5275 Commits

Author SHA1 Message Date
Thomas Hochstein
b524f7561b Reformat as icon button, in front of "preview".
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 09:55:12 +02:00
onli
59d17ee112 Merge pull request #492 from th-h/thh-backend-page-title
Redo backend page title order.
2017-04-13 09:24:40 +02:00
Thomas Hochstein
6b775e1cac Redo backend page title order.
Code style improvements from the reviews of

* Rename ´$serendipity['title_first'´] to
  ´$serendipity['backendBlogtitleFirst']´ and
  make it boolean

* Add default to `serendipity_config.inc.php`.

* Change the condition in ´2k11/admin/index.tpl´
  that the first branch is run by default

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 00:18:28 +02:00
Thomas Hochstein
309d3fc7c5 Add a delete button to the backend entry form.
Closes 472.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-12 23:56:45 +02:00
onli
82b79ef4d6 Merge pull request #489 from th-h/thh-spartacus-default
Change Spartacus default mirror to github.
2017-04-12 18:44:17 +02:00
Thomas Hochstein
5ad93297ed Change Spartacus default mirror to github.
Netmirror is not very reliable currently.

Add Changelog file.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-12 18:37:30 +02:00
onli
19b023529d Merge pull request #448 from gnuheidix/admin_username
HTTP500: crashing when username is an array
2017-04-11 15:02:50 +02:00
onli
8c509d93b2 Merge pull request #468 from th-h/thh-465
Dashboard: show as many drafts as configured.
2017-04-11 14:50:08 +02:00
onli
fd412dad00 Merge pull request #480 from th-h/thh-413
Make backend page title order configurable.
2017-04-11 14:47:54 +02:00
Garvin Hicking
13750e09e5 next major release 2017-04-09 09:41:05 +02:00
Garvin Hicking
701ebe442d Rever this for the release, re-introduce later 2.1.1 2017-04-09 09:35:14 +02:00
Garvin Hicking
8fee805ca1 Prepare release 2.1.1 2017-04-09 09:15:55 +02:00
Mario Hommel
9365836307 Merge pull request #481 from th-h/thh-476
Fix broken compat layer.
2017-04-09 00:55:21 +02:00
Thomas Hochstein
c3dfe61b57 Fix broken compat layer.
Partially revert 7a0a9e215600284eb5aeea201d79563368f4c45b

serendipity_specialchars() and others were made to
return "" when fed something that is not a string.
So boolean values (1 or TRUE) will be returned as "",
i.e. FALSE, breaking the blog in interesting ways
(i.e. displaying wrong configuration values and
saving them to the database).

Closes #476.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:49:10 +02:00
Thomas Hochstein
488267a6cf Make backend page title order configurable.
The default page title of backend pages is
"section | blog title | $admin". You can
now change the order to "blog title | section
 | $admin" by setting $serendipity['title_first']
to "blogtitle" in serendipity_config_local.inc.php

Closes #413

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:47:24 +02:00
Thomas Hochstein
0b85c80ac9 Dashboard: show as much drafts as configured.
The dashboard will show up to $dashboardLimit future
entries; if the number of future entries is still
less than $dashboardDraftLimit, it will add drafts
up to $dashboardDraftLimit.

If there are _no_ future entries, $entries is no
array, but has a value of "1"; count($entries)
will then be one, too, so one draft less will
be shown.

Closes #465.

Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:46:51 +02:00
Garvin Hicking
2bedc9243e next version 2017-04-08 18:47:50 +02:00
Garvin Hicking
a794481941 bump release 2.1.0 2017-04-08 18:30:49 +02:00
Garvin Hicking
a385c10890 bump version 2017-04-08 18:23:46 +02:00
Garvin Hicking
7832c364d7 IteratorIteratorIteratorIterator iterated iteration fix. To understand iteration, you first need to understand recursion and iteration and iteration and iteration and iteration. 2017-04-08 17:38:47 +02:00
Garvin Hicking
b8897b3250 PHP7 check 2017-04-08 17:01:31 +02:00
Garvin Hicking
86a17f9a2b Register fatal error handler 2017-04-08 15:45:21 +02:00
Garvin Hicking
3e442e73ff Merge pull request #466 from ka7/feature/spelling
spelling fixes
2017-04-07 10:48:11 +02:00
klemens
5a95db314a spelling fixes 2017-04-06 22:26:07 +02:00
Don Chambers
4d8f04d406 Add plugin_dynamicform.tpl to Timeline theme 2017-03-18 09:36:57 -05:00
Matthias Mees
3702139dcf Merge pull request #461 from webcompas/master
Fixed uninitialized Smarty value (fixes #460)
2017-03-14 14:28:04 +01:00
Pascal Uhlmann
8791e8929e Fixed uninitialized Smarty value (fixes s9y/Serendipity#460) 2017-03-14 14:02:33 +01:00
onli
cdf375623d Require token to change theme (fixes #452) 2017-03-02 12:08:05 +01:00
Matthias Mees
d98eaed44c Use https protocol for external assets
Basically 'backporting' e256e658 for preview_iframe.tpl
2017-02-24 09:07:53 +01:00
Matthias Mees
cea0240240 Merge pull request #451 from capturehorizons/patch-1
Update index.tpl
2017-02-24 09:06:03 +01:00
Marcus Seidler
e256e65846 Update index.tpl
Hello s9y,

I have change three url (lines 23, 32, 33) to "https://..." because browser warning unsaved content on https-domains.

It works on my site "www.seidler.is"

I hope i could help

Greeting marcus
2017-02-24 08:28:45 +01:00
Thomas Heidrich
3a7e04c69c improved check quality
!empty verifies that $username has been set with a significant value of any kind; is_string makes sure the type is really what is being expected in the following code.
2017-02-09 23:39:06 +01:00
Thomas Heidrich
e28bbf04d2 avoid HTTP500 crashing when username is an array 2017-02-08 20:19:43 +01:00
onli
381b066344 Merge pull request #447 from gnuheidix/comment_sanitized
some PHP functions expect strings and crash otherwise
2017-02-07 22:16:10 +01:00
onli
9511b9dde5 Merge pull request #446 from gnuheidix/search_term
makes sure that only strings are being processed in searchTerm
2017-02-07 21:15:11 +01:00
Thomas Heidrich
7a0a9e2156 some PHP functions expect strings and crash otherwise 2017-02-07 21:13:51 +01:00
Thomas Heidrich
dd06eeea99 makes sure that only strings are being processed in searchTerm; strip_tags crashes in case it's getting an array 2017-02-07 20:24:33 +01:00
Garvin Hicking
55ec5e4ab4 document, bump 2017-01-30 14:58:52 +01:00
Garvin Hicking
c2cebad52b issue #442 2017-01-30 14:58:37 +01:00
onli
d4d46855c2 Add formtoken to upgrade button 2017-01-26 14:11:54 +01:00
Garvin Hicking
ba6d9ee127 prepare release 2.1-rc1 2017-01-26 11:50:15 +01:00
Garvin Hicking
2b5de12b38 Issue #437 2017-01-26 08:25:06 +01:00
Garvin Hicking
97277cfd1a issue #430 2017-01-26 08:23:17 +01:00
Garvin Hicking
5bf0cf9fea Merge branch 'master' of github.com:s9y/Serendipity 2017-01-26 08:16:22 +01:00
Garvin Hicking
69d8a34c90 document 2017-01-26 08:16:14 +01:00
onli
7e70f91686 Add form token to comment delete link 2017-01-17 11:42:37 +01:00
onli
f947c66f66 Add multiple missing CSRF tokens (#439)
Deleting comments, disabling comment threads, installing plugins, toggling a spartacus update check
2017-01-16 15:32:16 +01:00
Garvin Hicking
c62d667287 * [Security] Fix missing integer casting for inserting new categories
(thanks to cdxy)
2017-01-16 11:29:15 +01:00
Garvin Hicking
6285933470 * [Security] Redirection of comment.php now checks the referrer
and only allows the blog's host (thanks to Lee Sheldon Victor)
2017-01-12 12:02:27 +01:00
Garvin Hicking
a48708021c * [Security] Reject %0D/%0A in exit tracking and other places
(Issue #434)
2017-01-03 09:21:25 +01:00