90 Commits

Author SHA1 Message Date
Thomas Hochstein
12bb9c0cc0 Fix media library (mass) delete.
Fixes .

Signed-off-by: Thomas Hochstein <thh@inter.net>
2019-08-17 01:36:51 +02:00
onli
f295a3b123 Fix self-XSS on file upload
The filename was used without escaping in the scucess message shown after upload
2019-02-20 21:38:13 +01:00
Garvin Hicking
0dc6f620c1 [BUGFIX] Fixes media library regression, references
Adds missing ACL renames
Missing trailing / when managing dirs
Fix typo that did not evaluate read/write properly
Add missing NEWS entries
2018-11-05 15:59:49 +01:00
onli
40993037b2 init media gallery insert 2018-04-06 17:09:51 +02:00
onli
bfeccabcdb Rework media library directory move
Initial motivation for this rework was to add support for the responsive thumbnnails (). But it also is a re-implementation instead of an enahncement of the existing code because the moveMediaDirectory function had grown into a mess. It was very hard to debug possible renaming bugs, like https://board.s9y.org/viewtopic.php?f=3&t=21185. This approach uses several small functions instead that can be combined and re-used.
2017-04-30 20:38:24 +02:00
onli
c585f73f8c Init responsive images core plugin () 2017-04-15 23:08:54 +02:00
Garvin Hicking
e2a665e13b Sync changes 2016-11-28 15:34:10 +01:00
Garvin Hicking
dc3eb1e735 Merge branch 'master' of github.com:s9y/Serendipity 2016-11-02 12:18:58 +01:00
Garvin Hicking
26de428c18 Enhanced media upload check to also check redirects for local files, thanks to Xu Yue (again!) 2016-11-02 12:18:49 +01:00
Matthias Mees
7410465496 Improve accessibility of iconfont icons
Iconfont icons are of no value to screenreader users; in our case,
they get alternative text. By adding 'aria-hidden="true"' to the
<span> holding the iconfont icon, we avoid the screenreader trying
to announce the iconfont icon.
2016-10-26 11:29:25 +02:00
Garvin Hicking
cfd75ec877 Security patch, see docs/NEWS 2016-09-22 12:51:00 +02:00
onli
d973e99933 Workaround PHP < 5.6 bug, not verifying certs, stopping Request2
See http://board.s9y.org/viewtopic.php?f=10&t=20773 and 
2016-06-22 19:42:07 +02:00
onli
02a49c8735 Http/Request2 for ML image download () 2016-05-10 02:52:37 +00:00
Ian
227d115d71 Fix missing perm checks for a "standard user" in MediaLibrary
We still have the issue that we have set authorID 0 as the standard authorid in ML. This prevents us being more strict than this.
We will have to re-think this, maybe...

References 
2016-02-03 15:47:04 +01:00
Ian
04104a3e4d Fixed media item delete handler
References 
Closes 
2015-10-31 14:10:52 +01:00
Ian
ee1e567503 remove default case only path restoreVar
this is now done where it is actually needed
2015-10-28 11:36:50 +01:00
Ian
d1baaf4983 better listen on toggle_dir and remember 2015-10-26 11:36:57 +01:00
Ian
a7732eeb81 minors 2015-10-20 13:24:50 +02:00
Ian
715d8cafa6 Optimize scaleImage returns 2015-10-19 13:21:19 +02:00
Ian
3030b80c2b fix rename media file reload issue
References 

