.3 2010-10-22 11:48:39 +00:00
Regis Houssin
fe93194056 New: use jQuery tooltip 2010-10-22 08:06:41 +00:00
Laurent Destailleur
19dae2da95 New: Can choose third party to use in point of sale module during logon. 2010-10-22 02:00:50 +00:00
Regis Houssin
c62aee6c02 New: add tooltip plugin for jQuery
Info: la version finale de jQuery UI 1.9 contiendra un widget tooltip
2010-10-21 23:22:32 +00:00
Regis Houssin
8753a8cdeb Work on multicompany 2010-10-21 19:56:42 +00:00
Regis Houssin
423f99ef15 Work on multicompany 2010-10-21 14:54:12 +00:00
Regis Houssin
e719d62cd4 Fix: one hour of search for just one letter !! ;-) 2010-10-18 16:11:32 +00:00
Regis Houssin
5ba5e273c4 Fix: move and update ckeditor (prepare to change fckeditor)
Fix: move jquery plugins in specific directory
2010-10-18 10:41:52 +00:00
Regis Houssin
e740f7827f Fix: add constant MAIN_USE_JQUERY_THEME for change the default theme of jquery
Add jQuery "redmond" theme
2010-10-11 12:06:43 +00:00
Laurent Destailleur
3fd78848f2 Fix: Trad 2010-10-09 11:40:59 +00:00
Regis Houssin
1b05bb9686 Update jQuery UI to version 1.8.5 2010-10-08 10:45:11 +00:00
Regis Houssin
705c675933 New: add constante MAIN_CORE_ERROR if "$dolibarr_main_prod" is defined, better error message with an ajax dialog 2010-10-03 21:43:03 +00:00
Laurent Destailleur
a3d8871c0b Qual: Menu system is simpler 2010-10-02 21:31:14 +00:00
Laurent Destailleur
cfe7215288 New: Use ajax to change order of lines. 2010-10-02 20:47:55 +00:00
Laurent Destailleur
7948b0e0d3 Allow to disable CSRF permission 2010-10-01 18:33:07 +00:00
Laurent Destailleur
d29968a15f Comment to tell how disable CSRF check 2010-10-01 18:26:48 +00:00
Laurent Destailleur
7633c94a60 Qual: Menu management is simpler (no difference between left and top in setup). 2010-09-29 11:57:09 +00:00
Laurent Destailleur
c948a09a6c Enable smartphone menu template only if level 2 2010-09-29 11:08:52 +00:00
Laurent Destailleur
0de3bff0b7 Qual: Menu management is simpler (no difference between left and top in setup). 2010-09-29 10:10:33 +00:00
Laurent Destailleur
56070c7ee3 Fix: Syntax error 2010-09-28 20:40:10 +00:00
Regis Houssin
11c88cb534 Works on multi-company module 2010-09-26 09:53:42 +00:00
Regis Houssin
371ee0295f Add smartphone menu management, based from Auguria menu 2010-09-23 13:02:15 +00:00
Regis Houssin
38d2583e8d Add Smartphone class 2010-09-22 06:30:32 +00:00
Laurent Destailleur
abb31f26b5 Perf: A little speed improvement 2010-09-14 22:14:55 +00:00
Regis Houssin
928f4f42d5 Test: reorder lines with jquery 2010-09-14 07:05:31 +00:00
Laurent Destailleur
e7506405c8 Qual: Code is now simpler using jQuery. Removed rubbish javascript. 2010-09-06 10:18:31 +00:00
Laurent Destailleur
593fc9ec2d New: Add feature to test with other menu manager 2010-09-03 21:39:37 +00:00
Laurent Destailleur
268c8bc67c New: Add feature to test with other menu manager 2010-09-03 21:34:07 +00:00
Laurent Destailleur
886ca96ad3 Fix: UTF encoding with ajax pages 2010-08-30 18:31:59 +00:00
Laurent Destailleur
727fc871c6 Replace javascript by jQuery 2010-08-29 18:29:19 +00:00
Laurent Destailleur
4547233095 A little speed and memory improvement 2010-08-29 17:43:51 +00:00
Laurent Destailleur
e777d00a5e Removed scriptaculous from include. We keep files used for prototype 2010-08-27 23:41:07 +00:00
Laurent Destailleur
8a1fdd2eb8 Can disabled javascript on command line 2010-08-27 21:02:31 +00:00
Laurent Destailleur
0828a09aa1 Image can be clicked on eldy theme 2010-08-26 02:07:52 +00:00
Regis Houssin
7408c18ca6 Add possibility to include login method in a module 2010-08-24 14:18:38 +00:00
Regis Houssin
4c105c7a40 Add possibility to include login method in a module 2010-08-24 14:17:16 +00:00
Regis Houssin
7a3fb85fef Add possibility to include login method in a module 2010-08-24 12:46:00 +00:00
Regis Houssin
ec1ad78765 Add possibility to include login method in a module 2010-08-24 12:42:14 +00:00
Regis Houssin
b5333b5567 Add possibility to include login method in a module 2010-08-24 11:04:16 +00:00
Laurent Destailleur
629f782f17 Usage of autocomplete using jquery now works for products. 2010-08-22 18:02:32 +00:00
Laurent Destailleur
10e0b270df Fix: postgresql compatibility 2010-08-22 12:44:14 +00:00
Laurent Destailleur
1b9ee9c597 Qual: Clean code
Perf: Country id+code is now stored into MAIN_INFO_SOCIETE_PAYS instead of only id. This avoid a select to finf country code at each request.
