Commit Graph

48 Commits

Author SHA1 Message Date
Kevin Chung
b6ce783cfd Fixes unstyled Setup UI (#291)
* Changing /static to /themes
* Adding test to make sure setup behavior works
2017-06-18 18:54:20 -04:00
Kevin Chung
1bbd7feb23 Moving themes into a themes folder (#287)
* Moving themes into a themes folder

This unifies themes under a themes folder which makes it easier to develop themes and install them.
2017-06-18 02:13:50 -04:00
Kevin Chung
6d9d03e35e Pages functionality improved (#267)
* Pages now support Markdown
* Pages now have a preview tab
* Adding a media library to Pages
2017-06-03 14:25:31 -04:00
Kevin Chung
e16d3a0b6e General fixes and PEP8 enforcement (#258)
* Fixing index page links when you deploy on a subdirectory

* Updating travis for pep8

* autopep8 with just formatting changes
2017-05-12 00:34:20 -04:00
Kevin Chung
cf3e5cbbbd Adding link back and social detail 2017-04-28 02:36:16 -04:00
Rakha Kanz Kautsar
9a9b775e57 add scoreboard freeze (#208)
* add scoreboard freeze

* delete excess div close tag

* filter out scores from team page when scoreboard freezes

* allow teams to see their full score and solves in team page

* fix unset place and score

* change parameter and filter out /solves for graph

* fix utils methods undefined

* add small notice about frozen scoreboard and resolve failing tests

* Update __init__.py

* Update scoreboard.py
2017-03-25 01:37:37 -04:00
Kevin Chung
a3a7d75ae8 Plugins enhanced utils (#231)
* Updating utils functions to be monkey patchable

* Also fixing a team email update issue

* Adding more tests
2017-03-22 20:00:45 -04:00
Kevin Chung
15171f1140 setup now automatically logs in 2017-03-10 11:12:58 -05:00
Kevin Chung
d0cb92c644 Hide scores (#224)
* Starting work on hide_scores functionality

* Hide teams in more views

* Starting work on hide_scores functionality

* Hide teams in more views
2017-03-08 00:21:39 -05:00
Kevin Chung
e3fd784d91 Merging PR #206 into master (#215)
* Extracting key checking logic to make it more extensible

* Add missing keys __init__ file

* Adding logging access and errors to Dockerfile

* Use template inheritance for page.html (#198)

* Fix exception on cofirmation screen (#202)

When a user attempts to confirm an e-mail address, an exception is thrown because the db session is closed prior to logging.

The line db.session.close() has to move after the logging, otherwise the team parameters from the orm object are discarded and an exception is thrown.

Closing the session after logging, fixes the issue.

* Adding custom key types for challenges

* Separating out admin.py, adding challenge types

* Don't let truncate affect edit modal

* File uploads no longer refresh page (#207)

Closes (#180)

* Fixing missing import

* Fixing mistake in flag JSON response

* Removing compare_digest to support Python 2.7.6

* Fixing inconsistencies in standard challenge modal

* Passing submission input over to template js

* Handling cases where data can't be found in the DOM better

* Don't refresh modal if it's just a refresh operation

* Fixing solving challenges while scoreboard is public

Induce a redirect to make user login

* Adding missing js file and fixing migration

* Fixing some visual glitches and streamlining challenge creation

* Fixed hard coded upload directory (#206)
2017-03-03 00:36:00 -05:00
Kevin Chung
935027c55d Marking 1.0.0 (#196)
* Use <int:xxx> in routes to prevent some errors 500 (#192)

* Use first_or_404() to prevent some errors 500 (#193)

* Add a populating script for awards. (#191)

* Creating upload_file util

* Marking 1.0.0 in __init__ and starting database migrations

* Upgrading some more HTML

* Adding CHANGELOG.md
2017-01-24 23:06:16 -05:00
Kevin Chung
fa788fe3d0 Latest set of changes (#190)
* PEP 8 compliance (#183)

* Group imports: standard library, third party, local
* Remove unnecessary spaces
* Comments should start with a # and a single space

* Adding tests for GETs on user facing pages

* Adding more user facing tests

51% test coverage

* Fixes #182

* Cleaning up Pages

Fixes a bug with CSS updating
2017-01-10 03:35:48 -05:00
Kevin Chung
52ad396db4 Adding file handler 2016-11-05 00:54:21 -04:00
Kevin Chung
3f596d87b1 Fixing a variety of glitches
Fixing statistics reporting banned users as well
Fixing url encoding and some error messages
Ordering solves in the admin graphs
Removing banned users (includes admins) from public teams page
Fixing email regex in profile
2016-10-20 23:31:24 -04:00
Kevin Chung
50043b42c5 Merging changes from various forks
Until v1 is released all changes are fair game.

