44283 Commits

Author SHA1 Message Date
Dongsheng Cai
93beda0490 MDL-23308, coursefiles plugin could return the file link instead of copying it 2010-09-03 04:14:29 +00:00
Andrew Davis
f5e2602aea gradebook MDL-15457 hide grade item when activity is hidden in the course 2010-09-03 02:49:04 +00:00
Moodle Robot
5a5db5d211 Updated the HEAD build version to 20100903 2010-09-03 00:50:59 +00:00
AMOS bot
840bf19d80 Automatic installer lang files (20100903) 2010-09-03 00:40:08 +00:00
Petr Skoda
86f6eec327 MDL-23184 PARAM_CLEANHTML is work with real html markup only, it does not do our custom FORMAT_MOODLE tweaks anymore, luckily this was not supposed to be used before storage to database in 1.9, that means there should not be any BC issues;Êimproved docs 2010-09-02 18:49:31 +00:00
Petr Skoda
f4091f8e37 MDL-23184 chat supports html only input 2010-09-02 18:42:29 +00:00
Petr Skoda
a8320bc431 MDL-23184 some TODOs for incorrect text cleaning 2010-09-02 18:41:38 +00:00
Petr Skoda
c4d7d72124 MDL-23184 user confirm improved param cleaning 2010-09-02 18:39:37 +00:00
Petr Skoda
9f75f77da3 MDL-23184 improved docs, do not show deprecated examples 2010-09-02 18:37:22 +00:00
Petr Skoda
965ccba9f4 MDL-23184 no need to clean searches, we use bound params now and we do not print it anywhere 2010-09-02 18:35:44 +00:00
Petr Skoda
72e9f8910d MDL-23184 activity names are in fact dir names 2010-09-02 18:34:39 +00:00
Petr Skoda
b8ea3041eb MDL-23184 activity names are now either PARAM_TEXT or PARAM_CLEANHTML, this should be more accurate 2010-09-02 18:29:39 +00:00
Petr Skoda
93de0ac293 MDL-23184 using PARAM_NOTAGS instead of general cleaning for fields that are not supposed to have tags 2010-09-02 18:25:30 +00:00
Petr Skoda
484a976522 MDL-23184 PARAM_CLEANHTML used in messaging for now, adding some hints how to implement support for text formats properly 2010-09-02 18:16:45 +00:00
Petr Skoda
fb59f2f126 MDL-23184 CLEAN_PARAM explanation improved in unittests 2010-09-02 18:12:21 +00:00
Petr Skoda
45423ee26d MDL-23184 fixed wrong PARAM_CLEAN 2010-09-02 18:09:49 +00:00
Petr Skoda
ceb65471f7 MDL-24064 disabling bulk enrol for now, it needs to be rewritten a bit; fixing incorrect sue of PARAM_CLEAN 2010-09-02 18:08:04 +00:00
Petr Skoda
7e4341f9f5 fixed php docs, PARAM_CLEANHTML does not strip backslashes anymore 2010-09-02 17:58:03 +00:00
Petr Skoda
cc1eebbb34 MDL-23184 role description accepts any HTML, we have to trust people that can edit roles anyway 2010-09-02 17:55:22 +00:00
Petr Skoda
44913c8d47 MDL-24063 finally after so many years developers have to specify parameter types in optional_param() and required_param() - the developers get standard PHP notices and debugging info, hopefully that will be enough to persuade everybody to stop abusing default PARAM_CLEAN; fixing php docs 2010-09-02 17:51:59 +00:00
Petr Skoda
40ea93a4fe MDL-15897 fix strict comparison 2010-09-02 17:33:49 +00:00
Petr Skoda
b6059edcac MDL-22959 PARA_TEXT multilang whitelisting cleanup; the text is no longer being processed by kses or htmlpurifier - this should fix some recent regressions, any xhtml strict tweaking should be done in format_string() if necessary; unit tests included 2010-09-02 17:30:00 +00:00
Tim Hunt
dc3e95c0d8 MDL-24060 Need a way to control whether html_to_text lists all links in the HTML 2010-09-02 13:06:17 +00:00
Petr Skoda
