- 05 Jun, 2017 1 commit
-
-
Carsten Rose authored
#3568 / Form: fuer alle Buttons (save, close, new, delete) eine optionale class & text konfigurierbar machen Manual.rst: new configuration options listed at config.qfq.ini and Form.paramtert. Config.php: Defaults configured for F_SAVE|CLOSE|DELETE|NEW_BUTTON_TEXT|TOOLTIP|CLASS|GLYPH_ICON. BuildFormBootstrap.php: Changed code to take values from config.qfq.ini or (if given) from form.parameter definitions. QuickFormQuery.php: Copy new setup values from config.qfq.ini to Form. StoreTest.php: update unit test for new global configuration values config.qfq.example.ini: fill with new commented key/value pairs.
-
- 04 Jun, 2017 1 commit
-
-
Carsten Rose authored
Manual.rst: update doc of 'url-skip-history'. DatabaseUpdateData.php: update data structure as well as update given data from 'page' to 'url'. QuickFormReport.php: remove temporarily fix page/url. formEditor.sql: update table 'Form.forwardMode' to ('client', 'no', 'url', 'url-skip-history'). FormEditor now uses dynamicUpdate to hide/show FE 'forwardPage'.
-
- 01 Jun, 2017 1 commit
-
-
Carsten Rose authored
bulb.png: update image
-
- 27 May, 2017 1 commit
-
-
Carsten Rose authored
Database.php, QuickFormQuery.php: Initializing of native FormElements: _tgIndex HelperFormElement.php: new function formElementSetDefault(). Add '%d' to id's of extraButtonInfo text elements. Manual.rst: minor typos fixed
-
- 25 May, 2017 2 commits
-
-
Carsten Rose authored
Manual.rst: added documentation for new config.qfq.ini variables GFX_EXTRA_BUTTON_INFO_INLINE, GFX_EXTRA_BUTTON_INFO_BELOW.
-
Carsten Rose authored
-
- 20 May, 2017 3 commits
-
-
Carsten Rose authored
-
Carsten Rose authored
Manual.rst: notes how to setup length-exceptions to SECURITY_GET_MAX_LENGTH config.php: implemented special handling of GET vars, named with '..._<num>'.
-
Carsten Rose authored
Add `sqlLog` and `sqlLogMode` to QFQ tt-content records. Add mode 'error' and `none` to sqlLogMode. Manual.rst: Added explanations for SQL_LOG, SQL_LOG_MODE, and tt-content pendants sqlLog, sqlLogMode. Update config.qfq.ini to latest attributes. Database.php: rename $mode to $currentQueryMode to make it more descriptive. Recode dbLog(). Logger.php: do nothing if there is no file defined. Report.php: new function checkUpdateLog(). Config.php: Set defaults for config.qfq.ini SQL_LOG and SQL_LOG_MODE Store.php: Fix problem that an empty SQL_LOG will be prependad with SYSTEM_PATH_EXT.
-
- 19 May, 2017 4 commits
-
-
Carsten Rose authored
-
Carsten Rose authored
-
Carsten Rose authored
Manual.rst: fixed some typos, added three more examples to _pdf config.qfq.example.ini: Remove DB_NAME_TEST, Add some details about SQL_LOG, add example for TECHNICAL_CONTACT
-
Carsten Rose authored
-
- 18 May, 2017 3 commits
-
-
Carsten Rose authored
Manual.rst, AbstractException.php, SessionCookie.php, Downoad.php, Error.php, Link.php, Report.php, Store.php, AbstractBuildForm.php, BuildFormBootstrap.php, config.qfq.example.ini: replace all access to SHOW_DEBUG_INFO with respect to multiple values.
-
Carsten Rose authored
Implement additional 'SHOW_DEBUG_INFO = download' to track down problems with 'session forwarding'. Configure constants for SHOW_DEBUG_INFO for yes|no|auto
-
Carsten Rose authored
Add TestFormEditor.sql
-
- 12 May, 2017 4 commits
-
-
Carsten Rose authored
Manual.rst: add description for new attribute 'capture'. AbstractBuildForm.php: implement adding attribute.
-
Carsten Rose authored
-
Carsten Rose authored
-
Carsten Rose authored
Implemented: file upload check for mime type and max file size. File.php, AbstractBuildForm.php: Implement FE_FILE_MIME_TYPE_ACCEPT and FE_FILE_MAX_FILE_SIZE
-
- 10 May, 2017 2 commits
-
-
Carsten Rose authored
config.qfq.ini: REDIRECT_ALL_MAIL_TO = john@doe.com All emails, sent bey QFQ will not be sent to the given receiver, instead they are delivered to 'catch all email' address. Sendmail.php: Check config.qfq.ini setting for REDIRECT_ALL_MAIL_TO - if set take that address as real receiver for all mails from Form and Report.
-
Carsten Rose authored
DatabaseUpdateData.php, QuickFormQuery.php, formEditor.sql, TestFormEditor.sql: set new escapeDefaultSetting in Schema.
