4785f07f12
Always assume UTF-8.
2022-02-20 17:14:54 +01:00
b1c43491c3
Another serendipity_mb_ucfirst() case.
2022-02-20 02:03:29 +01:00
2d127e81e1
Cleanup and rename project to 幸運な偶然 - Lucky Coinkydink.
2022-02-19 22:19:07 +01:00
50c89e2bad
Moved caching methods out of functions.inc.php into ContentCache class.
2022-02-13 16:15:48 +01:00
onli
eb38547a24
Init all required comment form fields
2021-07-04 18:43:08 +02:00
onli
0d5a29416c
Fix: Every comment subscribed to an entry
2021-06-30 19:59:47 +02:00
onli
e293bc18f3
php 8 compat fixes for comment subscription
2021-05-29 20:27:02 +02:00
onli
5ccb3cba67
fix: log_trackback called when not available (regular comments)
...
Removes the not strictly necessary function call
2021-05-29 17:21:08 +02:00
onli
bd6c9e79c9
more php 8 compat fixes for receiving trackacks
...
Also includes a code-cleanup by introducing log_trackback, a less code heavy way to log the trackback flow
2021-05-26 00:08:32 +02:00
onli
730f4c080a
php 8 compat fixes for receiving trackbacks
2021-05-25 23:13:51 +02:00
onli
ed24403d36
php 8 compat fixes for comment section
2021-05-13 15:19:54 +02:00
onli
cbca20a535
php 8 compat fixes for commenting in frontend
2021-05-13 15:03:23 +02:00
onli
4c246ad426
php8 compat fixes for entry preview
2021-05-09 16:54:27 +02:00
Hanno Böck
931e621549
Replace token generation with hash and uniqid with secure random numbers from random_bytes
2021-02-03 17:44:12 +01:00
onli
4c4545428d
Fix internal cache, init proper functions API
2019-02-16 13:07:53 +01:00
onli
e0f230dd15
Remove serendipity_purgeEntry
...
Removed pregenerated entries, but that functionality is long gone
2019-02-12 23:18:52 +01:00
Garvin Hicking
005a86da1c
Another cast for safety
2018-07-19 09:25:18 +02:00
Garvin Hicking
19513cdf14
Security fixes
2018-07-18 11:23:02 +02:00
mariohommel
dcb693ba54
Generating token for comment moderation in a global function now.
2018-03-30 11:04:21 +02:00
Mario Hommel
0d8cdd59fa
Fix variable name in hook backend_sendcomment
2018-03-24 18:31:14 +01:00
Thomas Heidrich
7a0a9e2156
some PHP functions expect strings and crash otherwise
2017-02-07 21:13:51 +01:00
onli
7e70f91686
Add form token to comment delete link
2017-01-17 11:42:37 +01:00
Ian
d93674485d
cleaups
2016-03-19 17:18:11 +01:00
xoxys
d4f09b7821
check session variable to detect a reply from author
2016-02-09 10:49:50 +01:00
xoxys
7116e167fe
Update functions_comments.inc.php
2016-02-08 11:56:04 +01:00
xoxys
b043b45a1e
Update functions_comments.inc.php
2016-02-08 11:22:43 +01:00
xoxys
fb1de8ac51
check if comment author equals article author
2016-02-08 11:16:32 +01:00
xoxys
55a9bc66b2
Disable email notifications for replies send from backend
2016-02-08 09:51:40 +01:00
Ian
69f8eae646
some cleanups found on the way
2016-02-04 15:26:38 +01:00
Garvin Hicking
c16e034f7c
XSS fix
2016-01-04 10:53:52 +01:00
Garvin Hicking
00be5d7b4c
Security fixes from Tim Coen (file upload, comment token escaping, 2k11 js comment name escaping)
2015-07-24 13:27:21 +02:00
Garvin Hicking
e7d822be11
Things I noticed for s9y.github.io
2015-03-19 16:17:30 +01:00
Ian
05f14a9f5a
fix non-admin user select and delete comments.
...
Thanks to berberic (forum)
2015-01-12 12:12:03 +01:00
Ian
aca77bd482
cleanup cosmetics
2014-12-10 14:34:54 +01:00
Ian
8da4c647a8
cleanup tabs and whites
2014-11-24 14:17:38 +01:00
onli
92afc37753
Introduce serendipity_specialchars-wrapper for encoding bug ( #236 )
...
PHP 5.4 sets UTF-8 as the default for htmlspecialchars, htmlentities and html_entity_decode. The first two will echo an empty string when given a string with umlauts. This commits introduces serendipity_specialchar-wrapper that are meant to be a temporary solution for the s9y-core until PHP 5.6 fixed the bug, so the native charset option of s9y continues to work.
2014-11-23 23:41:08 +01:00
Matthias Gutjahr
c9e9d93f92
Added fix for comment_author_self (cp. http://board.s9y.org/viewtopic.php?f=10&t=19115 )
2013-07-26 12:43:09 +02:00
onli
a654b13a9a
Complete include_once usage, romove constants
2013-06-22 12:32:54 +02:00
Ian
706ffbe594
fixed PHP5 only variables should be assigned by reference
2012-10-09 20:49:05 +02:00
Ian
d8bcff11a7
up-port 8d828e1 - check goodtoken while approving comments
2012-04-11 18:09:56 +02:00
Grischa Brockhaus
f2c6b669ad
Deny duplicate pingbacks and send message about new pingbacks found in
...
blog.
2012-01-17 12:55:09 +01:00
Grischa Brockhaus
d3893904ed
serendipity_fetchComments produced wrong SQL code, if $where and $limit
...
was set but $order don't
2012-01-04 00:12:12 +01:00
Garvin Hicking
de6f589f96
The $goodtoken thing is important, as when this is used, the user is not logged in, and so the comment approval via token
...
would not work (at least this is how I read it, I didn't implement the token approval)
2011-12-31 15:10:00 +01:00
Grischa Brockhaus
5c062c4f0b
serendipity_deleteComment: Check for adminEntriesMaintainOthers
...
Please check this patch if it is okay, Garvin. Else redo it.
Now only users owning the depending article or having
adminEntriesMaintainOthers are allowed to delete a comment.
2011-12-31 13:47:32 +01:00
Grischa Brockhaus
0fd5541e51
serendipity_approveComment:
...
Only allow the user to approve a comment, if
he owns the article or has adminEntriesMaintainOthers (or forced is
true). Please check this fix, if it is okay and redo if not.
2011-12-31 13:28:16 +01:00
Grischa Brockhaus
b547d8d27e
minifix (someone added a + in front of a comment)
2011-12-31 13:21:08 +01:00
Garvin Hicking
2749dc54ad
Smarty3
2011-11-24 12:16:02 +01:00
Garvin Hicking
139db16e5a
better abstract
2011-05-16 07:45:57 +00:00
Garvin Hicking
e1789fa02f
.
2011-04-11 12:40:15 +00:00
Garvin Hicking
defb3ff1fd
* show subscription status of comments in frontend and backend
2011-04-11 12:35:40 +00:00
