Commit Graph

331 Commits

Author SHA1 Message Date
Sebastian Grewe
5c5db8dc93 Merge pull request #1191 from TheSerapher/issue-1181
Issue 1181
2014-01-02 02:08:19 -08:00
Sebastian Grewe
67a6d9aff4 [UPDATE] Coding style 2014-01-02 11:05:07 +01:00
Sebastian Grewe
4c3421cc8a Merge pull request #1165 from Neozonz/issue-1164
Initial commit for pin reset functionality
2014-01-02 02:02:37 -08:00
Sebastian Grewe
e762bb0391 [IMPROVED] Use data interval on getuserworkers 2014-01-01 09:08:09 +01:00
Sebastian Grewe
731985b30f [IMPROVED] Token expiration timers
* Added new SQL file to update tokentypes table
* Added new function to base class
* Renamed function in base class used in shares class
* Added new error code
* Added new cronjob to delete expired tokens
* Added new cronjob to run-cron scripts and monitoring page
* Added new function to tokentype class
* Added new function to token class

Will address #1181 once merged.
2013-12-31 22:31:47 +01:00
Sebastian Grewe
82efbb4609 Merge branch 'issue-1185' into next
Conflicts:
	public/templates/mpos/global/navigation.tpl
2013-12-31 17:11:03 +01:00
Sebastian Grewe
ee02445b7d Merge branch 'issue-965' into next
Conflicts:
	public/templates/mpos/master.tpl
2013-12-31 16:27:16 +01:00
Sebastian Grewe
4a98724fc5 [FIX] Disallow to post messages for guests
* Disallow to post messages if guest forms are disabled
2013-12-31 16:17:02 +01:00
Sebastian Grewe
a8a7d2c52f [IMPROVED] Allow contactform for guests
* Added admin option to disable access to contactform for guests
* Propagated new option to templates

Fixes #1185
2013-12-31 16:14:56 +01:00
Sebastian Grewe
8e4c56d597 [IMPROVED]
Splitting dashboard calls up instead of using one single API call:

* Use getuserbalance for Balance updates
* Use getuserworkers for Worker updates

For those and potential other SQL intensive Ajax calls I have added a
long ajax refresh interval setting. It can be set via admin panel and
will change the refresh time on the JS file on the dashboard for those
two calls.

Should help a bit with high worker and transaction volume pools.

Address #1159
2013-12-30 19:23:27 +01:00
Neozonz
e3db7e0a02 Initial commit for pin reset functionality 2013-12-30 03:29:20 -05:00
Sebastian Grewe
96d096f669 [MERGE] Fix merge conflict 2013-12-30 08:19:13 +01:00
Sebastian Grewe
f4a1110c48 Merge pull request #1089 from TheSerapher/issue-1043
Issue 1043
2013-12-28 12:23:23 -08:00
neonbunny
f94e48eb89 Fix for reflected XSS security issue. 2013-12-28 17:34:09 +00:00
Sebastian Grewe
b16d9afcad [SECURITY] Fixed exploit in token types
Fixes an exploit due to missing check of token type used.

Fixes #1118 once merged.
2013-12-27 00:21:22 +01:00
Sebastian Grewe
9572de451b [FIX] Fixes #1110 2013-12-26 16:10:04 +01:00
Sebastian Grewe
2a24f90ed0 [ADDED] Pagination support on pool workers page
Adds pagination support for the admin panel pool workers page. Will
greatly increase loading times of this page if working as intended.

Fixes another part of #1043.
2013-12-23 23:04:13 +01:00
Sebastian Grewe
065d10d2e0 [IMPROVED] User info pagination and filters
This will add pagination and user filters to the Admin Panel User
Information page.

* Added various filter methods (combined with AND in SQL)
* Added pagination and limits to fetch only matching users

This will greatly increase efficiency on larger pools

Fixes #1043 once merged.
2013-12-23 22:37:57 +01:00
Sebastian Grewe
9485b3f9d6 [ADDED] Possibility to disable navbar live updates
* Added new admin options: disable_navbar and disable_navbar_api
* Removes LIVE STATS from navigation list
* Removes live updates on Pool General Statistics page
* Added system load checks to getnavbardata API call

This will help to decrease load on high-volume servers at the cost of
losing live status.

Fixes #1014 once merged.
2013-12-23 21:38:21 +01:00
Sebastian Grewe
5cf9ed0b3a [ADDED] getusertransactions API call
* Fetch last `n` transactions, default `5` max `30`
* Fetch transaction summary if enabled in admin panel

Fixes #1079 once merged.
2013-12-23 21:20:39 +01:00
Sebastian Grewe
e2681fe5bf [UPDATE] Moved transactions into special API call 2013-12-23 21:20:33 +01:00
Sebastian Grewe
51a996573d [IMPROVED] Transaction data handling
This will improve loading times on large transaction tables. Thanks
@feeleep75 for helping with this one.

* Do not use SQL_CALC_NUM_ROWS since it will do a full table scan
* Allow admins to disable account transaction summaries to speed up page
  loads on large tables
* added new admin setting under system to Disable TX Summaries

Fixes #1065 once merged
2013-12-23 10:48:12 +01:00
Frederick Behrends
a6d5b6e248 [FIX] fixed 3 Notices 2013-12-20 16:14:40 +01:00
Frederick Behrends
ccb14c37cd added blocks until next difficulty change to EstNextDifficulty 2013-12-20 03:59:47 +01:00
Sebastian Grewe
0d6ee6d821 [IMPROVED] Auto/Manual Payout Disabled
This will re-add the ability to disable auto or manual payouts. Option
to disable the entire cronjob is left intact.

