Thomas Hochstein
b524f7561b
Reformat as icon button, in front of "preview".
...
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 09:55:12 +02:00
onli
59d17ee112
Merge pull request #492 from th-h/thh-backend-page-title
...
Redo backend page title order.
2017-04-13 09:24:40 +02:00
Thomas Hochstein
6b775e1cac
Redo backend page title order.
...
Code style improvements from the reviews of
* Rename ´$serendipity['title_first'´] to
´$serendipity['backendBlogtitleFirst']´ and
make it boolean
* Add default to `serendipity_config.inc.php`.
* Change the condition in ´2k11/admin/index.tpl´
that the first branch is run by default
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-13 00:18:28 +02:00
Thomas Hochstein
309d3fc7c5
Add a delete button to the backend entry form.
...
Closes 472.
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-12 23:56:45 +02:00
onli
82b79ef4d6
Merge pull request #489 from th-h/thh-spartacus-default
...
Change Spartacus default mirror to github.
2017-04-12 18:44:17 +02:00
Thomas Hochstein
5ad93297ed
Change Spartacus default mirror to github.
...
Netmirror is not very reliable currently.
Add Changelog file.
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-12 18:37:30 +02:00
onli
19b023529d
Merge pull request #448 from gnuheidix/admin_username
...
HTTP500: crashing when username is an array
2017-04-11 15:02:50 +02:00
onli
8c509d93b2
Merge pull request #468 from th-h/thh-465
...
Dashboard: show as many drafts as configured.
2017-04-11 14:50:08 +02:00
onli
fd412dad00
Merge pull request #480 from th-h/thh-413
...
Make backend page title order configurable.
2017-04-11 14:47:54 +02:00
Garvin Hicking
13750e09e5
next major release
2017-04-09 09:41:05 +02:00
Garvin Hicking
701ebe442d
Rever this for the release, re-introduce later
2.1.1
2017-04-09 09:35:14 +02:00
Garvin Hicking
8fee805ca1
Prepare release 2.1.1
2017-04-09 09:15:55 +02:00
Mario Hommel
9365836307
Merge pull request #481 from th-h/thh-476
...
Fix broken compat layer.
2017-04-09 00:55:21 +02:00
Thomas Hochstein
c3dfe61b57
Fix broken compat layer.
...
Partially revert 7a0a9e215600284eb5aeea201d79563368f4c45b
serendipity_specialchars() and others were made to
return "" when fed something that is not a string.
So boolean values (1 or TRUE) will be returned as "",
i.e. FALSE, breaking the blog in interesting ways
(i.e. displaying wrong configuration values and
saving them to the database).
Closes #476 .
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:49:10 +02:00
Thomas Hochstein
488267a6cf
Make backend page title order configurable.
...
The default page title of backend pages is
"section | blog title | $admin". You can
now change the order to "blog title | section
| $admin" by setting $serendipity['title_first']
to "blogtitle" in serendipity_config_local.inc.php
Closes #413
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:47:24 +02:00
Thomas Hochstein
0b85c80ac9
Dashboard: show as much drafts as configured.
...
The dashboard will show up to $dashboardLimit future
entries; if the number of future entries is still
less than $dashboardDraftLimit, it will add drafts
up to $dashboardDraftLimit.
If there are _no_ future entries, $entries is no
array, but has a value of "1"; count($entries)
will then be one, too, so one draft less will
be shown.
Closes #465 .
Signed-off-by: Thomas Hochstein <thh@inter.net>
2017-04-09 00:46:51 +02:00
Garvin Hicking
2bedc9243e
next version
2017-04-08 18:47:50 +02:00
Garvin Hicking
a794481941
bump release
2.1.0
2017-04-08 18:30:49 +02:00
Garvin Hicking
a385c10890
bump version
2017-04-08 18:23:46 +02:00
Garvin Hicking
7832c364d7
IteratorIteratorIteratorIterator iterated iteration fix. To understand iteration, you first need to understand recursion and iteration and iteration and iteration and iteration.
