JohnHammond
/
CTFd
mirror of https://github.com/JohnHammond/CTFd.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
847 Commits
36 Branches
35 Tags
16 MiB
Commit Graph

847 Commits (ca65d01f1a85dca27720bf14ade4ee67f6f62d14)

Author SHA1 Message Date
CodeKevin ac83c8a576 Fixing DOM XSS issues, upload issues, and usability issues 2015-03-16 16:03:58 -04:00
CodeKevin 95e015abe6 Proper custom CTF name 
I should have better pushing habits
 2015-03-15 15:03:16 -04:00
CodeKevin 0179fa7115 Custom CTF Name 2015-03-15 14:55:50 -04:00
CodeKevin c26d0924bf Fixing XSS issue for users 2015-03-15 14:44:47 -04:00
CodeKevin a0d3a1e640 Fixing XSS issue 2015-03-15 14:42:31 -04:00
CodeKevin a499f8c731 Adding favicon for non-admins 2015-03-15 04:23:16 -04:00
CodeKevin 8334c15f98 Adding favicon 2015-03-15 04:19:58 -04:00
CodeKevin d09d0a9678 Closes #21 2015-03-15 04:18:39 -04:00
CodeKevin eced601485 Updating logo 2015-03-15 02:39:32 -04:00
CodeKevin 5f4a670b7a Removing debug print statement 2015-03-15 00:28:12 -04:00
CodeKevin 0a27d11f45 Fixing score and place for team pages 2015-03-14 23:39:05 -04:00
CodeKevin f2484c519a Closes #15 (Thanks mwinstead3790), various fixes 2015-03-14 23:01:21 -04:00
Kevin Chung b4dd54d36a Adding score and place to team page, fixing create_app 2015-03-08 13:39:22 -04:00
CodeKevin f43c695330 Keeping ban/unban in the admin panel 2015-01-26 01:08:51 -05:00
Kevin Chung 613ed46298 Merge pull request #17 from xkjcf/master 
make the ban and unban switcher work
 2015-01-26 01:07:09 -05:00
CodeKevin 81ea0f8d52 Send email tested and improved 2015-01-24 20:04:58 -05:00
CodeKevin 29071a6d5c Cleaning out some leftover text 2015-01-24 19:41:34 -05:00
CodeKevin 52becebbdb Adding team emailing 
Untested since I don't have a mail server on my dev environment
 2015-01-24 19:40:52 -05:00
CodeKevin b1c09e832e Listing DO hosts 
Swapped out API wrappers
 2015-01-24 03:50:45 -05:00
CodeKevin 6b81ac4577 Merging local changes 2015-01-24 00:51:32 -05:00
CodeKevin 7642aeb1e5 Starting DO integration 2015-01-24 00:48:41 -05:00
xkjcf 6916f5f68b make the ban and unban switcher work 2015-01-20 15:05:17 +08:00
Kevin Chung 8ec79d9337 Removing hits calculation for issue #12 2015-01-18 20:25:05 -05:00
Kevin Chung 3b93a40f2b Closes #9 2015-01-18 20:07:02 -05:00
Kevin Chung 1882d8231d Properly checking for config values and setting them if they don't exist 2015-01-18 19:33:48 -05:00
Kevin Chung 4a128e83dc Adding user deletion from admin panel 2015-01-18 19:17:57 -05:00
Kevin Chung fb5e525775 Merge pull request #11 from bburky/view-challenges-unregistered 
Optionally allow unregistered users to view challenges
 2015-01-08 00:13:39 -05:00
CodeKevin 7bb7186f8d Preventing unnecessary requests 2015-01-08 00:13:13 -05:00
Blake Burkhart 2972cf506d Optionally allow unregistered users to view challenges 
Add a Config entry `view_challenges_unregistered` to indicate whether
unregistered users can view challenges. Add the setting to the admin config
page.

Add can_view_challenges() to utils to test if a user is either authed, or the
configuration allow unauthenticated users to view the challenges.

Return a HTTP 401 Unauthorized error when the /chals/solves API can't provide
results for an unauthenticated user. This is needed because the client side
code in `chalboard.js` doesn't know if it's logged in or not and requests this
anyway. (And AJAX doesn't handle redirects very well.) Alternately the client
could actually know if they're logged in and not make needless API calls.

When an unregistered user attempts to submit a flag, it will also fail. The
user will be redirected to a login page.
 2015-01-07 22:11:31 -06:00
Kevin Chung c5c3126bb4 Closes #10 2015-01-07 21:32:31 -05:00
Kevin Chung ce4766003a Admin teams javascript removes whitespace before opening modal 2015-01-07 21:12:52 -05:00
Kevin Chung a1f30547d2 Admins can edit users from the admin interface 2015-01-07 21:03:37 -05:00
CodeKevin 7c7632301f Closes #7 
Stack trace only applies in debug mode which shouldn't be used in
production but password length bug is valid
 2015-01-05 20:32:34 -05:00
Kevin Chung 7cf762a6c4 Merge pull request #6 from takeshixx/upstream-fixes 
Missing dependencies added, some weird imports fixed
 2015-01-02 18:48:40 -05:00
takeshix 88c79ec1a6 Missing dependencies added 2015-01-02 20:19:00 +01:00
Kevin Chung 16a344cfab Update setup.html 
Spellcheck is your friend
 2015-01-02 00:31:00 -05:00
CodeKevin 872e310380 Closes #5 2015-01-01 23:11:59 -05:00
Kevin Chung 0a75864ce4 Adding demo site 2015-01-01 21:16:16 -05:00
Kevin Chung 6705f97194 Merge pull request #4 from takeshixx/dev 
Fixed permanent "referenced before assignment" condition
 2015-01-01 20:47:58 -05:00
Kevin Chung 0c379e7444 Merge pull request #3 from mark-ignacio/pip-freeze 
Freeze package + version requirements and changed pip install command
 2015-01-01 20:47:11 -05:00
takeshix 65891ed215 Fixed permanent referenced before assignment condition 2015-01-02 01:12:17 +01:00
Mark Ignacio b5e98a414e add py-bcrypt 2015-01-01 18:08:50 -05:00
Mark Ignacio bd7c059ff9 freeze requirements and change pip install command 2015-01-01 18:01:01 -05:00
Kevin Chung 18c0afdd05 Closes #1 
Missing bcrypt_sha256 import
 2015-01-01 14:26:54 -05:00
Kevin Chung 24c5d37fa6 Update README.md 2015-01-01 00:52:09 -05:00
CodeKevin 376c90189b CTFd code push 2015-01-01 00:45:25 -05:00
Kevin Chung 20183dd3c9 Initial commit 2015-01-01 00:36:56 -05:00