Commit Graph
100 Commits
Author SHA1 Message Date
Garvin HickingandGitHub fa58d770be Merge pull request #578 from th-h/thh-forcemod-message
Change message for auto-moderation after X days.
2018-09-22 14:36:17 +02:00
Garvin Hicking 23b6701174 Next release 2018-09-20 13:11:55 +02:00
Garvin Hicking 7aec3f702d Prepare release 2018-09-20 09:44:10 +02:00
Garvin Hicking 2b33e231e4 prepare release 2018-08-16 14:08:21 +02:00
Garvin Hicking 005a86da1c Another cast for safety 2018-07-19 09:25:18 +02:00
Garvin Hicking 1afc4d929d Adjust fetchLimit to ensure integer content 2018-07-18 11:59:45 +02:00
Garvin Hicking 19513cdf14 Security fixes 2018-07-18 11:23:02 +02:00
Garvin Hicking 4a43761e72 Assume uninitialized charset constant (https://board.s9y.org/viewtopic.php?f=3&t=22365) 2018-03-12 12:39:06 +01:00
Garvin Hicking b2eecb9a3d backport constant check 2018-01-10 11:21:59 +01:00
Garvin HickingandGitHub cacf778480 Merge pull request #533 from erAck/master
Add xml inc svg as 'text' file extensions to serendipity_FTPChecksum()
2017-09-25 09:32:17 +02:00
Garvin Hicking 30b57a1e42 wrong function call 2017-07-11 12:33:01 +02:00
Garvin Hicking 8b1ae7cee8 Once more without parse errors 2017-07-10 13:54:00 +02:00
Garvin Hicking 59f8837ab2 Add upgrader task, Issue #521 2017-07-10 13:53:33 +02:00
Garvin Hicking 07d75a6d65 Fixes Issue #521 2017-07-10 13:49:27 +02:00
Garvin Hicking efeede599b Allow multiple authorship for entries 2017-06-01 12:25:50 +02:00
Garvin HickingandGitHub 6be1fb1d02 Merge pull request #494 from th-h/thh-deletebutton
Reformat delete button as icon button, in front of "preview".
2017-04-13 11:02:09 +02:00
Garvin HickingandGitHub e7e030d54d Merge pull request #491 from th-h/thh-deletebutton
Add a delete button to the backend entry form.
2017-04-13 10:42:16 +02:00
Garvin Hicking 13750e09e5 next major release 2017-04-09 09:41:05 +02:00
Garvin Hicking 701ebe442d Rever this for the release, re-introduce later 2017-04-09 09:35:14 +02:00
Garvin Hicking 8fee805ca1 Prepare release 2.1.1 2017-04-09 09:15:55 +02:00
Garvin Hicking 2bedc9243e next version 2017-04-08 18:47:50 +02:00
Garvin Hicking a794481941 bump release 2017-04-08 18:30:49 +02:00
Garvin Hicking a385c10890 bump version 2017-04-08 18:23:46 +02:00
Garvin Hicking 7832c364d7 IteratorIteratorIteratorIterator iterated iteration fix. To understand iteration, you first need to understand recursion and iteration and iteration and iteration and iteration. 2017-04-08 17:38:47 +02:00
Garvin Hicking b8897b3250 PHP7 check 2017-04-08 17:01:31 +02:00
Garvin Hicking 86a17f9a2b Register fatal error handler 2017-04-08 15:45:21 +02:00
Garvin HickingandGitHub 3e442e73ff Merge pull request #466 from ka7/feature/spelling
spelling fixes
2017-04-07 10:48:11 +02:00
Garvin Hicking 55ec5e4ab4 document, bump 2017-01-30 14:58:52 +01:00
Garvin Hicking c2cebad52b issue #442 2017-01-30 14:58:37 +01:00
Garvin Hicking ba6d9ee127 prepare release 2017-01-26 11:50:15 +01:00
Garvin Hicking 2b5de12b38 Issue #437 2017-01-26 08:25:06 +01:00
Garvin Hicking 97277cfd1a issue #430 2017-01-26 08:23:17 +01:00
Garvin Hicking 5bf0cf9fea Merge branch 'master' of github.com:s9y/Serendipity 2017-01-26 08:16:22 +01:00
Garvin Hicking 69d8a34c90 document 2017-01-26 08:16:14 +01:00
Garvin Hicking c62d667287 * [Security] Fix missing integer casting for inserting new categories
(thanks to cdxy)
2017-01-16 11:29:15 +01:00
Garvin Hicking 6285933470 * [Security] Redirection of comment.php now checks the referrer
and only allows the blog's host (thanks to Lee Sheldon Victor)
2017-01-12 12:02:27 +01:00
Garvin Hicking a48708021c * [Security] Reject %0D/%0A in exit tracking and other places
(Issue #434)
2017-01-03 09:21:25 +01:00
Garvin Hicking edfc8bcff1 disable selenium test files 2017-01-02 09:42:37 +01:00
Garvin Hicking 4e8c310156 Issue #435, fix missing escaping of HTTP referer to prevent XSS 2017-01-02 09:37:45 +01:00
Garvin Hicking 0c8416f5df Allow setting a default category.
