589 Commits

Author SHA1 Message Date
onli
f5d5b73c26 Bump required PHP version to 7.0 (#596) 2019-03-06 00:48:50 +01:00
Stephan Brunker
722c1cf7f8 plugin spamblock: if forcemoderation is set, activate the new option moderation_auto 2019-03-05 18:38:22 +01:00
onli
f295a3b123 Fix self-XSS on file upload
The filename was used without escaping in the scucess message shown after upload
2019-02-20 21:38:13 +01:00
Garvin Hicking
0dc6f620c1 [BUGFIX] Fixes media library regression, references #509
Adds missing ACL renames
Missing trailing / when managing dirs
Fix typo that did not evaluate read/write properly
Add missing NEWS entries
2018-11-05 15:59:49 +01:00
onli
52838c0f7b fix: plugin page died because of non-countable object 2018-10-07 19:08:15 +02:00
onli
10585fff80 Fix: Unknown constant error RSS 2018-10-07 19:04:22 +02:00
Garvin Hicking
19513cdf14 Security fixes 2018-07-18 11:23:02 +02:00
onli
23d3a73b01 init maintenance mode (#467) 2018-06-13 19:31:28 +02:00
onli
567587718b React to errors when comment could not be deleted (#527) 2018-06-12 23:49:11 +02:00
onli
9e8eebac15 Fix user creation, also fixes installer
Because the hashtype was not set to the new default, but bcrypt already used, the user could not log in
2018-06-12 22:40:02 +02:00
onli
40993037b2 init media gallery insert 2018-04-06 17:09:51 +02:00
Thomas Hochstein
0f9bfe3fda Fix display of messages for comment editing.
All messages and errors were appended to $msg
and $errormsg, respectively, creating one long
unformatted string - mostly unreadable.

So we make $msg and $errormsg arrays instead
and iterate over those arrays in the template,
displaying each message separately.

Fixes #525.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-08-07 23:11:13 +02:00
Garvin Hicking
30b57a1e42 wrong function call 2017-07-11 12:33:01 +02:00
Garvin Hicking
8b1ae7cee8 Once more without parse errors 2017-07-10 13:54:00 +02:00
Garvin Hicking
59f8837ab2 Add upgrader task, Issue #521 2017-07-10 13:53:33 +02:00
Thomas Hochstein
b7f479e9fc Display ChangeLog in plugin lists (if available).
Code was using wrong file path variable for checking
the presence of a ChangeLog file.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-07-09 15:07:47 +02:00
onli
74f7acb69d Introduce backend_view_entry hook (#511)
Gives plugins the option to modify the central entry list in the plugin, so far to show additional information
2017-05-11 22:48:27 +02:00
onli
bfeccabcdb Rework media library directory move
Initial motivation for this rework was to add support for the responsive thumbnnails (#474). But it also is a re-implementation instead of an enahncement of the existing code because the moveMediaDirectory function had grown into a mess. It was very hard to debug possible renaming bugs, like https://board.s9y.org/viewtopic.php?f=3&t=21185. This approach uses several small functions instead that can be combined and re-used.
2017-04-30 20:38:24 +02:00
onli
c585f73f8c Init responsive images core plugin (#474) 2017-04-15 23:08:54 +02:00
Thomas Hochstein
481b821bae Dashboard: move defaults to serendipity_config
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 10:11:27 +02:00
Thomas Hochstein
10caea1b92 Dashboard: redo display of drafts / future entries
See #488 for the discussion.

Merge `dashboardLimit` and `dashboardDraftLimit`
to `dashboardEntriesLimit`

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 10:05:19 +02:00
Thomas Hochstein
0b85c80ac9 Dashboard: show as much drafts as configured.
The dashboard will show up to $dashboardLimit future
entries; if the number of future entries is still
less than $dashboardDraftLimit, it will add drafts
up to $dashboardDraftLimit.

If there are _no_ future entries, $entries is no
array, but has a value of "1"; count($entries)
will then be one, too, so one draft less will
be shown.

