Security and convenience are often at odds with each other and that's the line we often walk when developing something like userspice. How do we give you access to the features you want and protect you from accidentally opening up your system to problems.

Right now there is a variable (array) declared in init.php called $master_account. Why would we use a hard coded variable? To be honest, I want it to be intentionally difficult to give someone this sort of power.

The fact is, you can override this variable in a lot of different ways. Since it's called in init, you can even generate this array in your own header based on permission levels or whatever you want.

Currently this system affects 3 things:
1. The ability to override maintenance mode.
2. The ability to cloak into another user.
3. The ability to manage backups, which includes fully exporting source code and databases.

Thoughts?

Hi, thanks for UserSpice, I can apply Php easily - I'm not yet good at Php.
How do I add UserSpice to a CRUD application?
I have a [MySql] table I have already linked several CRUD pages to; I'm thinking I haven't got them to work well with the UserSpice classes.
To start with, I have the following Php in the read.php CRUD page I need help with:

<?php
// require 'database.php';
$id = null;
if ( !empty($_GET['id'])) {
$id = $_REQUEST['id'];
}

if ( null==$id ) {
header("Location: index.php");
} else {
$pdo = Database::connect();
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); // I haven't appreciated much what this one does.
$sql = "SELECT * FROM bylaws where id = ?";
$q = $pdo->prepare($sql);
$q->execute(array($id));
$data = $q->fetch(PDO::FETCH_ASSOC);
DB::disconnect();
}
?>

Not sure but I think I found a bug when you click on the Cron Manager tab and then click the refresh button under functions on a non active job the page gets stuck in a infinite loop. You can't leave the page, can't log out nothing works and the browser tab shows the page trying to load and spinning. I know you would say why are you trying to refresh a cron job that is not active?? Just testing everything out trying to find bugs.

When I run the update.php script I get the followinn error on my screen:

Fatal error: Uncaught Error: Class 'Cookie' not found in D:\xampp\htdocs\Stamboom\users\init.php:79 Stack trace: #0 D:\xampp\htdocs\Stamboom\users\update.php(2): require_once() #1 {main} thrown in D:\xampp\htdocs\Stamboom\users\init.php on line 79

I have tried it three time with no luck. Has anybody an idea wat is going wrong?

Michael.

Hi all,

I'm a enthusiastic user of UserSpice. I made the pages compatibel with bootstrap and combined with AdminLTE theme.

Is realy lokking great.

I copied

admin_users.php

from the 'users' directory to the 'usersc' directory. At the top of the copied file I had to change

On my mobile phone I cannot access my menus, because all the space on the screen is filled with admin links. My own dropdown menus are hidden off screen and scrolling doesn't work.

My solution is not so nice: comment out lines 69-73 in /users/includes/navigation.php.

Why not putting these admin menu items in an 'admin' dropdown menu?

Thanks for the good work!
grtx, Evert

First I like to say thanks for this open source project. New to user spice. I have gotten it all installed but can't login says check recapcha. The recapcha is in the bottom corner but does not function has red writing over top ask admin

Love the concept & have spent some time yesterday looking to see if I could use UserSpice as the basis for a custom web application.

Certainly - the ability to change some of the look & feel via css is great - but my need is to replace the top nav with a fixed/collapsible sidebar menu (driven by the database settings for new pages etc) ?

I have been fiddling with a template like SB-Admin to build out - but having come across the work you have done - would be great to leverage or combine the 2 x concepts. 1 - either take an SB-Admin like template and insert the UserSpice functionality or 2 - Take the UserSpice template & insert the SB-Admin look & feel

Looking for some help as to how I can do this ?

Or how would you tackle it

Thanks in advance

Added to my Helpers file in the email function as I was unable to use hyphens in the subject line (or at least have them display as intended) maybe one to include:

$mail->CharSet = "UTF-8";