2010-08-21 15:30:17 +00:00
Laurent Destailleur
76c2dccb70 New: Replaced completely PWC with JQuery 2010-08-18 19:17:58 +00:00
Laurent Destailleur
b7da077da6 Qual: Add jquery by default.
Qual: Enhancement in cropping function.
2010-08-17 22:58:34 +00:00
Regis Houssin
bf155f92dc Fix: delete old constant 2010-08-16 16:33:25 +00:00
Laurent Destailleur
85688d99c8 Fix: Bad link 2010-07-27 23:36:24 +00:00
Laurent Destailleur
3fab2d962f Fix: Asterisk redirect fails 2010-07-26 23:50:09 +00:00
Laurent Destailleur
79549949b4 Fix: Numerous fixes in menu handling 2010-07-26 22:03:50 +00:00
Laurent Destailleur
a6b988379a Fix: When files are moved for a new tree, we must reload dynamic menu handlers at installation. 2010-07-21 21:58:46 +00:00
Laurent Destailleur
29536ecbd8 Fix: Use correct order of firstname and lastname. 2010-07-18 10:39:07 +00:00
Laurent Destailleur
f22aea3361 Make read of log easier 2010-07-14 14:25:48 +00:00
Regis Houssin
f430b54cca Works on Milestone module 2010-07-02 15:38:32 +00:00
Laurent Destailleur
9c3a791e79 Look: enhancement in look 2010-06-27 13:19:38 +00:00
Laurent Destailleur
8a53f55ddd Look: Minor enhancement 2010-06-26 15:19:13 +00:00
Laurent Destailleur
bff24551c6 Serious enhancement on styles. 2010-06-26 00:16:59 +00:00
Laurent Destailleur
7d447588cc Reorganise how theme works. Style sheet must be named style.css.php. 2010-06-25 19:52:11 +00:00
Laurent Destailleur
21908d0bd9 - New: Agenda can be read by external contacts 2010-06-09 18:25:20 +00:00
Laurent Destailleur
9622c6a0da Uncomment code as it was used. 2010-06-02 18:50:46 +00:00
Laurent Destailleur
3c2e543731 Try to comment deprecated code. 2010-06-02 18:42:24 +00:00
Laurent Destailleur
d2d63bcb81 Fix: Fix a lot of broken features when renaming produit to product 2010-06-02 08:34:44 +00:00
Laurent Destailleur
be52d8b46f Work on memcached server 2010-05-26 11:22:10 +00:00
Laurent Destailleur
10f0b0997e Work on memcached server 2010-05-25 22:55:56 +00:00
Laurent Destailleur
55a2b9f04b Can disable JQUERY 2010-05-22 11:27:29 +00:00
Laurent Destailleur
38b924b85c Use unique id 2010-05-13 00:32:16 +00:00
Laurent Destailleur
f39d3cf574 On the fly GZIP compression is done only if bit 3 of constant is set (this is to allow to choose wich optimization we enabled among the 3 actually available). 2010-05-12 00:40:18 +00:00
Regis Houssin
5fef42452e Fix: optimize speed
Qual: update scriptaculous en protoype
2010-05-10 20:59:18 +00:00
Regis Houssin
635b44b906 Fix: if you rename a module, rename all 2010-05-10 04:50:39 +00:00
Philippe Grand
7f13eb0d4e according to new tree directory 2010-05-03 08:22:35 +00:00
Philippe Grand
b6bc9223df according to new tree directory 2010-04-28 10:33:16 +00:00
Philippe Grand
b68a359265 according to new tree directory 2010-04-28 10:02:54 +00:00
Laurent Destailleur
a4f144f24d Qual: Uniformise code. user class use id in first param of fetch 2010-04-28 07:31:34 +00:00
Regis Houssin
8b28989e8a Fix: problem with php5.3 2010-04-23 09:30:47 +00:00
Regis Houssin
89eb657f5d Fix: regression, problem with php5.3 2010-04-23 07:42:57 +00:00
Regis Houssin
335c038dd8 Fix: regression 2010-04-21 22:14:11 +00:00
Regis Houssin
621bd68e3b Fix: workflow module is enabled by default
Fix: integration of triggers in the workflow module
!!! we now call "call_workflow" instead of "run_triggers" !!!
