eb38547a24
Init all required comment form fields
2021-07-04 18:43:08 +02:00
0d5a29416c
Fix: Every comment subscribed to an entry
2021-06-30 19:59:47 +02:00
e293bc18f3
php 8 compat fixes for comment subscription
2021-05-29 20:27:02 +02:00
5ccb3cba67
fix: log_trackback called when not available (regular comments)
...
Removes the not strictly necessary function call
2021-05-29 17:21:08 +02:00
bd6c9e79c9
more php 8 compat fixes for receiving trackacks
...
Also includes a code-cleanup by introducing log_trackback, a less code heavy way to log the trackback flow
2021-05-26 00:08:32 +02:00
730f4c080a
php 8 compat fixes for receiving trackbacks
2021-05-25 23:13:51 +02:00
ed24403d36
php 8 compat fixes for comment section
2021-05-13 15:19:54 +02:00
cbca20a535
php 8 compat fixes for commenting in frontend
2021-05-13 15:03:23 +02:00
4c246ad426
php8 compat fixes for entry preview
2021-05-09 16:54:27 +02:00
931e621549
Replace token generation with hash and uniqid with secure random numbers from random_bytes
2021-02-03 17:44:12 +01:00
4c4545428d
Fix internal cache, init proper functions API
2019-02-16 13:07:53 +01:00
e0f230dd15
Remove serendipity_purgeEntry
...
Removed pregenerated entries, but that functionality is long gone
2019-02-12 23:18:52 +01:00
005a86da1c
Another cast for safety
2018-07-19 09:25:18 +02:00
19513cdf14
Security fixes
2018-07-18 11:23:02 +02:00
dcb693ba54
Generating token for comment moderation in a global function now.
2018-03-30 11:04:21 +02:00
0d8cdd59fa
Fix variable name in hook backend_sendcomment
2018-03-24 18:31:14 +01:00
7a0a9e2156
some PHP functions expect strings and crash otherwise
2017-02-07 21:13:51 +01:00
7e70f91686
Add form token to comment delete link
2017-01-17 11:42:37 +01:00
d93674485d
cleaups
2016-03-19 17:18:11 +01:00
d4f09b7821
check session variable to detect a reply from author
2016-02-09 10:49:50 +01:00
7116e167fe
Update functions_comments.inc.php
2016-02-08 11:56:04 +01:00
b043b45a1e
Update functions_comments.inc.php
2016-02-08 11:22:43 +01:00
fb1de8ac51
check if comment author equals article author
2016-02-08 11:16:32 +01:00
55a9bc66b2
Disable email notifications for replies send from backend
2016-02-08 09:51:40 +01:00
69f8eae646
some cleanups found on the way
2016-02-04 15:26:38 +01:00
c16e034f7c
XSS fix
2016-01-04 10:53:52 +01:00
00be5d7b4c
Security fixes from Tim Coen (file upload, comment token escaping, 2k11 js comment name escaping)
2015-07-24 13:27:21 +02:00
e7d822be11
Things I noticed for s9y.github.io
2015-03-19 16:17:30 +01:00
05f14a9f5a
fix non-admin user select and delete comments.
...
Thanks to berberic (forum)
2015-01-12 12:12:03 +01:00
aca77bd482
cleanup cosmetics
2014-12-10 14:34:54 +01:00
8da4c647a8
cleanup tabs and whites
2014-11-24 14:17:38 +01:00
92afc37753
Introduce serendipity_specialchars-wrapper for encoding bug ( #236 )
...
PHP 5.4 sets UTF-8 as the default for htmlspecialchars, htmlentities and html_entity_decode. The first two will echo an empty string when given a string with umlauts. This commits introduces serendipity_specialchar-wrapper that are meant to be a temporary solution for the s9y-core until PHP 5.6 fixed the bug, so the native charset option of s9y continues to work.
2014-11-23 23:41:08 +01:00
c9e9d93f92
Added fix for comment_author_self (cp. http://board.s9y.org/viewtopic.php?f=10&t=19115 )
2013-07-26 12:43:09 +02:00
a654b13a9a
Complete include_once usage, romove constants
2013-06-22 12:32:54 +02:00
706ffbe594
fixed PHP5 only variables should be assigned by reference
2012-10-09 20:49:05 +02:00
d8bcff11a7
up-port 8d828e1 - check goodtoken while approving comments
2012-04-11 18:09:56 +02:00
f2c6b669ad
Deny duplicate pingbacks and send message about new pingbacks found in
...
blog.
2012-01-17 12:55:09 +01:00
d3893904ed
serendipity_fetchComments produced wrong SQL code, if $where and $limit
...
was set but $order don't
2012-01-04 00:12:12 +01:00
de6f589f96
The $goodtoken thing is important, as when this is used, the user is not logged in, and so the comment approval via token
...
would not work (at least this is how I read it, I didn't implement the token approval)
2011-12-31 15:10:00 +01:00
5c062c4f0b
serendipity_deleteComment: Check for adminEntriesMaintainOthers
...
Please check this patch if it is okay, Garvin. Else redo it.
Now only users owning the depending article or having
adminEntriesMaintainOthers are allowed to delete a comment.
2011-12-31 13:47:32 +01:00
0fd5541e51
serendipity_approveComment:
...
Only allow the user to approve a comment, if
he owns the article or has adminEntriesMaintainOthers (or forced is
true). Please check this fix, if it is okay and redo if not.
2011-12-31 13:28:16 +01:00
b547d8d27e
minifix (someone added a + in front of a comment)
2011-12-31 13:21:08 +01:00
2749dc54ad
Smarty3
2011-11-24 12:16:02 +01:00
139db16e5a
better abstract
2011-05-16 07:45:57 +00:00
e1789fa02f
.
2011-04-11 12:40:15 +00:00
defb3ff1fd
* show subscription status of comments in frontend and backend
2011-04-11 12:35:40 +00:00
e46563693c
missing commit
2010-12-21 19:41:19 +00:00
302d67b224
patch by konus, include referer
2010-05-17 07:43:35 +00:00
6bb6a39d25
new event hook
2009-12-20 17:51:22 +00:00
388e5c3d21
pingbacks were not counted as entry trackbacks (also added to entries)
2009-07-04 01:37:47 +00:00
