Nabeel

http://forum.phpvms....ess-the-api-r16 http://forum.phpvms.net/page/index.html/_/developers-guides/debugging-r26 Debug logs are written to core/logs

A small patch to fix a security flaw has been released; it applies to version 2.1.934 and below. It doesn't apply to any of the beta versions. Replace the admin/index.php and admin/action.php files. Thanks for Jacob Axford for finding and bringing the flaw to my attention. The updated version is now 2.1.935. Nabeel

Dammit haha

Hi all, I'm looking for a front-end developer, with heavy experience in Javascript (backbone, ember, sencha), and experience with Phonegap/Apptanium. Some PHP is good. Must be willing to learn and go the extra mile to figure things out. You need to be able to architect and code some fairly complicated UIs, with code-reuse and develop libraries for use across multiple interfaces. Preferably in the NY area and can commute to Stamford, CT once a week or so, but if you're particularly strong we can maybe do a work-from-remote. It's a really cool startup, and I'll be your boss Let me know if you're interested, or know someone who is.

To this <select name="bgimage"> make it: <select name="bgimage" id="bgimage"> Then at the matching </select>, after it add: <div id="preview_image"></div> Then at the bottom of the template: <script type="text/javascript"> $("#bgimage").bind('change', function() { var image = $(this).val(); $("#preview_image").html("<img src='/lib/signatures/" + image + "' />"); }); </script> The /lib/signatures path is probably wrong. But it's something like that, more than enough to start with... I just wrote it out and haven't tested it so... Basically it's using jQuery to bind to a change event on the select box, then when it changes, it adds the img tag into the div that was added to show the preview.

I think it's because you have styles on the table tag

Changed Files: m index.php m install/includes/Installer.class.php Merge pull request #72 from Vansers/master Forgot one more thing. View complete changes Download from here

Changed Files: m index.php Forgot a few things, will track down if there is more. It gave me an error that the layout.tpl or header.tpl doesn't exist, changed a few things to read the .php's. View complete changes Download from here

Changed Files: m install/includes/Installer.class.php Nabeel, you forgot to change line 110. It was still tpl, and the installer still gave me the file_get_contents error. View complete changes Download from here

Changed Files: m install/sql/install.sql m install/sql/structure.xml Fixed installer SQL files being blank View complete changes Download from here

Changed Files: m install/dbtest.php m install/install.php + install/templates/config.php + install/templates/error.php + install/templates/footer.php + install/templates/header.php + install/templates/s0_config_check.php + install/templates/s1_db_setup.php + install/templates/s2_site_setup.php + install/templates/s3_setup_finished.php + install/templates/setting.php + install/templates/success.php m install/update.php refs #71 updated installer templates View complete changes Download from here