and allow better umlaut conversion

This is a plain javascript event, therefore the message and reload stuff had to move into the JS caller.
2015-10-17 15:03:15 +02:00
Ian
732d6067c3 restore last set directory path on mediaproperties submit 2015-10-17 13:47:36 +02:00
Ian
0d7f8d474f multi delete/move - submit by name
fixes notice messages on POST
2015-10-16 11:22:25 +02:00
Ian
d130dc729e bulkmove - prevent success reload to open itself,
the multidelete type again and end with MULTICHECK_NO_ITEM message.
2015-10-15 11:01:06 +02:00
Ian
92299999e7 bulkmove - return to last selected directory 2015-10-15 10:55:35 +02:00
Ian
8fb7d51106 add message to item properties done 2015-10-12 14:15:31 +02:00
Ian
2e43a9944e keep previous ML item name whitespace behaviour 2015-10-08 10:25:23 +02:00
Ian
4539ef8d9d dot is empty - fix 994161a 2015-10-07 11:35:03 +02:00
Ian
994161a0a2 better preserve directory seperators 2015-10-07 11:16:36 +02:00
Ian
e2b6417bd2 extend 2b9a008 for both cases 2015-10-07 09:45:35 +02:00
Ian
2b9a008208 allow upload file real umlaut conversion and remove workaround 2015-10-07 09:37:44 +02:00
Ian
7c21de8aa8 Allow bulk move ML items to Uploads Root too
Fixes many issues like for renaming files and subdir handling, database placements and other issues.
Structures case DIR, FILE and FILE vars for renaming, moving, select and replace.
Touches directoryEdit and mediaproperties related boundaries.
Adds better event messages, which fixes $ob_serendipity_moveMediaDirectory.
Extends and fixes media_items realname issues and changes the length of the item title to be as long as possible.
Added new constants to be executed to the lang files in near future, when some follow up commits have been added.
2015-10-05 18:19:09 +02:00
Ian
9e49ecc8c3 remove to API 2015-09-23 17:49:23 +02:00
Ian
d9b48b8efe remove param $messages from showMediaLibrary
plus minors in prep for rename / bulkmove enhancement
2015-09-23 17:37:53 +02:00
Ian
f85f83c337 move cast 2015-08-29 19:53:38 +02:00
Ian
300bdd6f5f Allow bulk image MOVE in ML
and give a path information note to the image info layer

References 
2015-08-26 12:22:17 +02:00
onli
9032f24f4b Show rescale in ML-popup when toolbar is active () 2015-03-26 23:55:22 +01:00
Matthias Mees
4665bb6598 Rework messages emitted by upload/delete in media db
Due to a regression in how these messages are emitted, these now
need to emit their msg markup in include/admin/images.inc.php or
include/functions_images.inc.php to avoid nested msg containers.

References 
2015-02-03 18:46:47 +01:00
Garvin Hicking
71e41b3a5a Issue prevent umlauts and special characters for creating/editing media dirs 2015-01-29 15:40:45 +01:00
Garvin Hicking
253428dd93 Drop $authorid as discussed
References 
2015-01-27 14:21:53 +01:00
Ian
1025ec5748 fix default open ML if in image properties form - give option to jump to ML w/o submittng form
References  (was not really mentioned there, bur related)
2015-01-18 16:38:03 +01:00
Ian
254ecb4c6a cleanup prepare 2015-01-18 15:38:09 +01:00
Ian
8da4c647a8 cleanup tabs and whites 2014-11-24 14:17:38 +01:00
onli
92afc37753 Introduce serendipity_specialchars-wrapper for encoding bug ()
PHP 5.4 sets UTF-8 as the default for htmlspecialchars, htmlentities and html_entity_decode. The first two will echo an empty string when given a string with umlauts. This commits introduces serendipity_specialchar-wrapper that are meant to be a temporary solution for the s9y-core until PHP 5.6 fixed the bug, so the native charset option of s9y continues to work.
2014-11-23 23:41:08 +01:00
Garvin Hicking
63f7510ebd References
Fixes thumbnail regeneration, only a problem with proper execution order
2014-06-25 13:22:39 +02:00
onli
f356c7d287 fix doubled html-section in media choose ()
Also a cleanup of media_choose.tpl
2014-06-24 23:22:51 +02:00
onli
2c57def881 minor: fix comment typos 2014-05-29 23:44:21 +02:00
onli
2d50bdd375 ML filter-folder save without reload via cookies () 2014-05-29 23:16:41 +02:00
onli
6dd5b4aa6b Improve image deletion pages ()
Show correct button for multidelete-form, remove switched_output and doubled state-variables, show formerly lost delete-messages on ML after deletion instead of blank page
2014-05-29 22:26:01 +02:00
onli
1bce7ec7ec Make ML available after upload and filter-change () 2014-05-29 21:54:26 +02:00
onli
a8b4f05de2 Improve status-messages of ajax uploader () 2014-05-25 21:30:36 +02:00