fd8a6a7354 MDL-24059 stripslashes TODO notes 2010-09-02 12:57:04 +00:00
Petr Skoda
00521032e9 MDL-24058 removing obsolte stripslashes 2010-09-02 12:56:26 +00:00
Petr Skoda
798b0b331b MDL-24058 no stripslashes any more, removing 2010-09-02 12:49:53 +00:00
Petr Skoda
30c39ac54f MDL-24058 no stripslashes any more 2010-09-02 12:49:29 +00:00
Petr Skoda
714dac9f7b MDL-24058 magic quotes are being delat with in our lib/setup.php, no need to use them again in our heavily hacked quickforms 2010-09-02 12:47:59 +00:00
Petr Skoda
e6fec85d61 MDL-24058 removing forgotten stripslashes from gradebook, no magic quotes used any more 2010-09-02 12:44:58 +00:00
Petr Skoda
7270479f7d MDL-24058 removing forgotten stripslashes, no magic quotes used any more 2010-09-02 12:44:27 +00:00
Petr Skoda
6847d8ca17 MDL-24058 fixing wron DML conversion 2010-09-02 12:43:26 +00:00
Petr Skoda
aab03169d7 MDL-24058 fixing docs 2010-09-02 12:41:58 +00:00
Petr Skoda
de08803f6c MDL-24058 removing unnecessary addslashes 2010-09-02 12:41:30 +00:00
Petr Skoda
9cc41dfd6d MDL-24058 replacing forbidden addslashes with something that is most probably completely useless 2010-09-02 12:40:34 +00:00
Petr Skoda
8866508f54 MDL-24058 just killing addslashes, no idea why we have this horrible code in CVS 2010-09-02 12:37:00 +00:00
Petr Skoda
9e07366784 MDL-24058 fixed JS string quoting 2010-09-02 12:35:47 +00:00
Petr Skoda
1d28bdbde1 MDL-24058 removed forgotten addslashes from feedback 2010-09-02 12:34:51 +00:00
Petr Skoda
24b8188960 MDL-24058 removed forgotted addslashes 2010-09-02 12:32:36 +00:00
Petr Skoda
5c38934703 MDL-16780, MDL-24058 removing AJAX from list of used libs too 2010-09-02 12:29:25 +00:00
Petr Skoda
c1c89e3b21 MDL-16780, MDL-24058 removing PHP4 JSON implementation and related AJAX pear stuff that is not used any more - it is buggy, so we would have to either fix it (waste of time) or we have to remove it; no core code is using this and contrib can be easily updated to use standard json_encode() 2010-09-02 12:27:47 +00:00
Petr Skoda
8f46ae619c MDL-24058 fixed potential XSS 2010-09-02 12:19:08 +00:00
Petr Skoda
37070863db MDL-24058 removed obsolete addslashes 2010-09-02 12:17:11 +00:00
Petr Skoda
4287c1c2a0 MDL-24058 fixed sql injection, addslashes must not be used any more 2010-09-02 12:16:24 +00:00
Petr Skoda
7d8f881a49 MDL-23997 using strings instead of integers in binding emulation - this should be compatible both with int and nvarchar sql types 2010-09-02 10:24:40 +00:00
Dan Marsden
902eca4252 Assignment MDL-23992 - use fullname instead of username for exported files to improve privacy 2010-09-02 09:49:04 +00:00
Aparup Banerjee
d2d38c4651 lib MDL-23180 put in obviously missed global $CFG. 2010-09-02 06:34:48 +00:00
Aparup Banerjee
c663653f8b assignment MDL-23998
clarified 'revert to draft' button in a advanced upload assignment with a help icon.
button 'no more submissions' changed to say 'Prevent submission updates'.
2010-09-02 06:16:45 +00:00
Andrew Davis
b593bf4d2e gradebook MDL-24021 filter out deleted users from the user selector that is used in the user and overview report 2010-09-02 04:17:56 +00:00
Andrew Davis
f914e8d3cf gradebook MDL-24021 re-added all users option to user report 2010-09-02 04:09:31 +00:00
Sam Hemelryk
090417c109 workshop MDL-24046 Fixed SQL error in workshop submission validation 2010-09-02 03:22:46 +00:00