Changed Files: m admin/templates/awards_allawards.php m admin/templates/awards_awardform.php m admin/templates/core_about.php m admin/templates/core_error.php m admin/templates/core_footer.php m admin/templates/core_htmlhead.php m admin/templates/core_htmlreq.php m admin/templates/core_message.php m admin/templates/core_navigation.php m admin/templates/core_sidebar.php m admin/templates/core_success.php m admin/templates/dashboard.php m admin/templates/diff_showdiff.php m admin/templates/downloads_categoryform.php m admin/templates/downloads_downloadform.php m admin/templates/downloads_overview.php m admin/templates/email_commentadded.php m admin/templates/export_form.php m admin/templates/finance_balancesheet.php m admin/templates/finance_expenseform.php m admin/templates/finance_expenselist.php m admin/templates/finance_header.php m admin/templates/finance_summarysheet.php m admin/templates/groups_groupform.php m admin/templates/groups_grouplist.php m admin/templates/import_aircraftform.php m admin/templates/import_form.php m admin/templates/logs_index.php m admin/templates/mailer_form.php m admin/templates/maintenance_changepilotid.php m admin/templates/maintenance_options.php m admin/templates/news_additem.php m admin/templates/news_list.php m admin/templates/ops_aircraftform.php m admin/templates/ops_aircraftlist.php m admin/templates/ops_airlineform.php m admin/templates/ops_airlineslist.php m admin/templates/ops_airportform.php m admin/templates/ops_airportlist.php m admin/templates/ops_scheduleform.php m admin/templates/ops_schedules.php m admin/templates/pages_allpages.php m admin/templates/pages_editpage.php m admin/templates/pilots_addawards.php m admin/templates/pilots_addtogroup.php m admin/templates/pilots_awards.php m admin/templates/pilots_details.php m admin/templates/pilots_detailtabs.php m admin/templates/pilots_groups.php m admin/templates/pilots_list.php m admin/templates/pilots_options.php m admin/templates/pilots_pending.php m admin/templates/pilots_viewallbids.php m admin/templates/pirep_addcomment.php m admin/templates/pirep_edit.php m admin/templates/pirep_log.php m admin/templates/pirep_reject.php m admin/templates/pirepadmin_approved.php m admin/templates/pireps_comments.php m admin/templates/pireps_filter.php m admin/templates/pireps_list.php m admin/templates/ranks_allranks.php m admin/templates/ranks_rankform.php m admin/templates/reports_aircraft.php m admin/templates/reports_main.php m admin/templates/route_map.php m admin/templates/settings_addcustomfield.php m admin/templates/settings_addpirepfield.php m admin/templates/settings_addsetting.php m admin/templates/settings_customfieldsform.php m admin/templates/settings_mainform.php m admin/templates/settings_pirepfieldsform.php m admin/templates/sidebar_addpage.php m admin/templates/sidebar_aircraft.php m admin/templates/sidebar_airlines.php m admin/templates/sidebar_airports.php m admin/templates/sidebar_awards.php m admin/templates/sidebar_central.php m admin/templates/sidebar_customfields.php m admin/templates/sidebar_dashboard.php m admin/templates/sidebar_downloads.php m admin/templates/sidebar_editschedule.php m admin/templates/sidebar_expenses.php m admin/templates/sidebar_financial.php m admin/templates/sidebar_groups.php m admin/templates/sidebar_import.php m admin/templates/sidebar_mailer.php m admin/templates/sidebar_maintenance.php m admin/templates/sidebar_news.php m admin/templates/sidebar_pages.php m admin/templates/sidebar_pending.php m admin/templates/sidebar_pilots.php m admin/templates/sidebar_pirep_pending.php m admin/templates/sidebar_pirepfields.php m admin/templates/sidebar_ranks.php m admin/templates/sidebar_reports.php m admin/templates/sidebar_schedules.php m admin/templates/sidebar_settings.php m admin/templates/vacentral_index.php refs #71 Added die() line to admin template files View complete changes Download from here

