Webtools:Mozparty: Difference between revisions

Line 37: Line 37:
* <strike>After updating a profile, the user is logged out</strike>
* <strike>After updating a profile, the user is logged out</strike>


* <strike>When updating a profile, if a password is entered into the first box but not the second (or the second doesn't match), the password overwrites the saved password in the database in plain text. -- This no longer produces an overwrite in plaintext, but it does not show an error of any sort, and takes the user back to their home page.  It is a bad UI experience and should be fixed, IMO.  This is pretty much the same issue as below.</strike>
* When updating a profile, if a password is entered into the first box but not the second (or the second doesn't match), the password overwrites the saved password in the database in plain text.


* <strike>When updating a profile, if a password is entered into the second box but not the first, the form continues submission, no updates are made, no errors are shown -- Same problem as above.  When passwords to not match you should stop submission and show an error.</strike>
* When updating a profile, if a password is entered into the second box but not the first, the form continues submission, no updates are made, no errors are shown


* <strike>going to /party/view/<number> and clicking "Count me in!" will create rows in the database for parties that don't exist</strike>
* <strike>going to /party/view/<number> and clicking "Count me in!" will create rows in the database for parties that don't exist</strike>
Line 48: Line 48:
* <strike>Session method should be 'database', not 'php'.  If this were deployed on a cluster we'd want to avoid using /tmp for storing session data.  See line: 78
* <strike>Session method should be 'database', not 'php'.  If this were deployed on a cluster we'd want to avoid using /tmp for storing session data.  See line: 78
  78    define('CAKE_SESSION_SAVE', 'php');</strike>
  78    define('CAKE_SESSION_SAVE', 'php');</strike>
* Line 46 of users_controller.php redirects to "user" which no longer exists - that should be "users"
* If you go to /parties/invite/$number you get a page that offers to invite guests with a URL or an email address.  The URL gives a 404, it should be s/users/parties/
Confirmed users, Bureaucrats and Sysops emeriti
1,737

edits