Closes #465.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:46:51 +02:00
klemens
5a95db314a spelling fixes 2017-04-06 22:26:07 +02:00
onli
cdf375623d Require token to change theme (fixes #452) 2017-03-02 12:08:05 +01:00
onli
f947c66f66 Add multiple missing CSRF tokens (#439)
Deleting comments, disabling comment threads, installing plugins, toggling a spartacus update check
2017-01-16 15:32:16 +01:00
Garvin Hicking
4e8c310156 Issue #435, fix missing escaping of HTTP referer to prevent XSS 2017-01-02 09:37:45 +01:00
Garvin Hicking
e2a665e13b Sync changes 2016-11-28 15:34:10 +01:00
Garvin Hicking
dc3eb1e735 Merge branch 'master' of github.com:s9y/Serendipity 2016-11-02 12:18:58 +01:00
Garvin Hicking
26de428c18 Enhanced media upload check to also check redirects for local files, thanks to Xu Yue (again!) 2016-11-02 12:18:49 +01:00
Matthias Mees
7410465496 Improve accessibility of iconfont icons
Iconfont icons are of no value to screenreader users; in our case,
they get alternative text. By adding 'aria-hidden="true"' to the
<span> holding the iconfont icon, we avoid the screenreader trying
to announce the iconfont icon.
2016-10-26 11:29:25 +02:00
onli
d9b1baab76 Further improve theme ordering
Stabilizes output of the recommended themes
2016-10-10 18:43:03 +02:00
onli
196c3becb2 Order themes by their shown name 2016-10-10 18:36:44 +02:00
Garvin Hicking
cfd75ec877 Security patch, see docs/NEWS 2016-09-22 12:51:00 +02:00
onli
d973e99933 Workaround PHP < 5.6 bug, not verifying certs, stopping Request2
See http://board.s9y.org/viewtopic.php?f=10&t=20773 and #399
2016-06-22 19:42:07 +02:00
onli
02a49c8735 Http/Request2 for ML image download (#399) 2016-05-10 02:52:37 +00:00
onli
d4fe793820 Move importers to Http/Request2 and __construct (#399) 2016-05-10 02:47:22 +00:00
onli
32d0a6bf4f Fix: Don't break backend theme box
If the current theme was not the same as the backend theme, but the
backend theme was part of a recommended theme, then that backend theme
would get accidentally removed from the list of themes and thus nto set
as the current backend theme, breaking the themes menu
2016-04-20 20:47:57 +00:00
onli
cc4e9f953e Introduce recommended section in theme backend
Meant to highlight modern themes for guiding users not to pick the outdated xhtml themes still available via spartacus. See http://board.s9y.org/viewtopic.php?f=5&t=20713
2016-04-14 16:18:16 +02:00
onli
9d18a74440 Fix: Both plugin types not upgradeable in shared list (#383) 2016-03-29 19:49:26 +02:00
onli
668363eb1b Merge event and sidebar update page into one (#383) 2016-03-20 14:40:08 +00:00
Ian
d93674485d cleaups 2016-03-19 17:18:11 +01:00
xoxys
7e5f63d9d2 remove backend variable 2016-02-09 10:55:12 +01:00
xoxys
93322d2dce Disable email notifications for replies send from backend
Add variable $comment to control comment replies from backend
2016-02-08 09:47:58 +01:00
Ian
a47fa22ca4 do not set spamblock button if user not has 'adminComments' privilege 2016-02-04 15:41:58 +01:00
Ian
0af650be44 better comments by author
Removes some restrictions previously added. Or else we would need a 'userComments' privilege. But that would not make too much sense, since we already work with the lowest group privilege here.
This still is not ready yet, I presume. It needs more finetuning like answer to comments, etc.
Please help testing.

References #385
2016-02-03 18:12:17 +01:00
Ian
7f7f452388 fix d4ce253 missing authorid fetch
References #385
2016-02-03 16:52:46 +01:00
Ian
d4ce2533f6 edit comments by authorid
References #385

Please test.
2016-02-03 16:28:58 +01:00
Ian
227d115d71 Fix missing perm checks for a "standard user" in MediaLibrary
We still have the issue that we have set authorID 0 as the standard authorid in ML. This prevents us being more strict than this.
We will have to re-think this, maybe...

References #385
2016-02-03 15:47:04 +01:00
Ian
1196bbe826 better use pre defined constant userlevel 2016-01-25 11:34:29 +01:00
Ian
8bf485fd1d extend comments and entries in Dashboard by userLevel
References #385

This still does not help with non-working button for the 'Standard Editor' (level 0).
2016-01-23 11:24:12 +01:00