Commit graph

23 commits

Author SHA1 Message Date
3d778df3d5 Removed feature: register balance (closes #8) 2022-11-05 09:34:13 +01:00
8599f49857 Refactored CSS and HTML templates and polished UI (#10), changed JavaScript variable names to camelCase, adjusted filenames and some url parameter names in urlpatterns, and more. 2022-11-04 20:35:28 +01:00
1e32e2b5dd The application now correctly encodes the url query string for the profile-picture name (for security reasons), removed a left-over print-statement 2022-11-03 20:46:10 +01:00
9f270c12b4 Profile pictures are now handled by the application to mitigate possible directory traversals
to other sub-directories of the static directory (Admins/Staff with the right to edit user
accounts were able to set a path like ../static/favicon.png for the profile picture - this
isn't a "i'm in, now i have root access and can hack your mom"-vulnerability, but better fix
it before it evolves to one. or a dragon. it's too late for this crap.)
2022-11-02 22:53:04 +01:00
86ea7c0000 Added 'supply' page to create negative register transactions, updated translation 2022-10-15 19:37:01 +02:00
ca160781dd Added support for profile pictures 2022-08-06 18:56:39 +02:00
f5bf77fbed Added auto-reload after 2 minutes when logged in, to force auto-logout 2022-08-06 17:33:31 +02:00
f2725845cf hide the userlist in the background when showing the password overlay 2022-07-05 17:42:50 +02:00
20d0ebfcf4 Swap x and 0 on pinpad (login overlay) 2022-07-05 17:25:12 +02:00
500213b5ab Use 'surname, forename' instead of 'forename surname' in userlist on login page 2022-06-29 19:02:01 +02:00
5893d311fe #4 moved Logout button out of the dropdown menu 2022-06-16 10:22:37 +02:00
bec4fe7bd0 Removed link to gitlab repo from footer 2022-06-16 10:00:44 +02:00
f406757468 #2 Fix wrong decimal formatting in Drink and Order models 2022-06-13 19:22:36 +02:00
96d4652a04 #1 improve text and translations 2022-06-13 19:13:27 +02:00
9f965b8119 Rearranged statistics page 2022-05-24 20:49:18 +02:00
537818fc27 Added 'admin panel' userpanel menu entry for staff accounts 2022-05-24 18:57:17 +02:00
ec7672816a rename the field 'binary_availability' to 'do_not_count' in model Drink 2022-05-24 18:49:04 +02:00
5b72453dc3 Order drinks by product_name on the home page 2022-05-16 11:00:24 +02:00
d792a7658c Fixed a bug in the template for the order page caused by localization and removed the previously applied workaround for this issue 2022-05-16 10:51:22 +02:00
f8cde7136d Remove DjangoCSP dependency by writing own middleware for the CSP header 2022-05-15 11:24:04 +02:00
9406bbad97 Revised some UI elements 2022-05-14 11:28:32 +02:00
267ce0188a Fix error page that appears when logging out of the admin panel 2022-04-13 20:20:08 +02:00
c49798a9ea Initial commit - existing project files 2022-03-16 12:11:30 +01:00