Garvin Hicking
be0b6797ad
temporarily revert to default to "false" until kinks are worked out (see board thread)
2012-05-23 15:14:11 +02:00
onli
bbfd3b1cee
removed debug-echo
2012-05-22 17:15:28 +03:00
onli
c571618689
restored sort-order on a single archive-page: from top to bottom = from newest to oldest
2012-05-22 16:10:07 +02:00
onli
52bdecf89d
stable archive sort: genpage.inc.php with different order by was missing
2012-05-22 15:41:28 +02:00
onli
6f4658db9c
sort archives in a stable way
2012-05-21 16:16:20 +02:00
Garvin Hicking
09e9322666
* Fix SQL injection for comment.php used in read-context.
...
(Thanks to High-Tech Bridge SA Security Release Lab, Advisory HTB23092)
2012-05-16 11:59:39 +02:00
Garvin Hicking
17ace68152
improved escaping, thanks to stefan schurtz
2012-04-22 16:14:14 +02:00
Ian
3dc450f624
Merge branch 'master' of https://github.com/s9y/Serendipity
2012-04-17 12:28:57 +02:00
Ian
dc36965bb7
fixed Smarty const check
2012-04-17 12:06:04 +02:00
Garvin Hicking
6096a4a1ed
fix wrong parentheses
2012-04-12 13:40:20 +02:00
Garvin Hicking
13287acd12
Try to fixup DOCUMENT_ROOT in vhost rewrite scenarios; this SHOULD leave shared installs working.
2012-04-11 21:02:24 +02:00
Garvin Hicking
e989cafe12
mysql, use myisam
2012-04-10 22:36:07 +02:00
Ian
6bf43fa920
fixed defaultBaseURL in installer as follow-up commit c292bad
2012-04-07 10:55:23 +02:00
Grischa Brockhaus
8d828e1fc3
Ian's patch: check goodtoken instead of token while approving comments
...
via email link
2012-03-01 13:41:27 +01:00
Grischa Brockhaus
06f4ab7c3f
comment approval was not working when done from email link
2012-03-01 03:37:17 +01:00
Ian
9a8a8f964b
Revert "smartifying: template.inc.php, category.inc.php"
...
This reverts commit 55edda14bff79e91f85af8387763a0ab73135120.
2012-02-18 09:29:48 +01:00
Ian
dd17a759c1
Revert "smartified export.inc.php"
...
This reverts commit e795e4b2ea85d0a450b24bb8f3512740f76aef07.
2012-02-18 09:25:57 +01:00
Ian
1fc36abe56
Revert "smartified group.inc.php"
...
This reverts commit ff667b661772b106f52242fbee2e03e8d33ca737.
2012-02-18 09:25:10 +01:00
onli
ff667b6617
smartified group.inc.php
2012-02-17 16:40:23 +01:00
onli
e795e4b2ea
smartified export.inc.php
2012-02-17 13:27:06 +01:00
onli
55edda14bf
smartifying: template.inc.php, category.inc.php
2012-02-16 20:00:08 +01:00
onli
a490e1e7a5
pdo was missing a global on db_begin/end_transaction()
2012-02-05 19:00:56 +01:00
Ian
9c7f73a857
tab converting and parseTemplate() fix
2012-02-02 14:11:50 +01:00
Ian
503c170ede
update installer version need to PHP 5.2.6
2012-01-28 16:12:48 +01:00
Grischa Brockhaus
92c4b0b4f6
Prevent adding trackbacks we already have, coming from the same URL and
...
pointing to the same article.
2012-01-25 13:39:27 +01:00
Grischa Brockhaus
f2c6b669ad
Deny duplicate pingbacks and send message about new pingbacks found in
...
blog.
2012-01-17 12:55:09 +01:00
Ian
4822b3e7b8
added token to support the preview link in backend entries
2012-01-16 09:10:00 +01:00
Grischa Brockhaus
d3893904ed
serendipity_fetchComments produced wrong SQL code, if $where and $limit
...
was set but $order don't
2012-01-04 00:12:12 +01:00
Ian
82481fc1cf
added nl2br to smarty allowed php modifiers
2012-01-03 14:14:14 +01:00
Garvin Hicking
de6f589f96
The $goodtoken thing is important, as when this is used, the user is not logged in, and so the comment approval via token
...
would not work (at least this is how I read it, I didn't implement the token approval)
2011-12-31 15:10:00 +01:00
Grischa Brockhaus
5c062c4f0b
serendipity_deleteComment: Check for adminEntriesMaintainOthers
...
Please check this patch if it is okay, Garvin. Else redo it.
Now only users owning the depending article or having
adminEntriesMaintainOthers are allowed to delete a comment.
2011-12-31 13:47:32 +01:00
Grischa Brockhaus
0fd5541e51
serendipity_approveComment:
...
Only allow the user to approve a comment, if
he owns the article or has adminEntriesMaintainOthers (or forced is
true). Please check this fix, if it is okay and redo if not.
2011-12-31 13:28:16 +01:00
Grischa Brockhaus
b547d8d27e
minifix (someone added a + in front of a comment)
2011-12-31 13:21:08 +01:00
Ian
09aace0ffe
display back to fetch, as it was
2011-12-29 11:11:27 +01:00
Ian
4db3a08f19
corrected note typos and changed trigger_errors error LEVEL
...
back to Warning as before, which still is halted by the smarty error handler
2011-12-25 15:24:08 +01:00
Garvin Hicking
933c63c904
Allow plugins to use fetch() call without the need to do any weird security_settings[INCLUDE_ALL] redirections
2011-12-22 12:16:34 +01:00
Garvin Hicking
59211ce36e
Magic __set method to react to $serendipity['smarty']->security = false; which is the documented way in a template's config.inc.php to disable security in past s9y versions
2011-12-21 17:21:05 +01:00
Garvin Hicking
bfea178fc4
Some plugins might needs this in the future
2011-12-21 09:16:37 +01:00
Garvin Hicking
e25a70302d
patch to handle files without extensions by Markus Brueckner
2011-12-14 11:49:06 +01:00
Ian
ee116ee460
some more tweaking to the errorToExceptionHandler
2011-12-08 19:21:24 +01:00
Ian
c2afd4efc0
moved custom errorHandler to avoid XML Feed declaring and callback errors
2011-12-06 12:36:03 +01:00
Ian
7d9bf2e6c2
some doc cleanup in serendipity_smarty class
2011-12-05 13:12:17 +01:00
Ian
fd0f634621
convert all $smarty->trigger_error() to native trigger_error()
...
with E_USER_ERROR set and
initialize the smarty object by instance
as always cleanup some tabs
2011-12-04 17:52:37 +01:00
Ian
0682560ad8
last modified and doc header for last commit
2011-12-04 17:38:29 +01:00
Ian
747f9b207a
enhanced get smarty object by instance function
2011-12-04 17:25:59 +01:00
Ian
b0377ef865
smarty compile dir - better exeption handler
2011-12-02 16:23:16 +01:00
Ian
7e0cdf30af
throw exeption instead of die()
2011-12-01 15:53:10 +01:00
Ian
b84a8ccb53
date & tabs to spaces
2011-12-01 11:09:09 +01:00
Ian
dea13b461e
some more caching docs in smarty class
2011-11-30 18:48:40 +01:00
Ian
b2affab6b8
Merge remote-tracking branch 'origin/master'
...
Conflicts:
include/serendipity_smarty_class.inc.php
2011-11-30 18:43:25 +01:00