Fixes #1034 when merged.
2013-12-19 15:17:29 +01:00
nrpatten
61151a50ac Update tacpop.inc.php 2013-12-20 00:15:28 +11:00
nrpatten
fc2ffd4868 TAC PopUp window for registrations 2013-12-19 06:42:34 -05:00
nrpatten
e0c066d656 Create tacpop.inc.php 2013-12-19 20:59:26 +11:00
Sebastian Grewe
6cc367ad50 [FIX] Admin User Panel for PPS Payouts
This will fix #986 once merged.
2013-12-17 10:56:37 +01:00
Frederick Behrends
ed769f9659 Moved Calculation of "Expected Time Per Block (Network)" and "Next Difficulty" to Statistics Class and fixed Dashboard-API for Ajax Refresh 2013-12-16 21:51:31 +01:00
Frederick Behrends
f09459433b added "Est. Next Difficulty" and "Avg. Time per Round" to dashboard and dashboard api 2013-12-16 20:01:22 +01:00
Frederick Behrends
9fd291b9c0 Added "Est. Next Difficulty" and "Est Round Time (Network)" to the global statistics. 2013-12-16 20:01:18 +01:00
Sebastian Grewe
8f89b7fceb Merge pull request #867 from Kukunin/next
Admin Template Editor page
2013-12-15 01:45:05 -08:00
Sebastian Grewe
afb5fc6c0d [CHANGED] Merge payout crons
* Merge manual and auto-payout into single cronjob
* Update template/code to reflect single payout cron
* Update monitoring page
* Update disable payouts option in admin panel settings
* Update account payout page to use new option

This will fix #967 once merged.
2013-12-12 11:45:33 +01:00
Sebastian Grewe
f465bda350 [ADDED] Accept TaC during registration 2013-12-12 10:11:44 +01:00
Sebastian Grewe
9338af0d31 [ADDED] Terms and Conditions page 2013-12-12 09:58:05 +01:00
Sebastian Grewe
b2df4c9d9f [FIX] PHP Notice on missing $aRoundShares
Fixes #941 once merged.
2013-12-10 16:23:54 +01:00
Sebastian Grewe
6a693ea25e [FIX] Account Lockouts on Edit Account page
Fixes #939 once merged.
2013-12-10 16:14:44 +01:00
Sebastian Grewe
216b986be2 Merge pull request #930 from TheSerapher/issue-926
[SECURITY] Fixing potential XSS issues
2013-12-10 03:07:33 -08:00
Sergey Kukunin
f97116b1b2 Show templates tree on Admin Templates page
Show active and activated templates in Tree
Make templates tree persistent
2013-12-09 20:55:59 +02:00
Sergey Kukunin
75c7e0fc6d Implement Templates admin page
Create `templates` table in database
Add navigation links to Template page
Let admin to manage his templates from adminpanel
2013-12-09 20:55:58 +02:00
Sebastian Grewe
47e0b2ac74 [FIX] Network hashrate in dashboard
Also adds some fixes for hashrate updates on the pool statistics page in
case the API is disabled alltogether.

Fixes #934 once merged.
2013-12-09 16:11:31 +01:00
Sebastian Grewe
ceadf30a85 [SECURITY] Fixing potential XSS issues
Will resolve #926 once merged.
2013-12-09 08:02:41 +01:00
Sebastian Grewe
f884349359 Merge pull request #920 from TheSerapher/issue-670
[IMPROVED] Lockout user on invalid pin/password
2013-12-08 22:27:17 -08:00
Sebastian Grewe
50634502d2 [ADDED] Transaction summary to getuserstatus API
Fixes #917 once merged.
2013-12-08 09:45:51 +01:00
Sebastian Grewe
bb55001db7 [ADDED] ACL to hide news post author
This will allow admins to hide the actual username/author from their newsposts.
Useful if you don't wish to give your admin account away or in case you
have no admin-only account.
2013-12-07 22:30:27 +01:00
Sebastian Grewe
256b5f59c6 [IMPROVED] Lockout user on invalid pin/password
This will lock a user account if a password or PIN has been entered
wrong for multiple times in a row. When unlocking the account via admin
panel, both counters are reset so the user can log in again.

This should fix issues with brute force attacks to access user accounts.

Please see configuration dist file for new config options.
Please import SQL upgrade 007 to add new column to user accounts table.

Addresses #670 and should be merged once tested.
2013-12-07 22:14:14 +01:00
Sebastian Grewe
fa8406b172 [FIX] No uptime status on empty result
Fixes #910 once merged
2013-12-07 14:15:10 +01:00
Sebastian Grewe
d98bb2f368 [ADDED] getInfo output to wallet information
Adds some additional wallet infos to the wallet info page in the admin
panel. Specifically the errors output might be interesting for users not
checking their RPC regularly for mandatory updates.

Fixes #912 once merged.
2013-12-07 13:59:33 +01:00
Sebastian Grewe
217f4a7993 [MERGE] Fixed merge conflict 2013-12-06 15:45:03 +01:00