Changed Files: m core/templates/acarsmap.php m core/templates/activity_list.php m core/templates/contact_form.php m core/templates/contact_sent.php m core/templates/core_error.php m core/templates/core_htmlhead.php m core/templates/core_htmlreq.php m core/templates/core_message.php m core/templates/core_navigation.php m core/templates/core_success.php m core/templates/download_item.php m core/templates/downloads_list.php m core/templates/email_lostpassword.php m core/templates/email_pilot_retired.php m core/templates/email_registered.php m core/templates/email_registrationaccepted.php m core/templates/email_registrationdenied.php m core/templates/finance_balancesheet.php m core/templates/finance_header.php m core/templates/finance_summarysheet.php m core/templates/flown_routes_map.php m core/templates/frontpage_main.php m core/templates/frontpage_recentbids.php m core/templates/frontpage_recentpilots.php m core/templates/frontpage_reports.php m core/templates/fsacars_config.php m core/templates/fsfk_liveacars_config.php m core/templates/fsfk_log_flightcritique.php m core/templates/fsfk_log_flightdata.php m core/templates/fsfk_log_flightimages.php + core/templates/fsfk_log_flightplan.php m core/templates/fsfk_pirep_config.php m core/templates/fsfk_vaconfig.php m core/templates/fspax_config.php m core/templates/login_already.php m core/templates/login_complete.php m core/templates/login_forgotpassword.php m core/templates/login_form.php m core/templates/login_notfound.php m core/templates/login_passwordreset.php m core/templates/login_rejected.php m core/templates/login_unconfirmed.php m core/templates/maintenance.php m core/templates/news_newsitem.php m core/templates/pages_content.php m core/templates/pages_items.php m core/templates/pages_nopermission.php m core/templates/pages_notfound.php m core/templates/pilot_public_profile.php m core/templates/pilots_list.php m core/templates/pirep_editform.php m core/templates/pirep_new.php m core/templates/pirep_viewreport.php m core/templates/pireps_addcomment.php m core/templates/pireps_airportdropdown.php m core/templates/pireps_viewall.php m core/templates/profile_badge.php m core/templates/profile_changepassword.php m core/templates/profile_edit.php m core/templates/profile_main.php m core/templates/profile_myroutesmap.php m core/templates/profile_stats.php m core/templates/registration_autoconfirm.php m core/templates/registration_complete.php m core/templates/registration_customfields.php m core/templates/registration_error.php m core/templates/registration_javascript.php m core/templates/registration_mainform.php m core/templates/registration_sentconfirmation.php m core/templates/reqlogin.php m core/templates/route_map.php m core/templates/schedule_bids.php m core/templates/schedule_boarding_pass.php m core/templates/schedule_briefing.php m core/templates/schedule_details.php m core/templates/schedule_list.php m core/templates/schedule_results.php m core/templates/schedule_searchform.php m core/templates/xacars_config.php refs #71 Added die() line to template files View complete changes Download from here

Can you try out the changes listed in the ticket? https://github.com/nshahzad/phpVMS/issues/71 Comment there directly. Also, access the acarsmap.php directly via the URL - what do you see? Then if you add to that file, the very first line <?php if(!defined('IN_PHPVMS') && IN_PHPVMS !== true) { die(); } ?> Is it blank? I don't have access to my webserver ATM to check that.

Changed Files: m core/classes/TemplateSet.class.php refs #71 Add .tpl override View complete changes Download from here

Changed Files: m core/app.config.php refs #71 Code changes in app.config View complete changes Download from here

I'm going through this right now and documenting it in/through github. I'll have full instructions and you guys can test it, that'd be great.

Changed Files: m core/classes/TemplateSet.class.php refs #71 changed extention to php for templates View complete changes Download from here