2010-04-21 16:29:37 +00:00
Laurent Destailleur
b33b1c56b8 Fix: Default language on login page 2010-04-13 21:56:06 +00:00
Philippe Grand
011ea91f81 move interfaces class to core directory 2010-04-08 13:09:00 +00:00
Laurent Destailleur
d456c92553 Some code for compatibility 2010-04-06 21:56:03 +00:00
Laurent Destailleur
143acdc3f0 Move agenda menu into module 2010-04-05 18:41:34 +00:00
Laurent Destailleur
fbc31d9cb5 Qual: Separate function of html header from menu header 2010-04-03 15:08:09 +00:00
Laurent Destailleur
6910dd0b62 Remove deprecated code 2010-04-03 14:39:24 +00:00
Regis Houssin
25b12337e9 Fix: move core class to core directory 2010-03-23 08:58:15 +00:00
Regis Houssin
2337235f7e Fix: create Smarty directory if not exist 2010-03-19 11:20:29 +00:00
Laurent Destailleur
5077734b00 Remove warning 2010-03-17 21:50:31 +00:00
Laurent Destailleur
e3f4dddf02 Add favicon in html header 2010-03-17 21:41:06 +00:00
Laurent Destailleur
d38f72f50a Fix: Fix regression after removing pre.inc.php 2010-03-16 01:18:25 +00:00
Regis Houssin
72d0b60bbe Add JQuery for test 2010-03-04 08:28:30 +00:00
Laurent Destailleur
43b69e1da0 Qual: Clean a lot of code to prepare remove of pre.inc.php 2010-02-28 14:49:39 +00:00
Laurent Destailleur
99e6134e82 Qual: Clean a lot of code to prepare remove of pre.inc.php 2010-02-28 14:16:46 +00:00
Laurent Destailleur
40d42b56de Qual: First change to remove pre.inc.php 2010-02-28 04:32:18 +00:00
Laurent Destailleur
2fba5c03f3 Try to change memory limit dynamically 2010-02-28 02:01:46 +00:00
Regis Houssin
5e65d811a9 Fix: same session name on some installations 2010-02-26 11:30:35 +00:00
Laurent Destailleur
2a53d4d2de Comments 2010-02-21 03:14:26 +00:00
Laurent Destailleur
ae3cfce7cc New: Add patch from meos to resize images 2010-02-21 01:45:58 +00:00
Laurent Destailleur
3acd11c13c Move conf file information into page of dolibarr conf information.
New: Enhance https forcing.