2017-04-08 17:38:47 +02:00
Garvin Hicking
b8897b3250
PHP7 check
2017-04-08 17:01:31 +02:00
Garvin Hicking
86a17f9a2b
Register fatal error handler
2017-04-08 15:45:21 +02:00
Garvin Hicking
3e442e73ff
Merge pull request #466 from ka7/feature/spelling
...
spelling fixes
2017-04-07 10:48:11 +02:00
klemens
5a95db314a
spelling fixes
2017-04-06 22:26:07 +02:00
Don Chambers
4d8f04d406
Add plugin_dynamicform.tpl to Timeline theme
2017-03-18 09:36:57 -05:00
Matthias Mees
3702139dcf
Merge pull request #461 from webcompas/master
...
Fixed uninitialized Smarty value (fixes #460 )
2017-03-14 14:28:04 +01:00
Pascal Uhlmann
8791e8929e
Fixed uninitialized Smarty value ( fixes s9y/Serendipity#460 )
2017-03-14 14:02:33 +01:00
onli
cdf375623d
Require token to change theme ( fixes #452 )
2017-03-02 12:08:05 +01:00
Matthias Mees
d98eaed44c
Use https protocol for external assets
...
Basically 'backporting' e256e658 for preview_iframe.tpl
2017-02-24 09:07:53 +01:00
Matthias Mees
cea0240240
Merge pull request #451 from capturehorizons/patch-1
...
Update index.tpl
2017-02-24 09:06:03 +01:00
Marcus Seidler
e256e65846
Update index.tpl
...
Hello s9y,
I have change three url (lines 23, 32, 33) to "https://..." because browser warning unsaved content on https-domains.
It works on my site "www.seidler.is"
I hope i could help
Greeting marcus
2017-02-24 08:28:45 +01:00
Thomas Heidrich
3a7e04c69c
improved check quality
...
!empty verifies that $username has been set with a significant value of any kind; is_string makes sure the type is really what is being expected in the following code.
2017-02-09 23:39:06 +01:00
Thomas Heidrich
e28bbf04d2
avoid HTTP500 crashing when username is an array
2017-02-08 20:19:43 +01:00
onli
381b066344
Merge pull request #447 from gnuheidix/comment_sanitized
...
some PHP functions expect strings and crash otherwise
2017-02-07 22:16:10 +01:00
onli
9511b9dde5
Merge pull request #446 from gnuheidix/search_term
...
makes sure that only strings are being processed in searchTerm
2017-02-07 21:15:11 +01:00
Thomas Heidrich
7a0a9e2156
some PHP functions expect strings and crash otherwise
2017-02-07 21:13:51 +01:00
Thomas Heidrich
dd06eeea99
makes sure that only strings are being processed in searchTerm; strip_tags crashes in case it's getting an array
2017-02-07 20:24:33 +01:00
Garvin Hicking
55ec5e4ab4
document, bump
2017-01-30 14:58:52 +01:00
Garvin Hicking
c2cebad52b
issue #442
2017-01-30 14:58:37 +01:00
onli
d4d46855c2
Add formtoken to upgrade button
2017-01-26 14:11:54 +01:00
Garvin Hicking
ba6d9ee127
prepare release
2.1-rc1
2017-01-26 11:50:15 +01:00
Garvin Hicking
2b5de12b38
Issue #437
2017-01-26 08:25:06 +01:00
Garvin Hicking
97277cfd1a
issue #430
2017-01-26 08:23:17 +01:00
Garvin Hicking
5bf0cf9fea
Merge branch 'master' of github.com:s9y/Serendipity
2017-01-26 08:16:22 +01:00
Garvin Hicking
69d8a34c90
document
2017-01-26 08:16:14 +01:00
onli
7e70f91686
Add form token to comment delete link
2017-01-17 11:42:37 +01:00
onli
f947c66f66
Add multiple missing CSRF tokens ( #439 )
...
Deleting comments, disabling comment threads, installing plugins, toggling a spartacus update check
2017-01-16 15:32:16 +01:00
Garvin Hicking
c62d667287
* [Security] Fix missing integer casting for inserting new categories
...
(thanks to cdxy)
2017-01-16 11:29:15 +01:00
Garvin Hicking
6285933470
* [Security] Redirection of comment.php now checks the referrer
...
and only allows the blog's host (thanks to Lee Sheldon Victor)
2017-01-12 12:02:27 +01:00
Garvin Hicking
a48708021c
* [Security] Reject %0D/%0A in exit tracking and other places
...
(Issue #434 )
2017-01-03 09:21:25 +01:00