1
0
Commit Graph

1419 Commits

Author SHA1 Message Date
0f9bfe3fda Fix display of messages for comment editing.
All messages and errors were appended to $msg
and $errormsg, respectively, creating one long
unformatted string - mostly unreadable.

So we make $msg and $errormsg arrays instead
and iterate over those arrays in the template,
displaying each message separately.

Fixes #525.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-08-07 23:11:13 +02:00
d3e6a3ee3a Fix non-variable matches class (#522) 2017-07-11 14:06:32 +02:00
30b57a1e42 wrong function call 2017-07-11 12:33:01 +02:00
8b1ae7cee8 Once more without parse errors 2017-07-10 13:54:00 +02:00
59f8837ab2 Add upgrader task, Issue #521 2017-07-10 13:53:33 +02:00
07d75a6d65 Fixes Issue #521 2017-07-10 13:49:27 +02:00
b7f479e9fc Display ChangeLog in plugin lists (if available).
Code was using wrong file path variable for checking
the presence of a ChangeLog file.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-07-09 15:07:47 +02:00
1131a79aaf add template path as first entry to template_dirs array; fix #331 fix #516 2017-06-12 17:22:07 +02:00
74f7acb69d Introduce backend_view_entry hook (#511)
Gives plugins the option to modify the central entry list in the plugin, so far to show additional information
2017-05-11 22:48:27 +02:00
bfeccabcdb Rework media library directory move
Initial motivation for this rework was to add support for the responsive thumbnnails (#474). But it also is a re-implementation instead of an enahncement of the existing code because the moveMediaDirectory function had grown into a mess. It was very hard to debug possible renaming bugs, like https://board.s9y.org/viewtopic.php?f=3&t=21185. This approach uses several small functions instead that can be combined and re-used.
2017-04-30 20:38:24 +02:00
2debad91d0 Workaround: Add smartyvars.uriargs to cache key
The freetags plugin sets this->displaytag in the frontend_fetchentries hook, and only sets clean_page if it sees that variable in the entry_display hook. The result is that wrong entries are shown on tag pages. Adding the smartyvars allows caching the correct $entries the plugin would have returned, working around that limitation without simulatign the frontend_fetchentries hook.
2017-04-20 17:42:48 +02:00
2b4ddde690 Drop outer printEntries Cache 2017-04-20 01:23:07 +02:00
bf213b752d Drop outer printEntries cache 2017-04-20 01:19:43 +02:00
e61d38a61d Cache: Add additional state variables + single entry mode
fetchEntries is heaviliy realient on glboal state variables, and that was missed initially. The last commit c8bbb35aac fixed that partially, but did not catch all global state variables. Additionally, this fixed the clean_page mode as used by staticpage by adding the logic and event hook to printEntriesCached
2017-04-20 01:07:24 +02:00
c8bbb35aac Fix cache by getting & setting global state variables
See https://board.s9y.org/viewtopic.php?p=10447129#p10447129. Missed in #345
2017-04-19 01:11:34 +02:00
284fffb750 Merge pull request #503 from th-h/thh-487
Fix comment preview for logged-in user.
2017-04-15 23:26:53 +02:00
c585f73f8c Init responsive images core plugin (#474) 2017-04-15 23:08:54 +02:00
e1733604a5 Merge pull request #493 from th-h/thh-dashboard-entries
Dashboard: redo display of drafts / future entries
2017-04-15 12:01:21 +02:00
18f6429f32 Add rel=trackback header and discovery (#438) 2017-04-15 02:19:45 +02:00
565b8ef51d Fix PHP syntax errors
Introduced in 019dc37836
2017-04-13 20:25:22 +02:00
68a6a58780 Fix comment preview for logged-in user.
Comment form data was unconditionally overwritten
by user data. Make that conditional ...

Fixes #487

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 19:19:02 +02:00
019dc37836 Add comment to serendipity_config_local.inc.php
Refer users to the code primer on docs.s9y.org
and serendipity_config.inc.php for a list of
special variables and their defaults.

Fixes #469.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 14:13:14 +02:00
481b821bae Dashboard: move defaults to serendipity_config
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 10:11:27 +02:00
10caea1b92 Dashboard: redo display of drafts / future entries
See #488 for the discussion.