2010-02-20 11:40:36 +00:00
r2gnl
a1874eb10a lang: english comments only 2010-02-19 13:50:49 +00:00
Laurent Destailleur
7e6e9604cc Fix: Autodetect if upgrade is required was not working just after a first installation. 2010-02-15 21:22:04 +00:00
Laurent Destailleur
c7e4c33878 More flexible usage of option MAIN_OPTIMIZE_SPEED 2010-02-02 08:07:30 +00:00
Regis Houssin
b2a265a1a8 Works on enhancement of project tasks 2010-01-27 07:58:31 +00:00
Laurent Destailleur
ee3cae8c38 CSRF chek is not done on GET methods as this breaks way to have links to a direct page. 2010-01-16 11:53:50 +00:00
Regis Houssin
3d3923a22f Add: Product remaining to be delivered
Fix: move deprecated function
2010-01-15 10:07:20 +00:00
Laurent Destailleur
1374e7eeab Fix: Css relative url must start with / as it means relative to DOL_URL_ROOT. 2010-01-13 13:11:32 +00:00
Laurent Destailleur
194cc07396 Rename the dol_loginfunction2 into dol_loginfunction to keep only one function. This function can support smarty templates and php template. 2010-01-10 23:54:42 +00:00
Laurent Destailleur
fe64eb07eb Fix: All output page must include main.inc.php 2009-12-29 18:10:48 +00:00
Laurent Destailleur
d4e89552e3 Fix: Code to manage view output must be stored or initialized into main and not into master (dedicated to all script included command line scripts). 2009-12-28 01:53:45 +00:00
Regis Houssin
ba091af947 Test: smarty integration and iphone template 2009-12-27 05:50:46 +00:00
Regis Houssin
16145ca7ce Test: smarty integration and iphone template 2009-12-26 02:03:04 +00:00
Laurent Destailleur
8924f1104a New: Serious speed optimizations (time to show a page is reduced by 40%) when using the hidden option MAIN_OPTIMIZE_SPEED. 2009-12-17 15:44:51 +00:00
Laurent Destailleur
987f4452b5 New: Optimize speed of loading lang files ith hidden option MAIN_OPTIMIZE_SPEED 2009-12-16 21:42:42 +00:00
Laurent Destailleur
0dc16a426b Fix: W3C 2009-11-07 13:57:47 +00:00
Laurent Destailleur
8922b93395 Fix: Bad W3C
New: Add link to download skin page
2009-11-02 18:53:26 +00:00
Regis Houssin
d94f48112b Fix: functions "ereg", "ereg_replace", "eregi", "eregi_replace" is deprecated since php 5.3.0 2009-10-24 06:18:56 +00:00
Regis Houssin
960afb50ed Fix: functions "ereg", "ereg_replace", "eregi", "eregi_replace" is deprecated since php 5.3.0 2009-10-24 06:10:00 +00:00
Regis Houssin
c226de4f00 Fix: functions "ereg", "ereg_replace", "eregi", "eregi_replace" is deprecated since php 5.3.0 2009-10-21 14:02:14 +00:00
Laurent Destailleur
6e43cda408 Remove deprecated code. Now usage of smarty is simpler (no need to declare things in config file) 2009-10-20 17:34:17 +00:00
Regis Houssin
01291c4a7c Fix: function "split" is deprecated since php 5.3.0 2009-10-20 13:14:44 +00:00
Laurent Destailleur
192fea4164 Add useragent in llx_events 2009-10-20 12:45:52 +00:00
Laurent Destailleur
a34de44b79 Add hidden options MAIN_HTML_HEADER and MAIN_HTML_FOOTER 2009-10-16 17:24:18 +00:00
Laurent Destailleur
0ce52bad02 Add hidden options MAIN_HTML_HEADER and MAIN_HTML_FOOTER 2009-10-16 17:15:32 +00:00
Laurent Destailleur
28993e7dcd Move artichow and smarty libs into includes directory with other libraries. 2009-10-07 17:51:15 +00:00
Laurent Destailleur
98b83f5554 Better look for smartphone 2009-10-07 17:36:51 +00:00
Laurent Destailleur
e682f3f83b Work on import module 2009-10-03 22:32:10 +00:00
Regis Houssin
ab93a4ef8c Fix: limit to company name for a server with multiple instance of dolibarr 2009-09-15 16:05:58 +00:00
Laurent Destailleur
7036c67414 New: First change to test how to optimize for smartphone. 2009-09-15 01:22:19 +00:00
Laurent Destailleur
5d9e35a3ed Fix: CSRF protection is enabled only if MAIN_SECURITY_CSRF is set. 2009-09-14 01:56:24 +00:00
Laurent Destailleur
070b160450 New: Add option MAIN_ONLY_LOGIN_ALLOWED to lock login to any user that is not value of constant.
For example MAIN_ONLY_LOGIN_ALLOWED=admin will lock login to any login except admin.
This make possible to make maintenance works.