-
- 09 May, 2017 1 commit
-
-
Carsten Rose authored
Fixed: unnecessary exception if there is no Form / FormElement table Database.php: New function playSqlFile(). DatabaseUpdate.php: missing table Form won't throw an exception anymore. Manual.rst: note that formEditor.sql will be played automatically.
-
- 04 May, 2017 2 commits
-
-
Carsten Rose authored
-
Carsten Rose authored
Manual.rst: Add 'General'. Explain in more detail why `[FE][lockIP] = 0` is necessary. Add ESCAPE_TYPE_DEFAULT to config.qfq.ini explanation. Rewrite explanation for typeAheadLdapSearchPerToken.
-
- 03 May, 2017 3 commits
-
-
Carsten Rose authored
Html2Pdf.php: Fake the current 'user-agent' and add it as '--custom-header ...' AND '--custom-header-propagation' option to the wkhtmltopdf call. Without, T3 will deny FE Group access. The --custom-header-propagation seems to be necessary.
-
Carsten Rose authored
-
Carsten Rose authored
Manual.rst: describe new urlParam parameter `_sip` Html2Pdf.php: optional SIP encoding
-
- 01 May, 2017 1 commit
-
-
Carsten Rose authored
-
- 30 Apr, 2017 1 commit
-
-
Carsten Rose authored
-
- 26 Apr, 2017 1 commit
-
-
Carsten Rose authored
-
- 24 Apr, 2017 3 commits
-
-
Carsten Rose authored
-
Carsten Rose authored
Implemented defaultEscapeType. configurable via config.qfq.ini (global) and per Form. Implemented max GET parameter lenght. Default: 50. BTW: in phpunit test there have been a parameter 'file' which exceeds the limit of 32. Config.qfq: Skip empty variable names - happens in phpunit tests. Read new `systemEscapeTypeDefault`. Constants.php: renamed TOKEN_LDAP_ESCAPE_* to TOKEN_ESCAPE_LDAP_*. Add TOKEN_ESCAPE_MYSQL, TOKEN_ESCAPE_NONE Database.php: Set charset to real_escape_string() functions properly. Proxy for mysqli::real_escape_string() Evaluate.php: Respect global escapeTypeDefault. Implement formEditor.sql: add column `escapeTypeDefault`. Add FormElement 'escapeTypeDefault'.
-
Carsten Rose authored
Manual.rst: small abstract about implemented security enhancements in QFQ. Sanatize.php: New function urlDecodeArr(). Decode all _GET vars. AbstractBuildForm.php, BuildFormBootstrap.php: form head now contains the honeypot vars.
-
- 23 Apr, 2017 5 commits
-
-
Carsten Rose authored
Manual.rst: Cleanup doc for wkhtmltopdf. Remove all references to excel export. Add best practice for 'export area' (IP based restriction).
-
Carsten Rose authored
-
Carsten Rose authored
Handling of filenames in Zip's optimized. Spoken filename (no cryptic tempnames anymore). Correct filename extension, based on the mimetype. Manual.rst: updated doc for columns _pPdf,_zZip, _fFile. Remove doc for '_dDownload'. Download.php: new function targetFilenameExtension(). Replace cryptic temporary filenames against file-1, ... Link.php: reorder param array, to make TOKEN_DOWNLOAD position independet Report.php: Implemented _pPdf,_zZip, _fFile.
-
Carsten Rose authored
-
Carsten Rose authored
Link.php: If there is no output filename defined, the default is now computed in Download.php, not in Link.php as before. Download.php: Extract filename extension from mimetype, compare it with output filename, if it does not match, append the computed extension. This forces the filemanager to open the correct application after download.
-
- 22 Apr, 2017 1 commit
-
-
Carsten Rose authored
* Recode the '_link' notation for download * Add 'ZIP' as export format * Add 'parameter' to wkhtmltopdf * Implemented 'SYSTEM_STORE / SYSTEM_DOWNLOAD_POPUP' for detecting if there are download links on the page. This eleminates passing parameters through dozens of functions. * Report/Columntype '_dDownload' broken! Coding.md: described `download` from a coding point of view. Manual.rst: Update '_link' to latest notation of 'download'. download.php: implemented catching of 'Undefined index'. Added further exceptions. Download.php: Added cache=off for downloading. Rename getFile() to getElement(). Make getElement() more generic. Add zipFiles(). Implement 'downloadMode' in doElements(). Html2Pdf.php: recode to new download notation. Parameter to wkhtmltopdf implemented. Link.php: New TOKEN_* and NAME_DOWNLOAD_*, NAME_FILE. Move TOKEN_* to Constants.php. Will be used in Download.php too. Implemented 'SYSTEM_STORE / SYSTEM_DOWNLOAD_POPUP'. Implemented BASE64 encoding of multiple 'U' and 'u'. Report.php: Implemented 'SYSTEM_STORE / SYSTEM_DOWNLOAD_POPUP'. Sip.php: implement debugSip() to show Sip. New: base64 encoded parameter will be shown in clear. Store.php: some functions missed keyword 'static'. getVar() and getStore automatically decode base64 parameter. QuickFormQuery.php: Implemented 'SYSTEM_STORE / SYSTEM_DOWNLOAD_POPUP'.
-