Confirmed users, Bureaucrats and Sysops emeriti
1,737
edits
| Line 37: | Line 37: | ||
* <strike>After updating a profile, the user is logged out</strike> | * <strike>After updating a profile, the user is logged out</strike> | ||
* | * When updating a profile, if a password is entered into the first box but not the second (or the second doesn't match), the password overwrites the saved password in the database in plain text. | ||
* | * When updating a profile, if a password is entered into the second box but not the first, the form continues submission, no updates are made, no errors are shown | ||
* <strike>going to /party/view/<number> and clicking "Count me in!" will create rows in the database for parties that don't exist</strike> | * <strike>going to /party/view/<number> and clicking "Count me in!" will create rows in the database for parties that don't exist</strike> | ||
| Line 48: | Line 48: | ||
* <strike>Session method should be 'database', not 'php'. If this were deployed on a cluster we'd want to avoid using /tmp for storing session data. See line: 78 | * <strike>Session method should be 'database', not 'php'. If this were deployed on a cluster we'd want to avoid using /tmp for storing session data. See line: 78 | ||
78 define('CAKE_SESSION_SAVE', 'php');</strike> | 78 define('CAKE_SESSION_SAVE', 'php');</strike> | ||
* Line 46 of users_controller.php redirects to "user" which no longer exists - that should be "users" | |||
* If you go to /parties/invite/$number you get a page that offers to invite guests with a URL or an email address. The URL gives a 404, it should be s/users/parties/ | |||