A page to add/remove this constant will be added later in system-tools
2009-08-30 01:39:40 +00:00
Laurent Destailleur
534c8d8dbf Fix: Can't add product line to supplier order. 2009-08-28 22:46:40 +00:00
Laurent Destailleur
756ca4499a Qual: Ajax code is simpler and now works with IE6 2009-08-27 23:31:50 +00:00
Laurent Destailleur
c296965865 Fix: Some ajax features was broken 2009-08-27 22:20:01 +00:00
Laurent Destailleur
d2e3e207a6 Work on import module 2009-08-23 00:15:30 +00:00
Laurent Destailleur
000e40eb80 Perf: Some speed enhancements 2009-08-22 16:07:46 +00:00
Laurent Destailleur
c7e3ffbadb Typo fix 2009-08-21 20:22:46 +00:00
Laurent Destailleur
2b26eb5b4a Add a print icon to show a page to print without menus. 2009-08-19 20:57:15 +00:00
Laurent Destailleur
061a90ec1d New: Can add parameter &optioncss=print on url to have a page ready to print (menu removed) 2009-08-19 16:51:55 +00:00
Laurent Destailleur
944345b625 New: Can add parameter &optioncss=print on url to have a page ready to print (menu removed) 2009-08-19 16:26:12 +00:00
Laurent Destailleur
f52a4182a4 Fix: Pb with popu calendar in EI8 and security options of IE6 2009-08-13 12:32:22 +00:00
Laurent Destailleur
c11cef6d47 Add help link to online wiki 2009-08-12 12:59:14 +00:00
Laurent Destailleur
b1bb20c1bf New: First try to support right to left languages (ar_AR) 2009-08-11 12:28:30 +00:00
Laurent Destailleur
13a3de8d90 Fix: "Now" link works when date popup is not used.
New: Add option to hide help in menu.
2009-08-09 19:25:17 +00:00
Laurent Destailleur
e5475f0b28 Add hidden option MAIN_US_MINI_JS to use minified version of large javascript 2009-08-09 11:37:32 +00:00
Laurent Destailleur
6b8d5ae8a2 Add hidden option MAIN_US_MINI_JS to use minified version of large javascript 2009-08-09 11:22:19 +00:00
Laurent Destailleur
863b83c4db Look: Try an enhancement in background in eldy theme
Look: Link to online help is more clear.
2009-08-09 00:35:17 +00:00
Laurent Destailleur
b1ff004e6f Enhancement of install/upgrade process: If database version differs from programs version, the install page is automatically called. 2009-08-08 16:26:06 +00:00
Laurent Destailleur
1d600dd2f8 Qual: Usage of smarty templates by some modules is now cleaner. 2009-08-02 17:13:59 +00:00
Laurent Destailleur
378b96d504 Removed deprecated option. Use the conf->module->enabled instead. 2009-08-02 16:47:06 +00:00
Laurent Destailleur
5652291f8b Fix: W3C 2009-07-07 15:34:55 +00:00
Laurent Destailleur
8dc1e4ec30 Doc 2009-07-06 13:20:52 +00:00
Regis Houssin
32915db864 Security: just one token 2009-07-03 09:04:29 +00:00
Laurent Destailleur
b9971792ff Perf: Several speed optimizing after using the Google Page Speed plugin for firebug 2009-06-15 14:26:34 +00:00
Laurent Destailleur
f5a2f6eaaa Fix: Pb with the token post protection 2009-06-15 12:15:51 +00:00
Laurent Destailleur
28dd72e17a New: Prepare correct management of timezones
Fix: Bad support of timeouts.
