Jan

bugs, bug, feature, features, request

I thought I'd create a definitive list of bugs.

It is going to take me some time to work through the list on this page, and I'm not quite sure sometimes which ones have been fixed, but here goes ... Can everyone else also contribute to this list.

If you have posted a bug report somewhere else, can you please add it to this list as well please. Cheers.

CURRENT BUG LIST

- DONE Automated thumbnail generation is broken. I'm on it.

- DONE I don't seem to have the ability to remove Jan's face from the 'About Us' page.

- DONE The 'About Us' text in the 'Site Text' panel does not seem to allow paragraphing/newlines.

- DONE New 'Search' box on the website doesn't work (see comment #2).

- DONE The 'News' page in the admin area lists two pages, though there is no content on the second page.

- DONE When using the A-Z list in the 'Music' section, clicking on a letter with nothing registered under that letter causes nothing to appear. This might be OK, but the A-Z list then disappears meaning that you can't look under a different letter without going 'back'.

- DONE (QUOTE FROM ORIGINAL POST) "There is a vulnerability when combined with a targeted attack via email / irc / community forums (using XSS) which could lead to the fixation of a users session and a possible unauthorised escalation of an attackers privileges."

- DONE (QUOTE FROM ORIGINAL POST) "Use htmlspecialchars to escape user input when it is output after entry into fields such as News and Music search."

- DONE (QUOTE FROM ORIGINAL POST) "Regenerate a users session ID upon escalation of privileges."

- DONE I don't seem to be able to find the admin page that related to the 'About' section of the website.


CURRENT FEATURE REQUEST

- DONE Modding comments as an admin (quoted from the admin area): "I was wondering whether it's in any way possible to display currently-unmodded comments to logged-in admins on the main site? The current method of allowing comments through the admin panel is fine so this is just a suggestion to speed it up (and make unmodded comments a bit more visible to admins when browsing the site). Basically what I'm thinking of is a different-coloured comment box for unmodded comments which is only visible to admins, with a nice 'allow' button (or something) for easy modding. This way you could mod comments without having to go into the admin panel."

- DONE (They need automoderation priv) Is it possible to not require admins to have to review their comments before publishing.

- Ongoing Email notification (quoted from the admin area): "The framework already supports this, so it's just a matter of adding in the appropriate hooks. Basically it will allow anyone with the 'admin' and 'emailhook' privs to setup email notifications for things like blog comments, new vibes, possible attacks (bad password 5 times in a row, etc).."

- Ongoing Privilege packages (quoted from the admin area): "Again, the framework already supports this - just a matter of doing the front-end pages in the admin area. These are just groups of privs to grant to new users, e.g. the 'admin-set' package contains the privs 'admin, automoderation, emailhook, staff', etc.."

- DONE Complete CSS finished (quoted from the admin area): "You'll have noticed a few things in the CSS are still missing. Download links on the releases for example. These will be added into the next release."

- DONE Image updates (quoted from the admin area): "Images will now be websafe. PNGs will be updated to work properly in IE6."

- DONE Colours (quoted from the admin area): "Now that the CSS layout is sorted, I'm going to be tweaking the colours so that they compliment one another a bit more. Also so that it's a bit easier on the eyes."

- DONE Admin area (quoted from the admin area): "This needs to be written :). The functionality is all there, as you can see. I just need to template the pages so it styles properly. I'll also add in error checking, etc so you can't screw up the DB :)