During patch review by Tobias Mueller <muelli@cryptobitch.de>, Tobias
pointed out that the original commit referenced above seemed to make a
change that was inappropriate. I reread my commit message and cannot
figure out why I made that change, at least, it doesn't make sense for
the reason I described, and Tobias is right that the escaped version
should be used here.
I've therefore corrected the problem and will test to see if any ill
effects occur.
The code that currently calls this only ever passes in a value that was
returned by elec_verify_voted_token() and as such no security issue
existed here.
However, assuming this function might be used for someone else in
future, we might as well case the value back to integer "just in case".
HT Tobias Mueller <muelli@cryptobitch.de> who pointed this out.
<mina86> it will never scroll [18:09]
<mina86> or I should say, unless you have *very* narrow browser window
<bkuhn> :)
<mina86> the names of the licences will wrap if it's too narrow [18:10]
<mina86> and horizontal scroll will appear only if individual words in license
names are too long
This was primarily based on feedback from Richard Fontana, who said the
previous instructions were unclear.
I also figured it's better to refer to third party documents on what STV is,
rather than the vague description that was here previously.
foundationmembers was a table specific to the GNOME Foundation. This new
table, election_voters, allows creation of an electorate based on a list.
README is updated to explain how to use this table.
It's clear from the PHP code that there should be an integer field called
'preference' in the election_votes table. I suspect that at some point there
was an ALTER TABLE done that wasn't reflected in the schema.sql file.
GNOME's Election committee was previously hard-code here, but the code is
more reusable if it is no longer hard-coded. The variables still default to
GNOME's details, but can be overridden with the configuration file.
With this change, schema.sql can be run directly from the mysql command line,
with a command such as:
$ mysql -u root -p -D dbname < .../vote/include/schema.sql