2009-06-14 16:25:23 +00:00
Laurent Destailleur
25b608c9f6 Fix: Restore the picto title in gif format because the png transparency is not supported on IE6 (54% of users). 2009-06-14 12:38:45 +00:00
Laurent Destailleur
7b68ed8cd5 Qual: Removed deprecated source code 2009-06-10 19:51:00 +00:00
Laurent Destailleur
8732364f01 Qual: Now module services and products are two completely separated modules. 2009-06-08 18:14:37 +00:00
Laurent Destailleur
3c591db844 Restore changes after 27 may due to from savannah Crash. 2009-06-03 23:05:52 +00:00
Laurent Destailleur
b309cd1380 Fix: W3C 2009-05-27 14:32:19 +00:00
Regis Houssin
fa55e65e54 Fix: Disables token renewal in Ajax request 2009-05-26 17:01:18 +00:00
Laurent Destailleur
003208bc96 Disable the CSRF protection if we are in a development instance (to be able to do test and send post from tools). 2009-05-24 19:04:25 +00:00
Laurent Destailleur
e86917a148 Renamed conf->cookie_cryptkey into conf->file->cookie_cryptkey. The goal is to have all parameters defined inside file conf.php to be in $conf->file->xxx. Excep for database that are stored in $conf->db (historic reasons). This make code easier to understand and to know origine of a value (file or database). 2009-05-24 00:19:06 +00:00
Regis Houssin
f45caf216f Add: just used cookie for remind last user and last entity
Look: use cookie for view logo of last used entity
2009-05-23 17:44:36 +00:00
Regis Houssin
1420692e53 Add: view last user and last entity in login page if cookie is enabled 2009-05-23 15:35:02 +00:00
Regis Houssin
23ce17b308 Add: entity cookie just used for the login page 2009-05-22 15:38:09 +00:00
Regis Houssin
6f163a94a8 Add: entity cookie just used for the login page 2009-05-22 15:24:32 +00:00
Laurent Destailleur
8e167d3f80 Qual: Now creation of session is done before the loading of conf. This make code much easier to understand. 2009-05-22 00:20:45 +00:00
Laurent Destailleur
fb0e668fc0 Qual: Now creation of session is done before the loading of conf. This make code much easier to understand. 2009-05-21 22:28:05 +00:00
Laurent Destailleur
e4090f63b1 Session name DOLSESSID_databasename is replace with DOLSESSID_dolibarrwebinstance. This remove a key read in conf.class.php used to name session because, to make code simpler, we will need to create session before the conf is loaded. This is also most secure because it is possible to use 2 dolibarr instances even if database names are same on two different mysql server.
Add also comments on code to remember to simplify things.
2009-05-21 21:37:45 +00:00
Laurent Destailleur
9d57b9ec71 Add message to avoid to search 2009-05-21 17:45:13 +00:00
Laurent Destailleur
9a38002c46 Session name DOLSESSID_databasename is replace with DOLSESSID_dolibarrwebinstance. This remove a key read in conf.class.php used to name session because, to make code simpler, we will need to create session before the conf is loaded. This is also most secure because it is possible to use 2 dolibarr instances even if database names are same on two different mysql server.
Add also comments on code to remember to simplify things.
2009-05-21 13:37:18 +00:00
Regis Houssin
ee350b7352 Fix: ouverture d'une session temporaire de securite pour stocker une de cryptage alatoire pour
encryption du cookie
2009-05-20 18:23:02 +00:00
Regis Houssin
3786711822 Fix: ouverture d'une session temporaire de securite pour stocker une de cryptage alatoire pour
encryption du cookie
2009-05-20 18:18:25 +00:00
Regis Houssin
1437913f39 Fix: remplace rand par mt_rand plus performant 2009-05-19 21:51:08 +00:00
Regis Houssin
572a89e1d3 Fix: protection faille CSRF 2009-05-19 21:08:17 +00:00
Regis Houssin
63cbd5a24e Fix: protection faille CSRF 2009-05-19 20:59:20 +00:00
Regis Houssin
91624baceb Add: a color picker
Add: define a background color/image in mailing
2009-05-19 13:27:44 +00:00
Regis Houssin
53d214fbea Fix: just use exit 2009-05-18 14:41:32 +00:00
Laurent Destailleur
0c74892580 New: Better link to help wiki 2009-05-18 11:40:33 +00:00
Laurent Destailleur
7125e40f8e Another try to make the CSRF test before the master.inc.php 2009-05-17 22:40:24 +00:00
Regis Houssin
e5d222b6cc Fix: rgression sur l'utilisation des niveau du jeton, on test sur les 2 niveaux car
comportement alatoire avec certaines fonctions
2009-05-17 08:01:54 +00:00
