diff options
| author | Christian Weiske <cweiske@cweiske.de> | 2012-09-27 20:43:22 +0200 |
|---|---|---|
| committer | Christian Weiske <cweiske@cweiske.de> | 2012-09-27 20:43:22 +0200 |
| commit | 6a82f78dcc381c191dab5c4fe63d12096d596e41 (patch) | |
| tree | 1d7aabde1390e98027622dc58486511ad9a88ee4 | |
| parent | 71c2c412f7098050479f496292bc694095d9ec97 (diff) | |
| download | phorkie-6a82f78dcc381c191dab5c4fe63d12096d596e41.tar.gz phorkie-6a82f78dcc381c191dab5c4fe63d12096d596e41.zip | |
do not allow to change profile details, only show them
| -rw-r--r-- | data/templates/base.htm | 2 | ||||
| -rw-r--r-- | data/templates/user.htm | 25 | ||||
| -rw-r--r-- | www/user.php | 9 |
3 files changed, 18 insertions, 18 deletions
diff --git a/data/templates/base.htm b/data/templates/base.htm index 6cfea7f..ed70252 100644 --- a/data/templates/base.htm +++ b/data/templates/base.htm @@ -36,7 +36,7 @@ <ul class="nav pull-right"> {% if identity %} <li> - <a href="/user">{{name}} ({{email}})</a> + <a href="/user">{{name}}</a> </li> <li> <a href="/login?logout">Logout</a> diff --git a/data/templates/user.htm b/data/templates/user.htm index 622e8d9..bc02b01 100644 --- a/data/templates/user.htm +++ b/data/templates/user.htm @@ -7,14 +7,19 @@ {% block content %} -<form method="post" action="/user" id="user_form"> -<fieldset> - <legend>User Profile</legend> - <p>Please update your git preferences.</p> - <p><label>OpenID:</label><code>{{ identity }}</code></p> - <label for='name'>Name:</label><input class="" id="name" type="text" name="name" width="35" value="{{ name }}"><br/> - <label for='email'>Email:</label><input class="" id="email" type="text" name="email" width="35" value="{{ email }}"><br/> - <input class="btn" id="submit" type="submit" value="Update"> -</fieldset> -</form> +<h3>User Profile</h3> +<dl> + <dt>OpenID</dt> + <dd><code>{{ identity }}</code> + + <dt>Name</dt> + <dd><code>{{ name }}</code></dd> + + <dt>Email</dt> + <dd><code>{{ email }}</code></dd> +</dl> + +<p> + You may change this data with your OpenID provider. +</p> {% endblock %} diff --git a/www/user.php b/www/user.php index 8b86a50..364981c 100644 --- a/www/user.php +++ b/www/user.php @@ -5,13 +5,8 @@ namespace phorkie; $reqWritePermissions = true; require_once 'www-header.php'; - -if (isset($_POST['name'])) { - $_SESSION['name'] = substr(filter_var($_POST['name'], FILTER_SANITIZE_STRING), 0, 35); -} - -if (isset($_POST['email'])) { - $_SESSION['email'] = substr(filter_var($_POST['email'], FILTER_SANITIZE_EMAIL), 0, 35); +if (!isset($_SESSION['identity'])) { + require 'forbidden.php'; } render( |