32 Commits

Author SHA1 Message Date
Fred Gleason
4e88ca5f0c 2023-06-09 Fred Gleason <fredg@paravelsystems.com>
* Removed the '#define RD_DEFAULT_MAX_POST_LENGTH' statement from
	'lib/rd.h'.
	* Added a '#define RD_MAX_POST_LENGTH' statement in 'lib/rd.h'.
	* Removed the 'RDSystem::maxPostLength()' and
	'RDSystem::setMaxPostLength()' methods.
	* Removed the 'Maximum Remote Post Length' control from the
	'System-Wide Settings' dialog in rdadmin(1).

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2023-06-09 11:31:02 -04:00
Fred Gleason
ac91f3fcfc 2023-05-31 Fred Gleason <fredg@paravelsystems.com>
* Fixed a regression in 'RDFormPost' that caused the last character
	of the last variable in the post to be truncated when using
	'application/x-www-form-urlencoded' encoding.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2023-05-31 13:33:26 -04:00
Fred Gleason
41224a393a 2023-05-17 Fred Gleason <fredg@paravelsystems.com>
* Fixed a vulnerabilities in 'RDFormPost' that could allow maximum
	post length restrictions to be bypassed by use of a maliciously
	crafted HTTP transaction.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2023-05-17 14:38:52 -04:00
Fred Gleason
5eb1c39231 2023-05-17 Fred Gleason <fredg@paravelsystems.com>
* Fixed a regression in the WebAPI that caused imports to bypass the
	maximum file size limitation set the 'System Settings' in rdadmin(1).