Regis Houssin
9f86fcc443 Fix: niveau alatoire du jeton sur le confirm_form, on le scurise que si il contient
des donnes POST
2009-05-16 16:51:09 +00:00
Regis Houssin
36c58c62fc Fix: ajout de log sur le refus du jeton 2009-05-16 16:12:09 +00:00
Regis Houssin
1d719e2317 Fix: ajout debug 2009-05-16 16:00:44 +00:00
Regis Houssin
c1c1f8a4d2 Fix: ajout d'un niveau supplmentaire du cache du jeton 2009-05-16 15:45:26 +00:00
Regis Houssin
7285270f1c Fix: DOL_MAIN_URL_ROOT est dfini dans master.inc.php 2009-05-16 12:31:17 +00:00
Regis Houssin
2306a4c305 Fix: obsolete 2009-05-16 07:24:20 +00:00
Regis Houssin
3723bb350a Fix: on supprime le GET ET POST si la requete ne vient pas du serveur 2009-05-16 07:16:12 +00:00
Laurent Destailleur
3c49c6e5b7 Sec: Make CSRF test at the beginning. No functionnal code must be done if there is a security risk, so use just a return. Add test on a constant to remove test for some pages because this break a lot of features. 2009-05-16 06:31:59 +00:00
Regis Houssin
d3621e4593 Fix: ajout d'un jeton alatoire dans les requetes POST 2009-05-15 13:59:49 +00:00
Regis Houssin
1ea80f4f57 Fix: protection faille CSRF !!! 2009-05-15 12:59:39 +00:00
Regis Houssin
d73aac6e4e Fix: creation et verification d'un jeton alatoire afin de valider une requete POST, voici la ligne ajouter dans une requete POST
print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
2009-05-15 12:48:13 +00:00
Regis Houssin
df37827eb7 Todo: faille CSRF -- creation d'un jeton alatoire pour valider les requetes POST 2009-05-15 12:13:23 +00:00
Laurent Destailleur
5615a164fd Use a more specific picto for documentation help 2009-05-10 05:44:35 +00:00
Regis Houssin
f43d69faef Todo: utiliser $user->datelastlogin pour un cryptage alatoire 2009-05-08 21:17:02 +00:00
Regis Houssin
149e232bd3 Add: /core/cookie.class.php for create and encrypt/decrypt cookie value with personnal key
configured in conf.php with $dolibarr_main_cookie_cryptkey
2009-05-08 19:46:07 +00:00
Regis Houssin
865f6198e8 Add: /core/cookie.class.php for create and encrypt/decrypt cookie value with personnal key
configured in conf.php with $dolibarr_main_cookie_cryptkey
2009-05-08 19:46:07 +00:00
Laurent Destailleur
b38fb205f6 Fix: Ajax popup now works on IE. 2009-05-08 19:27:39 +00:00
Laurent Destailleur
e007bc6079 Fix: Do no load language file with user choice if lang code is forced on URL 2009-05-08 15:40:33 +00:00
Laurent Destailleur
326cd8b227 All data from conf file are stored into conf->file->xxx
Multicompany should be ok to logon with no breaking sessions when disabled
2009-05-08 01:23:33 +00:00
Regis Houssin
81a5393e70 Todo: il faut qu'on trouve une autre solution, il n'y a que comme ca que la multicompany a un fonctionnement correct... 2009-05-07 16:11:57 +00:00
Regis Houssin
f1a5c6fae3 Fix: seul le superadmin peut changer la config de syslog 2009-05-07 09:06:57 +00:00
Laurent Destailleur
1e37d24bf4 Can make a link between a member and a user 2009-05-06 23:30:49 +00:00
Laurent Destailleur
672f75a4d7 Can disable prototype and scriptaculous 2009-04-27 19:50:39 +00:00
Regis Houssin
b33020c86a Fix: entity cookie connection 2009-04-23 15:48:58 +00:00
Regis Houssin
908e408750 Fix: create session and cookie for multi-company 2009-04-23 13:39:39 +00:00
Regis Houssin
260f762e97 Fix: create session and cookie for multi-company 2009-04-23 13:19:28 +00:00
Laurent Destailleur
47f255ea15 Fix: Correct broken install 2009-04-17 18:26:21 +00:00
Regis Houssin
c52636bd38 New: early development of multi-company module 2009-04-17 07:45:00 +00:00
Regis Houssin
94a5df6a2d New: early development of multi-company module 2009-04-15 20:09:43 +00:00
Laurent Destailleur
cd78a8db7b Minor changes 2009-03-13 13:12:43 +00:00
Laurent Destailleur
0cd67ded54 New: Some pages can link to wiki help pages 2009-03-09 11:54:06 +00:00
Laurent Destailleur
2da5a733eb New: Some pages can link to wiki help pages 2009-03-09 11:28:15 +00:00
Laurent Destailleur
77d3821645 New: Some pages can link to wiki help pages 2009-03-09 11:28:12 +00:00
Laurent Destailleur
f3cfea66e1 New: Some pages can link to wiki help pages 2009-03-09 10:51:42 +00:00
Laurent Destailleur
61e2282cb1 Qual: Removed deprecated code 2009-03-02 18:25:51 +00:00
Laurent Destailleur
6a0877fe6a New: Can use absolute url path for help link 2009-02-24 21:54:18 +00:00