Ken Johnson 671095e030 added a vuln for broken auth and session mgmt, issue #2

2013-05-21 00:58:11 -04:00

..

admin_controller.rb

moved delete button away from submit button (duh), and changed delete a user to a POST request after realizing a spider might wreak havoc on that and delete all users

2013-05-21 00:42:56 -04:00

application_controller.rb

added an administrative method intended to be used as a before filter within the application controller as well as an is_admin? method

2013-05-16 17:56:31 -04:00

dashboard_controller.rb

added an administrative method intended to be used as a before filter within the application controller as well as an is_admin? method

2013-05-16 17:56:31 -04:00

sessions_controller.rb

added a vuln for broken auth and session mgmt, issue #2

2013-05-21 00:58:11 -04:00

tutorials_controller.rb

lost track of what I was doing so I cant tell you what Ive done, heh

2013-04-25 15:23:07 -04:00

users_controller.rb

update users info via ajax is working, yay. Next thing is we need to move the datatables into an ajax call and so that we can refresh the table upon any changes occuring

2013-05-20 16:31:59 -04:00