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2023-05-17 13:19:59 -04:00
Fred Gleason
ac594cc68b 2021-09-01 Fred Gleason <fredg@paravelsystems.com>
* Cleaned up deprecation warnings for 'QString::sprintf()'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2021-09-01 19:59:37 -04:00
Fred Gleason
88572c4c08 2021-06-01 Fred Gleason <fredg@paravelsystems.com>
* Cleaned up compile warnings in 'lib/rdformpost.cpp'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2021-06-01 11:59:51 -04:00
Fred Gleason
0fd02861f9 2021-04-17 Fred Gleason <fredg@paravelsystems.com>
* Escaped all SQL identifiers in 'lib/'.
	* Replaced " with ' delimiters in all SQL literal strings in 'lib/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2021-04-17 19:47:05 -04:00
Fred Gleason
89a0d72439 2021-02-23 Fred Gleason <fredg@paravelsystems.com>
* Removed the Qt3Support library from the build system.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2021-02-23 18:07:21 -05:00
Fred Gleason
b4002b2357 2020-11-06 Fred Gleason <fredg@paravelsystems.com>
* Consolidated ticket processing operations in new
	'RDUser::createTicket()' and 'RDUser::ticketIsValid()' methods.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2020-11-06 16:42:10 -05:00
Fred Gleason
0904c2cbe3 2020-10-30 Fred Gleason <fredg@paravelsystems.com>
* Fixed a regression in 'RDFormPost' that broke file control
	processing.
	* Added a 'put' section to the WebGet interface.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2020-10-30 20:13:27 -04:00
Fred Gleason
169e0e9baa 2020-10-29 Fred Gleason <fredg@paravelsystems.com>
* Added an 'RDFormPost::authenticate()' method.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2020-10-29 16:05:09 -04:00
Fred Gleason
d61f3ad32a 2020-10-15 Fred Gleason <fredg@paravelsystems.com>
* Modified 'RDFormPost' to use 'QMap' instead of 'std::map'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2020-10-15 10:51:11 -04:00
Fred Gleason
f5905315eb 2020-10-13 Fred Gleason <fredg@paravelsystems.com>
* Added an 'ENCODER_PRESETS' table to the database.
	* Incremented the database verssion to 343.
	* Added an 'Encoder Profiles' dialog to rdadmin(1).
	* Removed static content dependencies from the WebGet service.
	* Refactored the WebGet service to use Encoder Profiles.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
2020-10-13 14:41:44 -04:00
Fred Gleason
f3bd897eff 2020-05-23 Fred Gleason <fredg@paravelsystems.com>
* Fixed a bug in 'RDFormPost' that caused an error when processing
	multipart-mime submissions containing '=' characters.
2020-05-23 10:35:25 -04:00
Fred Gleason
efa4999fa2 2019-01-29 Fred Gleason <fredg@paravelsystems.com>
* Fixed a bug in the 'EditCut' web API call that caused attempts
	to clear the 'START_DAYPART' and 'END_DAYPART' fields to return
	an error.
2019-01-29 16:32:06 -05:00
Fred Gleason
0b472716d6 2019-01-29 Fred Gleason <fredg@paravelsystems.com>
* Refactored routines for parsing/writing standard date/time strings
	(RFC822 and XML xs:dateTime formats) into 'lib/rddatetime.[cpp|h].
	* Removed the 'RDWebDateTime()', 'RDGetWebDateTime()',
	'RDGetWebDate()', 'RDGetWebTime()', 'RDGetWebMonth()',
	'RDXmlDate()', 'RDXmlTime()', 'RDXmlDateTime()' and
	'RDXmlTimeZoneSuffix()' functions from 'lib/rdweb.[cpp|h].
	* Added a 'dateparse_test' test harness.
2019-01-29 15:40:14 -05:00
Fred Gleason
f13aa1e3ae 2018-09-10 Fred Gleason <fredg@paravelsystems.com>
* Fixed bugs in the 'rivwebcapi' rd_savelog(7) call that caused
	log saves to fail.
2018-09-10 09:13:15 -04:00
Fred Gleason
ae9296352c 2018-08-11 Fred Gleason <fredg@paravelsystems.com>
* Added a debug block for saving raw post data to 'RDFormPost'.
2018-08-12 20:44:35 +00:00
Fred Gleason
c92bfd2f6c 2018-08-11 Fred Gleason <fredg@paravelsystems.com>
* Fixed regressions in 'RDFormPost' that broke audio importation.
2018-08-12 01:18:14 +00:00
Fred Gleason
8d11616b4b 2018-08-08 Fred Gleason <fredg@paravelsystems.com>
* Modified all instances of 'QStringList::split()' calls to use
	'QString::split()'.
2018-08-08 18:11:23 -04:00
Fred Gleason
796e1bebc3 2018-08-07 Fred Gleason <fredg@paravelsystems.com>
* Removed the 'pam_rd' plug-in.
	* Removed rdchunk(1).
	* Upgraded Qt3 to Qt4.
2018-08-07 10:09:49 -04:00
Fred Gleason
542fb7d6a6 2018-07-27 Fred Gleason <fredg@paravelsystems.com>
* Added a 'SaveFile' test method to the web API.
	* Added a 'SaveString' test method to the web API.
	* Refactored the multipart-mime parser in 'RDFormPost' to process
	UTF-8 strings correctly.
2018-07-27 14:28:55 -04:00
Fred Gleason
3e0929ba77 2018-07-26 Fred Gleason <fredg@paravelsystems.com>
* Fixed a bug in 'RDCastSearchString()' that threw a SQL error when
	passed a filter string consisting of pure whitespace.
	* Fixed bugs in 'rdcastmanager.cgi' that caused corruption when
	displaying UTF-8 strings.
2018-07-26 09:01:06 -04:00
Fred Gleason
3b1ce13e77 2017-12-15 Fred Gleason <fredg@paravelsystems.com>
* Removed the 'RDTempDir()' function.
2017-12-15 07:47:41 -05:00
Fred Gleason
fef6daa011 2017-09-20 Fred Gleason <fredg@paravelsystems.com>
* Fixed a race in 'lib/rdformpost.cpp' that could cause POST data
	to be truncated.
2017-09-20 10:38:46 -04:00
Fred Gleason
bc2c441680 2017-03-27 Fred Gleason <fredg@paravelsystems.com>
* Added a 'WEBAPI_AUTHS' table to the database.
	* Added a 'USERS.WEBAPI_AUTH_TIMEOUT' field to the database.
	* Incremented the database version to 260.
	* Added 'RDUser::webapiAuthTimeout()' and
	'RDUser::setWebapiAuthTimeout()' methods in 'lib/rduser.cpp' and
	'lib/rduser.h'.
	* Added a 'WebAPI Timeout' control to the Edit User dialog in
	'rdadmin/edit_user.cpp' and 'rdadmin/edit_user.h'.
	* Implemented a 'CreateTicket' Web API call.
2017-03-27 13:43:42 -04:00
Fred Gleason
839aa239c8 2017-02-28 Fred Gleason <fredg@paravelsystems.com>
* Fixed a regression in 'lib/rdformpost.cpp'.
2017-02-28 12:04:27 -05:00
Fred Gleason
db0e842496 2017-02-21 Fred Gleason <fredg@paravelsystems.com>
* Modified 'lib/rdformpost.cpp' to use read-only accessors for
	std::map values.
	* Added a check for valid event IDs for the 'SaveLog' method in
	'web/rdxport/logs.cpp'.
2017-02-21 16:51:25 -05:00
Fred Gleason
41b3db2408 2017-01-31 Fred Gleason <fredg@paravelsystems.com>
* Added an 'AddLog' method to the Web API.
	* Added an 'DeleteLog' method to the Web API.
	* Added a 'SaveLog' method to the Web API.
	* Added 'eventLength', 'linkEventName', 'linkStartSlop',
	'linkEndSlop', 'linkId', 'linkEmbedded', 'extStartTime',
	'extLength', 'extCartName', 'extData', 'extEventId',
	and 'extAnncType' XML fields to the return of the ListLog web
	API method
2017-01-31 18:01:46 -05:00
Fred Gleason
03cfa9d614 2016-03-24 Fred Gleason <fredg@paravelsystems.com>
* Update web test methods in 'web/tests/'.
	* Added an 'RDSchedCode' class in 'lib/rdschedcode.cpp' and
	'lib/rdschedcode.h'.
	* Implemented the 'ListSchedCodes' web method in
	'web/rdxport/schedcodes.cpp'.
	* Implemented the 'AssignSchedCode' web method in
	'web/rdxport/schedcodes.cpp'.
	* Implemented the 'UnassignSchedCode' web method in
	'web/rdxport/schedcodes.cpp'.
	* Implemented the 'ListCartSchedCodes' web method in
	'web/rdxport/schedcodes.cpp'.
	* Extended 'RDGetWebTime()' and 'RDGetWebDateTime()' functions to
	support XML 'xs' namespace formats.
	* Implemented '*_POINT' fields in the 'EditCut' web method in
	'web/rdxport/carts.cpp'.
	* Modified the 'RDCart::removeSchedCode()' method so as to treat
	scheduler codes in a case-insensitve manner.
	* Modified the return of the 'EditCut' web method to provide a full
	<cutList> record in 'web/rdxport/carts.cpp'.
2016-03-24 13:53:39 -04:00
Alban Peignier
dd2fb90856 Replace getenv("TEMP") by RDTempFile() in RDFormPost::RDFormPost 2014-09-05 09:53:38 +02:00
Fred Gleason
afd67c7af8 Initial import of CVS-v2_8_branch 2014-08-12 15:13:02 -04:00