burningflipside / profiles Goto Github PK

visit: https://profiles.burningflipside.com/delete.php

1st:
toggling 'yes, i understand' does not properly disable the submit button

2nd:
form submits to 'url: /ajax/user.php'
i believe this should submit to /api/v1/users/[uid]

further investigation reveals that the API is returning 404 errors when the sign up page makes requests to validation

Request URL:https://profiles.burningflipside.com//api/v1/users/Actions/check_uid_available
Request URL:https://profiles.burningflipside.com//api/v1/users/Actions/check_email_available

when user follows link from registration email the following notices are displayed..

Notice: Undefined property: stdClass::$sn in /var/www/common/Auth/class.SQLPendingUser.php on line 21

Notice: Undefined property: stdClass::$sn in /var/www/common/Auth/class.SQLPendingUser.php on line 25

Notice: Undefined property: stdClass::$block in /var/www/common/Auth/class.SQLPendingUser.php on line 21

Notice: Undefined property: stdClass::$block in /var/www/common/Auth/class.SQLPendingUser.php on line 25

Notice: Undefined property: stdClass::$block in /var/www/common/Auth/class.SQLPendingUser.php on line 21

Notice: Undefined property: stdClass::$block in /var/www/common/Auth/class.SQLPendingUser.php on line 25

as a user
i have logged into profiles.burningflipside.com
I change my account password using https://profiles.burningflipside.com/reset.php
I expect that my login session will be terminated and I will have to log in using my new password

https://profiles.burningflipside.com/_admin/group_new.php

on page load ------------------------------
{"code":8,"message":"Undefined variable: auth","file":"/var/www/profiles/api/v1/groups.php","line":187}

on form submit ------------------------------
POST https://profiles.burningflipside.com/api/v1/groups 404 (Not Found)

When loading https://profiles.burningflipside.com/_admin/user_edit.php?uid=foo, the page is loading a list of all users. With over 7,000 users, this significantly slows down page loading.

this appears to be similar issue to #68
lookup user id for a known existing account results in attached

after filling in the reg form and submitting nothing appears to happen.

console shows two errors

after page refresh the following error is also shown

profiles API does not allow postion delete

after creating a new account and logging in I see the main profile page with a number of 'false' inputs.. customize those inputs and save the record.. page reports 'Successfully applied changes'

when returning to the main profile view.. the 'false' inputs will once again be 'false'.. my changes do not appear to be persisted..

profiles API does not allow group delete

When loading https://profiles.burningflipside.com/_admin/users_current.php, the page loads the full listing of users. Ideally this would be cached so that when navigating between detail pages and the list page, the full listing did not need to be reloaded.

shared navigation header should include link to register when a user is not signed in
every login form should include a link to register

https://profiles.burningflipside.com/_admin/group_edit.php?gid=AAR

pages and paths call them leads
data table calls it positions
IRL Burning flipside called them leads, lead roles, or lead positions

i think it would be most semantically appropriate to call them positions
this makes it a little more generic and flexible

new signup cannot post form with valid data

What it says on the tin.

visit: https://profiles.burningflipside.com/reset.php
select forgot password
enter username
submit
UI shows no response

console shows 500 error

profiles API does not allow area delete

current swagger documentation covers only a handful of actions available
DOCUMENT ALL THE THINGS

https://profiles.burningflipside.com/register.php

login link in header appears to have no associated action

creating a new lead position works
however updating a lead position fails

submitting the form posts to api/v1/leads which calls create on the database
there seems to be no provision for updating an existing position

I'm not sure why but removing the .htaccess file from api/v1 broke CORS and therefore some production code. We should figure out why before repushing this change...

profiles API does not allow group create