Changed Files: + admin/templates/awards_allawards.php + admin/templates/awards_awardform.php + admin/templates/core_about.php + admin/templates/core_error.php + admin/templates/core_footer.php + admin/templates/core_htmlhead.php + admin/templates/core_htmlreq.php + admin/templates/core_message.php + admin/templates/core_navigation.php + admin/templates/core_sidebar.php + admin/templates/core_success.php + admin/templates/dashboard.php + admin/templates/diff_showdiff.php + admin/templates/downloads_categoryform.php + admin/templates/downloads_downloadform.php + admin/templates/downloads_overview.php + admin/templates/email_commentadded.php + admin/templates/export_form.php + admin/templates/finance_balancesheet.php + admin/templates/finance_expenseform.php + admin/templates/finance_expenselist.php + admin/templates/finance_header.php + admin/templates/finance_summarysheet.php + admin/templates/groups_groupform.php + admin/templates/groups_grouplist.php + admin/templates/import_aircraftform.php + admin/templates/import_form.php + admin/templates/logs_index.php + admin/templates/mailer_form.php + admin/templates/maintenance_changepilotid.php + admin/templates/maintenance_options.php + admin/templates/news_additem.php + admin/templates/news_list.php + admin/templates/ops_aircraftform.php + admin/templates/ops_aircraftlist.php + admin/templates/ops_airlineform.php + admin/templates/ops_airlineslist.php + admin/templates/ops_airportform.php + admin/templates/ops_airportlist.php + admin/templates/ops_scheduleform.php + admin/templates/ops_schedules.php + admin/templates/pages_allpages.php + admin/templates/pages_editpage.php + admin/templates/pilots_addawards.php + admin/templates/pilots_addtogroup.php + admin/templates/pilots_awards.php + admin/templates/pilots_details.php + admin/templates/pilots_detailtabs.php + admin/templates/pilots_groups.php + admin/templates/pilots_list.php + admin/templates/pilots_options.php + admin/templates/pilots_pending.php + admin/templates/pilots_viewallbids.php + admin/templates/pirep_addcomment.php + admin/templates/pirep_edit.php + admin/templates/pirep_log.php + admin/templates/pirep_reject.php + admin/templates/pirepadmin_approved.php + admin/templates/pireps_comments.php + admin/templates/pireps_filter.php + admin/templates/pireps_list.php + admin/templates/ranks_allranks.php + admin/templates/ranks_rankform.php + admin/templates/reports_aircraft.php + admin/templates/reports_main.php + admin/templates/route_map.php + admin/templates/settings_addcustomfield.php + admin/templates/settings_addpirepfield.php + admin/templates/settings_addsetting.php + admin/templates/settings_customfieldsform.php + admin/templates/settings_mainform.php + admin/templates/settings_pirepfieldsform.php + admin/templates/sidebar_addpage.php + admin/templates/sidebar_aircraft.php + admin/templates/sidebar_airlines.php + admin/templates/sidebar_airports.php + admin/templates/sidebar_awards.php + admin/templates/sidebar_central.php + admin/templates/sidebar_customfields.php + admin/templates/sidebar_dashboard.php + admin/templates/sidebar_downloads.php + admin/templates/sidebar_editschedule.php + admin/templates/sidebar_expenses.php + admin/templates/sidebar_financial.php + admin/templates/sidebar_groups.php + admin/templates/sidebar_import.php + admin/templates/sidebar_mailer.php + admin/templates/sidebar_maintenance.php + admin/templates/sidebar_news.php + admin/templates/sidebar_pages.php + admin/templates/sidebar_pending.php + admin/templates/sidebar_pilots.php + admin/templates/sidebar_pirep_pending.php + admin/templates/sidebar_pirepfields.php + admin/templates/sidebar_ranks.php + admin/templates/sidebar_reports.php + admin/templates/sidebar_schedules.php + admin/templates/sidebar_settings.php + admin/templates/vacentral_index.php + core/templates/acarsmap.php + core/templates/activity_list.php + core/templates/contact_form.php + core/templates/contact_sent.php + core/templates/core_error.php + core/templates/core_htmlhead.php + core/templates/core_htmlreq.php + core/templates/core_message.php + core/templates/core_navigation.php + core/templates/core_success.php + core/templates/download_item.php + core/templates/downloads_list.php + core/templates/email_lostpassword.php + core/templates/email_pilot_retired.php + core/templates/email_registered.php + core/templates/email_registrationaccepted.php + core/templates/email_registrationdenied.php + core/templates/finance_balancesheet.php + core/templates/finance_header.php + core/templates/finance_summarysheet.php + core/templates/flown_routes_map.php + core/templates/frontpage_main.php + core/templates/frontpage_recentbids.php + core/templates/frontpage_recentpilots.php + core/templates/frontpage_reports.php + core/templates/fsacars_config.php + core/templates/fsfk_liveacars_config.php + core/templates/fsfk_log_flig.phpan.tpl + core/templates/fsfk_log_flightcritique.php + core/templates/fsfk_log_flightdata.php + core/templates/fsfk_log_flightimages.php + core/templates/fsfk_pirep_config.php + core/templates/fsfk_vaconfig.php + core/templates/fspax_config.php + core/templates/login_already.php + core/templates/login_complete.php + core/templates/login_forgotpassword.php + core/templates/login_form.php + core/templates/login_notfound.php + core/templates/login_passwordreset.php + core/templates/login_rejected.php + core/templates/login_unconfirmed.php + core/templates/maintenance.php + core/templates/news_newsitem.php + core/templates/pages_content.php + core/templates/pages_items.php + core/templates/pages_nopermission.php + core/templates/pages_notfound.php + core/templates/pilot_public_profile.php + core/templates/pilots_list.php + core/templates/pirep_editform.php + core/templates/pirep_new.php + core/templates/pirep_viewreport.php + core/templates/pireps_addcomment.php + core/templates/pireps_airportdropdown.php + core/templates/pireps_viewall.php + core/templates/profile_badge.php + core/templates/profile_changepassword.php + core/templates/profile_edit.php + core/templates/profile_main.php + core/templates/profile_myroutesmap.php + core/templates/profile_stats.php + core/templates/registration_autoconfirm.php + core/templates/registration_complete.php + core/templates/registration_customfields.php + core/templates/registration_error.php + core/templates/registration_javascript.php + core/templates/registration_mainform.php + core/templates/registration_sentconfirmation.php + core/templates/reqlogin.php + core/templates/route_map.php + core/templates/schedule_bids.php + core/templates/schedule_boarding_pass.php + core/templates/schedule_briefing.php + core/templates/schedule_details.php + core/templates/schedule_list.php + core/templates/schedule_results.php + core/templates/schedule_searchform.php + core/templates/xacars_config.php m core/version m install/hashlist m install/sql/install.sql m install/sql/structure.xml + lib/skins/crystal/layout.php refs #71 renamed all .tpl files to .php View complete changes Download from here

