- 20 May, 2017 1 commit
-
-
Carsten Rose authored
Add `sqlLog` and `sqlLogMode` to QFQ tt-content records. Add mode 'error' and `none` to sqlLogMode. Manual.rst: Added explanations for SQL_LOG, SQL_LOG_MODE, and tt-content pendants sqlLog, sqlLogMode. Update config.qfq.ini to latest attributes. Database.php: rename $mode to $currentQueryMode to make it more descriptive. Recode dbLog(). Logger.php: do nothing if there is no file defined. Report.php: new function checkUpdateLog(). Config.php: Set defaults for config.qfq.ini SQL_LOG and SQL_LOG_MODE Store.php: Fix problem that an empty SQL_LOG will be prependad with SYSTEM_PATH_EXT.
-
- 19 May, 2017 4 commits
-
-
Carsten Rose authored
-
Carsten Rose authored
-
Carsten Rose authored
Manual.rst: fixed some typos, added three more examples to _pdf config.qfq.example.ini: Remove DB_NAME_TEST, Add some details about SQL_LOG, add example for TECHNICAL_CONTACT
-
Carsten Rose authored
-
- 18 May, 2017 3 commits
-
-
Carsten Rose authored
Manual.rst, AbstractException.php, SessionCookie.php, Downoad.php, Error.php, Link.php, Report.php, Store.php, AbstractBuildForm.php, BuildFormBootstrap.php, config.qfq.example.ini: replace all access to SHOW_DEBUG_INFO with respect to multiple values.
-
Carsten Rose authored
Implement additional 'SHOW_DEBUG_INFO = download' to track down problems with 'session forwarding'. Configure constants for SHOW_DEBUG_INFO for yes|no|auto
-
Carsten Rose authored
Add TestFormEditor.sql
-
- 12 May, 2017 4 commits
-
-
Carsten Rose authored
Manual.rst: add description for new attribute 'capture'. AbstractBuildForm.php: implement adding attribute.
-
Carsten Rose authored
-
Carsten Rose authored
-
Carsten Rose authored
Implemented: file upload check for mime type and max file size. File.php, AbstractBuildForm.php: Implement FE_FILE_MIME_TYPE_ACCEPT and FE_FILE_MAX_FILE_SIZE
-
- 10 May, 2017 2 commits
-
-
Carsten Rose authored
config.qfq.ini: REDIRECT_ALL_MAIL_TO = john@doe.com All emails, sent bey QFQ will not be sent to the given receiver, instead they are delivered to 'catch all email' address. Sendmail.php: Check config.qfq.ini setting for REDIRECT_ALL_MAIL_TO - if set take that address as real receiver for all mails from Form and Report.
-
Carsten Rose authored
DatabaseUpdateData.php, QuickFormQuery.php, formEditor.sql, TestFormEditor.sql: set new escapeDefaultSetting in Schema.
-
- 09 May, 2017 1 commit
-
-
Carsten Rose authored
Fixed: unnecessary exception if there is no Form / FormElement table Database.php: New function playSqlFile(). DatabaseUpdate.php: missing table Form won't throw an exception anymore. Manual.rst: note that formEditor.sql will be played automatically.
-
- 04 May, 2017 2 commits
-
-
Carsten Rose authored
-
Carsten Rose authored
Manual.rst: Add 'General'. Explain in more detail why `[FE][lockIP] = 0` is necessary. Add ESCAPE_TYPE_DEFAULT to config.qfq.ini explanation. Rewrite explanation for typeAheadLdapSearchPerToken.
-
- 03 May, 2017 3 commits
-
-
Carsten Rose authored
Html2Pdf.php: Fake the current 'user-agent' and add it as '--custom-header ...' AND '--custom-header-propagation' option to the wkhtmltopdf call. Without, T3 will deny FE Group access. The --custom-header-propagation seems to be necessary.
-
Carsten Rose authored
-
Carsten Rose authored
Manual.rst: describe new urlParam parameter `_sip` Html2Pdf.php: optional SIP encoding
-
- 01 May, 2017 1 commit
-
-
Carsten Rose authored
-
- 30 Apr, 2017 1 commit
-
-
Carsten Rose authored
-
- 26 Apr, 2017 1 commit
-
-
Carsten Rose authored
-
- 24 Apr, 2017 3 commits
-
-
Carsten Rose authored
-
Carsten Rose authored
Implemented defaultEscapeType. configurable via config.qfq.ini (global) and per Form. Implemented max GET parameter lenght. Default: 50. BTW: in phpunit test there have been a parameter 'file' which exceeds the limit of 32. Config.qfq: Skip empty variable names - happens in phpunit tests. Read new `systemEscapeTypeDefault`. Constants.php: renamed TOKEN_LDAP_ESCAPE_* to TOKEN_ESCAPE_LDAP_*. Add TOKEN_ESCAPE_MYSQL, TOKEN_ESCAPE_NONE Database.php: Set charset to real_escape_string() functions properly. Proxy for mysqli::real_escape_string() Evaluate.php: Respect global escapeTypeDefault. Implement formEditor.sql: add column `escapeTypeDefault`. Add FormElement 'escapeTypeDefault'.
-
Carsten Rose authored
Manual.rst: small abstract about implemented security enhancements in QFQ. Sanatize.php: New function urlDecodeArr(). Decode all _GET vars. AbstractBuildForm.php, BuildFormBootstrap.php: form head now contains the honeypot vars.