Caching support
Fixes for decoding confirmation and reset_password email tokens
Starting work on #154 specifying why challenges are not open
Adding a required parameter to HTML to sort of fix #153
Adding a column to specify when a team registered
Check static key by default in new key
Decreasing capability of pages functionality to address security
concerns
Fixing confirmations restrictions by modifying can__view_challenges()
2016-09-24 17:56:07 -04:00
Josh Hofing
9860c8dc78 Actually paginate the teams page, instead of only ever showing the first page of teams (#142) 2016-08-23 00:36:41 -04:00
Kevin Chung
b05f6152d3 Custom themes (#131)
* Adding preliminary custom themes

* Fixing Windows compatibility

https://github.com/pallets/jinja/issues/411

* Fixing template reloading and adding UI to change themes

* Explicitly closing db connections

* Themes now have custom static folders

* Closes #128
2016-07-22 02:46:14 -04:00
Robert Blair Mason Jr
6b2257236f Allow CTFd to run with script_root != '/' and PostgreSQL (#125)
Also, Add WSGI config example
2016-06-22 00:18:09 -04:00
Kevin Chung
d2778c30ad Adding container support 2016-05-07 16:38:10 -04:00
CodeKevin
c769f5865f 404 for team pages 2016-04-30 16:11:32 -04:00
CodeKevin
f563cd5a21 Adding Awards feature which closes #84
The Awards feature allows an admin to give users points. Eventually
Awards will allow for uploading icons to make the award more
commemorative.
2016-04-24 17:30:57 -04:00
CodeKevin
1d3ed05f37 Closes #107 and helps with #103
Now shows UTC timestamp
2016-04-11 23:00:18 -04:00
Kevin Chung
3e8f5bbbc5 Closes #93, #76 2016-02-19 14:44:56 -05:00
Kevin Chung
7a46a0a8d3 Fixing setup with new get_config and set_config 2016-02-18 11:31:03 -05:00
CodeKevin
4ae11cf7fe Adding email verification
This commit has some model changes. It could be difficult to upgrade to
this commit.
2016-02-18 02:30:05 -05:00
CodeKevin
1dcba3a264 Fixing CSRF issues and expanding trusted proxies to local network 2016-02-06 15:38:14 -05:00
CodeKevin
85e8a9d271 Closes #61, #85
Whitelist localhost
2016-02-06 15:05:49 -05:00
CodeKevin
9c1f1696ec Closes #82 2016-02-05 20:44:03 -05:00
Josh Hofing
2b8f5c25cb Don't make current page id a link on Teams page 2016-02-05 13:00:31 -05:00
CodeKevin
ac6e5b8c4f Replacing hardcoded redirects with url_for() 2016-01-08 21:28:59 -05:00
Kevin Chung
df21544f13 Supports PY3, refinements to chal editor and viewer, model changes to resolve issues 2015-10-10 21:09:25 -04:00
CodeKevin
f335dd71f2 Closes issue #52 2015-09-16 23:48:45 -04:00
CodeKevin
7d766372df Bugfixes and architectural changes
Moved some folders around, starting to remove subdomain handling,
blueprints, custom css, removed digital ocean interface, fixed some bugs
2015-09-13 23:55:22 -04:00
Kevin Chung
34273de55e Reverting last change and actually fixing bug 2015-05-29 15:22:13 -04:00
Kevin Chung
10f6c0498a Merge branch 'master' of https://github.com/isislab/CTFd 2015-05-29 14:42:46 -04:00
Kevin Chung
0285b858e9 Password updating without entering entire profile 2015-05-29 14:42:20 -04:00
Sean Meyer
db687b6c25 enable max-attempts per challenge setting 2015-05-18 11:31:43 +08:00
CodeKevin
f63b894258 Preventing team name changes 2015-05-03 17:25:59 -04:00
CodeKevin
ac83c8a576 Fixing DOM XSS issues, upload issues, and usability issues 2015-03-16 16:03:58 -04:00
CodeKevin
a0d3a1e640 Fixing XSS issue 2015-03-15 14:42:31 -04:00
CodeKevin
d09d0a9678 Closes #21 2015-03-15 04:18:39 -04:00
Kevin Chung
b4dd54d36a Adding score and place to team page, fixing create_app 2015-03-08 13:39:22 -04:00
Kevin Chung
3b93a40f2b Closes #9 2015-01-18 20:07:02 -05:00
Blake Burkhart
2972cf506d Optionally allow unregistered users to view challenges
Add a Config entry `view_challenges_unregistered` to indicate whether
unregistered users can view challenges. Add the setting to the admin config
page.

Add can_view_challenges() to utils to test if a user is either authed, or the
configuration allow unauthenticated users to view the challenges.

Return a HTTP 401 Unauthorized error when the /chals/solves API can't provide
results for an unauthenticated user. This is needed because the client side
code in `chalboard.js` doesn't know if it's logged in or not and requests this
anyway. (And AJAX doesn't handle redirects very well.) Alternately the client
could actually know if they're logged in and not make needless API calls.

When an unregistered user attempts to submit a flag, it will also fail. The
user will be redirected to a login page.
2015-01-07 22:11:31 -06:00
takeshix
88c79ec1a6 Missing dependencies added 2015-01-02 20:19:00 +01:00
takeshix
65891ed215 Fixed permanent referenced before assignment condition 2015-01-02 01:12:17 +01:00
Kevin Chung
18c0afdd05 Closes #1
Missing bcrypt_sha256 import
2015-01-01 14:26:54 -05:00
CodeKevin
376c90189b CTFd code push 2015-01-01 00:45:25 -05:00