Merge `dashboardLimit` and `dashboardDraftLimit`
to `dashboardEntriesLimit`

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 10:05:19 +02:00
309d3fc7c5 Add a delete button to the backend entry form.
Closes 472.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-12 23:56:45 +02:00
19b023529d Merge pull request #448 from gnuheidix/admin_username
HTTP500: crashing when username is an array
2017-04-11 15:02:50 +02:00
8c509d93b2 Merge pull request #468 from th-h/thh-465
Dashboard: show as many drafts as configured.
2017-04-11 14:50:08 +02:00
701ebe442d Rever this for the release, re-introduce later 2017-04-09 09:35:14 +02:00
8fee805ca1 Prepare release 2.1.1 2017-04-09 09:15:55 +02:00
c3dfe61b57 Fix broken compat layer.
Partially revert 7a0a9e2156

serendipity_specialchars() and others were made to
return "" when fed something that is not a string.
So boolean values (1 or TRUE) will be returned as "",
i.e. FALSE, breaking the blog in interesting ways
(i.e. displaying wrong configuration values and
saving them to the database).

Closes #476.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:49:10 +02:00
0b85c80ac9 Dashboard: show as much drafts as configured.
The dashboard will show up to $dashboardLimit future
entries; if the number of future entries is still
less than $dashboardDraftLimit, it will add drafts
up to $dashboardDraftLimit.

If there are _no_ future entries, $entries is no
array, but has a value of "1"; count($entries)
will then be one, too, so one draft less will
be shown.

Closes #465.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:46:51 +02:00
7832c364d7 IteratorIteratorIteratorIterator iterated iteration fix. To understand iteration, you first need to understand recursion and iteration and iteration and iteration and iteration. 2017-04-08 17:38:47 +02:00
b8897b3250 PHP7 check 2017-04-08 17:01:31 +02:00
86a17f9a2b Register fatal error handler 2017-04-08 15:45:21 +02:00
5a95db314a spelling fixes 2017-04-06 22:26:07 +02:00
cdf375623d Require token to change theme (fixes #452) 2017-03-02 12:08:05 +01:00
3a7e04c69c improved check quality
!empty verifies that $username has been set with a significant value of any kind; is_string makes sure the type is really what is being expected in the following code.
2017-02-09 23:39:06 +01:00
e28bbf04d2 avoid HTTP500 crashing when username is an array 2017-02-08 20:19:43 +01:00
7a0a9e2156 some PHP functions expect strings and crash otherwise 2017-02-07 21:13:51 +01:00
2b5de12b38 Issue #437 2017-01-26 08:25:06 +01:00
7e70f91686 Add form token to comment delete link 2017-01-17 11:42:37 +01:00
f947c66f66 Add multiple missing CSRF tokens (#439)
Deleting comments, disabling comment threads, installing plugins, toggling a spartacus update check
2017-01-16 15:32:16 +01:00
c62d667287 * [Security] Fix missing integer casting for inserting new categories
(thanks to cdxy)
2017-01-16 11:29:15 +01:00
a48708021c * [Security] Reject %0D/%0A in exit tracking and other places
(Issue #434)
2017-01-03 09:21:25 +01:00
4e8c310156 Issue #435, fix missing escaping of HTTP referer to prevent XSS 2017-01-02 09:37:45 +01:00
0c8416f5df Allow setting a default category.
Needs some testing, I am not sure how to solve the case now where "no category" shall be used. It will always fall back to the default category.
Probably if someone uses a default category, that's the intended behaviour?
2016-12-23 10:14:27 +01:00
fd2f23f3e7 upport security bugfix to escape dbType parameter on first installation (issue #433) 2016-12-19 11:18:10 +01:00
e2a665e13b Sync changes 2016-11-28 15:34:10 +01:00
dc3eb1e735 Merge branch 'master' of github.com:s9y/Serendipity 2016-11-02 12:18:58 +01:00
26de428c18 Enhanced media upload check to also check redirects for local files, thanks to Xu Yue (again!) 2016-11-02 12:18:49 +01:00