-
- 23 Apr, 2017 5 commits
-
-
Carsten Rose authored
Manual.rst: Cleanup doc for wkhtmltopdf. Remove all references to excel export. Add best practice for 'export area' (IP based restriction).
-
Carsten Rose authored
-
Carsten Rose authored
Handling of filenames in Zip's optimized. Spoken filename (no cryptic tempnames anymore). Correct filename extension, based on the mimetype. Manual.rst: updated doc for columns _pPdf,_zZip, _fFile. Remove doc for '_dDownload'. Download.php: new function targetFilenameExtension(). Replace cryptic temporary filenames against file-1, ... Link.php: reorder param array, to make TOKEN_DOWNLOAD position independet Report.php: Implemented _pPdf,_zZip, _fFile.
-
Carsten Rose authored
-
Carsten Rose authored
Link.php: If there is no output filename defined, the default is now computed in Download.php, not in Link.php as before. Download.php: Extract filename extension from mimetype, compare it with output filename, if it does not match, append the computed extension. This forces the filemanager to open the correct application after download.
-
- 22 Apr, 2017 1 commit
-
-
Carsten Rose authored
* Recode the '_link' notation for download * Add 'ZIP' as export format * Add 'parameter' to wkhtmltopdf * Implemented 'SYSTEM_STORE / SYSTEM_DOWNLOAD_POPUP' for detecting if there are download links on the page. This eleminates passing parameters through dozens of functions. * Report/Columntype '_dDownload' broken! Coding.md: described `download` from a coding point of view. Manual.rst: Update '_link' to latest notation of 'download'. download.php: implemented catching of 'Undefined index'. Added further exceptions. Download.php: Added cache=off for downloading. Rename getFile() to getElement(). Make getElement() more generic. Add zipFiles(). Implement 'downloadMode' in doElements(). Html2Pdf.php: recode to new download notation. Parameter to wkhtmltopdf implemented. Link.php: New TOKEN_* and NAME_DOWNLOAD_*, NAME_FILE. Move TOKEN_* to Constants.php. Will be used in Download.php too. Implemented 'SYSTEM_STORE / SYSTEM_DOWNLOAD_POPUP'. Implemented BASE64 encoding of multiple 'U' and 'u'. Report.php: Implemented 'SYSTEM_STORE / SYSTEM_DOWNLOAD_POPUP'. Sip.php: implement debugSip() to show Sip. New: base64 encoded parameter will be shown in clear. Store.php: some functions missed keyword 'static'. getVar() and getStore automatically decode base64 parameter. QuickFormQuery.php: Implemented 'SYSTEM_STORE / SYSTEM_DOWNLOAD_POPUP'.
-
- 20 Apr, 2017 2 commits
-
-
Carsten Rose authored
Implemented spinning wheel (hourglass) displayed during rendering and downloading PDF. Link.php, Report.php: New $vars[NAME_EXTRA_CONTENT_WRAP] which holds a '<button>' definition with necesary 'data-*' attributes. The Modal Dialog needs a uniq html id (derived from ttContentUid). That one is returned to Report() if there is at least one download element.
-
Carsten Rose authored
Implemented download.php to offer SIP protected downloads for single files (any filetype) as well as concatenated PDF files and converted HTML pages. download.php: API Interface DownloadException.php: New exception class for downloads - might be extended for better error handling. OnArray.php: new function getArrayItemKeyNameStartWith() to filter for specific elements in an array. New function arrayEscapeshellarg() to escape args Download.php: Main class. Link.php, Report.php: implemented new link type 'd' (=download)
-
- 13 Apr, 2017 1 commit
-
-
Carsten Rose authored
Manual.rst: Prefetch doc enhanced. Ldap.php: replacement of '?' in LDAP search not processed with MODE_LDAP_PREFETCH - fixed. FE_TYPEAHEAD_LDAP_KEY_PRINTF renamed to FE_TYPEAHEAD_LDAP_ID_PRINTF AbstractBuildForm.php: copy 'FE_TYPEAHEAD_LDAP_ID_PRINTF' to SIP seems never be done - fixed
-
- 12 Apr, 2017 3 commits
-
-
Carsten Rose authored
#3552 / typeAheadLdapSearchPerToken - webpass kann nicht gleichzeitig nach Vornamen und Nachnamen suchen After discussing with EV it's not necessary to permut the serach, instead just repeat the whole search with every token. Quite simple and effective.
-
Carsten Rose authored
-
Carsten Rose authored
#3552 / typeAheadLdapSearchPerToken - webpass kann nicht gleichzeitig nach Vornamen und Nachnamen suchen Neuen Modus 'typeAheadLdapSearchPerToken' implementiert. Manual.rst: neues Feature dokumentiert. Ldap.php: Neue Funktion 'explodePermutSearch()'.
-
- 08 Apr, 2017 1 commit
-
-
Carsten Rose authored
_paged renders the the current client parameter into a return URL. If the current client already contained a SIP, a check in Sip.php threw an exception, to prevent using the parameter 's' by the user. Sip.php: New: the exception is only thrown if the SIP is unknown.
-
- 06 Apr, 2017 1 commit
-
-
Carsten Rose authored
formEditor.sql: added 'on update current timestamp'.
-