Wow, there's going to be a lot of changed code - I'm okay with that for the next release. But if someone wants to retrofit this, as per my instructions, it'll be a ***** to do. But I can put in a code change to help that too. I thought I had remove template extension from render calls, but apparently not. I can do a code-change where it finds a .tpl and strips but, but all these lines will have to be changed: http://pastebin.com/JTZTbBsE In the config file, adding a define() for something like IN_PHPVMS. define('IN_PHPVMS', true); Then in every template file (which is a *****): if(!defined('IN_PHPVMS') && IN_PHPVMS !== true) { die(); }

https://github.com/nshahzad/phpVMS/issues/71

Due to some... bad decisions... I made when starting phpVMS, template files are pretty much plain-text. Even though I've posted instructions, and included in the default install instructions on how to add the .htaccess, there's still ways of getting someone's template files. This is causing all sorts of problems with theft. So what I'm thinking of doing are two things: Renaming all template files from. tpl to .php - this allows for the PHP code to be hidden Adding a code-check to make sure phpVMS is calling the template, and if not, nothing shows This will be a backwards incompatible change, but I feel like it's worth it. The second part to this is - I will include instructions on how to do this for your current install. I want to make other drastic changes to templates (mainly organization and moving them around), but I don't know if this is worth it - mainly organizing the templates by module in separate folders (which is the standard of how it's done). What are people's thoughts on this? Any guinea pigs?

Changed Files: m .gitignore m admin/templates/groups_grouplist.tpl m admin/templates/pireps_list.tpl m core/common/PIREPData.class.php m core/common/StatsData.class.php Merge branch 'master' of github.com:nshahzad/phpVMS View complete changes Download from here

Changed Files: m core/common/PIREPData.class.php m core/version m install/hashlist m install/sql/install.sql m install/sql/structure.xml fixed #70 umambigious pilot field causes pirep count error View complete changes Download from here

Changed Files: m admin/templates/groups_grouplist.tpl Merge pull request #69 from Vansers/master Fixed issue with users not allowing to edit custom groups. View complete changes Download from here