GitLab

added nl2br()'s where appropriate!

UnConeD: will you add the nl2br()'s to your theme or do you want
         me to do so?  Remark that it will look screwed up (too
         many <br>'s) with the current stories but it won't with
         new entries ...

* added the database tables of drop to CVS: not the content, just the
  table definitions.

This significant commit fixes 99% of all known bugs and improves drop.org
by means of better security checks in order to avoid malicious behavior.
In addition, quite some code has been fine-tuned.

However, as a result, every theme will require a small update ...

- no comment

A bunch of internal changes:
 - better organisation of include files
 - renamed a few function to make more sense
 - small bugfix in the user account registration
 - ...

- small bugfix: the voting settings where not 100% correct

* added a 'DOCTYPE' statement

Fixed 4 tiny bugs in unconed.theme:
 + 'nocomments' should be removed as it's no longer supported.
 + '$sid' should be passed or you'll get moderation errors.
 + 'get' should be 'post' in the control form.
 + renamed the 'Refresh'-button to 'Save'.

A big, fat commit with a shitload of internal changes.  Not that much
visual changes:

- removed redundant files user.class.php, calendar.class.php
  and backend.class.php.
- converted *all* mysql queries to queries supported by the
  database abstraction layer.
- expanded the watchdog to record more information on what
  actually happened.
- bugfix: anonymous readers where not able to view comments.
- bugfix: anonymous readers could gain read-only access to
  the submission queue.
- bugfix: invalid includes in backend.php
- bugfix: invalid use of '$user->block'

and last but not least:

- redid 50% of the user account system

* fixed a small bug.

* fixed a small bug

* fixed minor bug

* fixed 2 bugs in the discussion forum.

 - anonymous chicken was able to moderate commnets
 - "anonymous chicken" was displayed in the comment reply form
 - ...

The only thing left to be done is to tackle (or continue tackling)
the user accounts which in fact is quite some work. :o)

structure changes, some sections are expanded.  Take a look at the source
code or ask me to elaborate on certain issues/topics.

timout (cookie expires to fast) problem ... *fingers crosses*

Changelog
---------
- improved the user information page.
- improved the story submission page.
- fixed comments score bug: '.00' --> 'x.00'
- tried fixing the calendar wrapping - UnConeD, is it fixed now?
- provided a link back to the submission queue after having voted
  for a story.
- fixed comment subject bug (and security flaw) by replacing
  quotes by ".
- updated theme 'zaphod': fixed 2 bugs.
- updated theme 'marvin': fixed 1 bug and improved the layout so
  things wrap (hopefully) better in Windows.
- comments have by default no subject pre-set - if no subject is
  provided, the user is warned and when a comment eventually got
  submitted without a subject, a subject is composed using the x
  first characters of the comment's body.
- improved comments on submit.php
- corrected a typo in the FAQ.

UnConeD
-------
- replace 'article.php' by 'discussion.php'
- comment() still uses old references to account.php: the
  parameters you supply to account.php does no longer hold.
  You have to update those links to the new syntax.
- commentcontrol() is outdated - copy paste the one of
  theme 'marvin' and adjust it to your likings.

better theme descriptions so give it a change and post your ideas. (see
config.inc or the "Custumize your page" site.

* On a side note:
   Jeroen: I'm feeling somewhat better at the moment so normally it
           should be OK if you'd stop by tonight (after 19:30h).
           Give me some feedback on this. ;-)

- Added a basic implementation of comment moderation
- Updated and renamed my 2 themes: I removed redundant boxes and tried to
  work towards simplicity.
- Disabled the other themes as they are broken (I gave you sufficent time
  to update them).
- Removed redundant files.
- Added security checks with regard to the usage of HTML tags.

Various smaller changes: one of the more interesing is the addition of a
check()-function which validates input from forms.  The allowed HTML tags
can be configured in config.inc.