1
0
Commit Graph

1604 Commits

Author SHA1 Message Date
284fffb750 Merge pull request #503 from th-h/thh-487
Fix comment preview for logged-in user.
2017-04-15 23:26:53 +02:00
c585f73f8c Init responsive images core plugin (#474) 2017-04-15 23:08:54 +02:00
e1733604a5 Merge pull request #493 from th-h/thh-dashboard-entries
Dashboard: redo display of drafts / future entries
2017-04-15 12:01:21 +02:00
18f6429f32 Add rel=trackback header and discovery (#438) 2017-04-15 02:19:45 +02:00
565b8ef51d Fix PHP syntax errors
Introduced in 019dc37836
2017-04-13 20:25:22 +02:00
68a6a58780 Fix comment preview for logged-in user.
Comment form data was unconditionally overwritten
by user data. Make that conditional ...

Fixes #487

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 19:19:02 +02:00
019dc37836 Add comment to serendipity_config_local.inc.php
Refer users to the code primer on docs.s9y.org
and serendipity_config.inc.php for a list of
special variables and their defaults.

Fixes #469.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 14:13:14 +02:00
481b821bae Dashboard: move defaults to serendipity_config
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 10:11:27 +02:00
10caea1b92 Dashboard: redo display of drafts / future entries
See #488 for the discussion.

Merge `dashboardLimit` and `dashboardDraftLimit`
to `dashboardEntriesLimit`

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 10:05:19 +02:00
309d3fc7c5 Add a delete button to the backend entry form.
Closes 472.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-12 23:56:45 +02:00
19b023529d Merge pull request #448 from gnuheidix/admin_username
HTTP500: crashing when username is an array
2017-04-11 15:02:50 +02:00
8c509d93b2 Merge pull request #468 from th-h/thh-465
Dashboard: show as many drafts as configured.
2017-04-11 14:50:08 +02:00
701ebe442d Rever this for the release, re-introduce later 2017-04-09 09:35:14 +02:00
8fee805ca1 Prepare release 2.1.1 2017-04-09 09:15:55 +02:00
c3dfe61b57 Fix broken compat layer.
Partially revert 7a0a9e2156

serendipity_specialchars() and others were made to
return "" when fed something that is not a string.
So boolean values (1 or TRUE) will be returned as "",
i.e. FALSE, breaking the blog in interesting ways
(i.e. displaying wrong configuration values and
saving them to the database).

Closes #476.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:49:10 +02:00
0b85c80ac9 Dashboard: show as much drafts as configured.
The dashboard will show up to $dashboardLimit future
entries; if the number of future entries is still
less than $dashboardDraftLimit, it will add drafts
up to $dashboardDraftLimit.

If there are _no_ future entries, $entries is no
array, but has a value of "1"; count($entries)
will then be one, too, so one draft less will
be shown.

Closes #465.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:46:51 +02:00
7832c364d7 IteratorIteratorIteratorIterator iterated iteration fix. To understand iteration, you first need to understand recursion and iteration and iteration and iteration and iteration. 2017-04-08 17:38:47 +02:00
b8897b3250 PHP7 check 2017-04-08 17:01:31 +02:00
86a17f9a2b Register fatal error handler 2017-04-08 15:45:21 +02:00
5a95db314a spelling fixes 2017-04-06 22:26:07 +02:00
cdf375623d Require token to change theme (fixes #452) 2017-03-02 12:08:05 +01:00
3a7e04c69c improved check quality
!empty verifies that $username has been set with a significant value of any kind; is_string makes sure the type is really what is being expected in the following code.
2017-02-09 23:39:06 +01:00
e28bbf04d2 avoid HTTP500 crashing when username is an array 2017-02-08 20:19:43 +01:00
7a0a9e2156 some PHP functions expect strings and crash otherwise 2017-02-07 21:13:51 +01:00
2b5de12b38 Issue #437 2017-01-26 08:25:06 +01:00
7e70f91686 Add form token to comment delete link 2017-01-17 11:42:37 +01:00
f947c66f66 Add multiple missing CSRF tokens (#439)
Deleting comments, disabling comment threads, installing plugins, toggling a spartacus update check
2017-01-16 15:32:16 +01:00
c62d667287 * [Security] Fix missing integer casting for inserting new categories
(thanks to cdxy)
2017-01-16 11:29:15 +01:00
a48708021c * [Security] Reject %0D/%0A in exit tracking and other places
(Issue #434)
2017-01-03 09:21:25 +01:00
4e8c310156 Issue #435, fix missing escaping of HTTP referer to prevent XSS 2017-01-02 09:37:45 +01:00
0c8416f5df Allow setting a default category.
Needs some testing, I am not sure how to solve the case now where "no category" shall be used. It will always fall back to the default category.
Probably if someone uses a default category, that's the intended behaviour?
2016-12-23 10:14:27 +01:00
fd2f23f3e7 upport security bugfix to escape dbType parameter on first installation (issue #433) 2016-12-19 11:18:10 +01:00
e2a665e13b Sync changes 2016-11-28 15:34:10 +01:00
dc3eb1e735 Merge branch 'master' of github.com:s9y/Serendipity 2016-11-02 12:18:58 +01:00
26de428c18 Enhanced media upload check to also check redirects for local files, thanks to Xu Yue (again!) 2016-11-02 12:18:49 +01:00
7410465496 Improve accessibility of iconfont icons
Iconfont icons are of no value to screenreader users; in our case,
they get alternative text. By adding 'aria-hidden="true"' to the
<span> holding the iconfont icon, we avoid the screenreader trying
to announce the iconfont icon.
2016-10-26 11:29:25 +02:00
d9b1baab76 Further improve theme ordering
Stabilizes output of the recommended themes
2016-10-10 18:43:03 +02:00
196c3becb2 Order themes by their shown name 2016-10-10 18:36:44 +02:00
846dbbeb85 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-26 09:45:37 +02:00
eedd984e0d improve cgi detection to use custom htaccess
See http://board.s9y.org/viewtopic.php?f=3&t=20788
2016-09-25 16:54:09 +02:00
06e33c5421 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-25 15:30:10 +02:00
4aaa9845eb Add header API 2016-09-22 15:38:12 +02:00
d60a7da9c3 support http auth 2016-09-22 15:34:27 +02:00
20ade83792 allow arrays 2016-09-22 14:33:52 +02:00
80f3b39502 forward compatibility to serendipity_request_url 2016-09-22 14:26:59 +02:00
cfd75ec877 Security patch, see docs/NEWS 2016-09-22 12:51:00 +02:00
c1e4f4c533 Add serendipity_request_url() 2016-09-22 12:35:48 +02:00
6d68ec389d experimental commit to use "content_message" for emitting a default "404 not found" message when redirecting to the blog to indicate 404 view
http://board.s9y.org/viewtopic.php?f=2&t=20861
2016-09-20 10:35:11 +02:00
5108486af3 Remove backend js from preview_iframe in next 2016-09-11 15:38:41 +02:00
f15cb17755 Document recent changes
fallback chain changes, preview fixes, getFile function in plugin api,
frontend-param in smarty {getFile}
2016-09-09 15:12:13 +02:00