Needs some testing, I am not sure how to solve the case now where "no category" shall be used. It will always fall back to the default category.
Probably if someone uses a default category, that's the intended behaviour?
2016-12-23 10:14:27 +01:00
Garvin Hicking 6b1348a7f1 improve hidding password from recent chrome 2016-12-23 10:13:40 +01:00
Garvin Hicking fd2f23f3e7 upport security bugfix to escape dbType parameter on first installation (issue #433) 2016-12-19 11:18:10 +01:00
Garvin Hicking cb03731e90 release 2016-11-28 15:51:51 +01:00
Garvin Hicking e2a665e13b Sync changes 2016-11-28 15:34:10 +01:00
Garvin Hicking dc3eb1e735 Merge branch 'master' of github.com:s9y/Serendipity 2016-11-02 12:18:58 +01:00
Garvin Hicking 26de428c18 Enhanced media upload check to also check redirects for local files, thanks to Xu Yue (again!) 2016-11-02 12:18:49 +01:00
Garvin Hicking d7980e5f94 bump 2016-09-26 10:38:01 +02:00
Garvin Hicking c5c953b2f5 add language constant 2016-09-26 10:34:49 +02:00
Garvin Hicking 929fe9ade7 bump version, prep release 2016-09-26 10:28:20 +02:00
Garvin Hicking 846dbbeb85 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-26 09:45:37 +02:00
Garvin Hicking 06e33c5421 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-25 15:30:10 +02:00
Garvin Hicking 4aaa9845eb Add header API 2016-09-22 15:38:12 +02:00
Garvin Hicking d60a7da9c3 support http auth 2016-09-22 15:34:27 +02:00
Garvin Hicking 20ade83792 allow arrays 2016-09-22 14:33:52 +02:00
Garvin Hicking 80f3b39502 forward compatibility to serendipity_request_url 2016-09-22 14:26:59 +02:00
Garvin Hicking 1bb335dc17 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-22 12:51:41 +02:00
Garvin Hicking cfd75ec877 Security patch, see docs/NEWS 2016-09-22 12:51:00 +02:00
Garvin Hicking c1e4f4c533 Add serendipity_request_url() 2016-09-22 12:35:48 +02:00
Garvin Hicking ce7af03e66 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-20 10:35:49 +02:00
Garvin Hicking 6d68ec389d experimental commit to use "content_message" for emitting a default "404 not found" message when redirecting to the blog to indicate 404 view
http://board.s9y.org/viewtopic.php?f=2&t=20861
2016-09-20 10:35:11 +02:00
Garvin Hicking fb7896b2bd prepare release 2016-06-08 09:15:07 +02:00
Garvin Hicking 72f555d9a6 port cors 2016-05-19 14:27:16 +02:00
Garvin Hicking 98099b6a02 Improve custom s9y error handling. Will post in issue #399 for details. 2016-05-09 14:34:34 +02:00
Garvin Hicking e35898342d proper EOL 2016-02-10 12:50:00 +01:00
Garvin Hicking 74b9251c40 Revert "addlang"
This reverts commit c3db29a036.
2016-02-10 12:48:59 +01:00
Garvin Hicking c3db29a036 addlang 2016-02-10 09:51:37 +01:00
Garvin Hicking 69d157062c Execute addlang 2016-01-18 09:40:09 +01:00
Garvin Hicking fe90ba6b5d execute addlang.sh 2016-01-12 12:05:19 +01:00
Garvin Hicking c635de6e85 rework some constants to be added. @ophian ok like this? 2016-01-12 11:16:53 +01:00
Garvin Hicking d4be55a236 update 2016-01-04 11:14:58 +01:00
Garvin Hicking c16e034f7c XSS fix 2016-01-04 10:53:52 +01:00
Garvin Hicking de82c49fb3 proposal of different wording, see github node to commit @2b610dc 2015-10-06 10:09:08 +02:00
Garvin Hicking e6ae8f0920 fix date 2015-07-24 14:02:03 +02:00
Garvin Hicking 6cd46eed6b Merge branch 'master' of github.com:s9y/Serendipity
Conflicts:
	docs/NEWS
2015-07-24 13:28:13 +02:00
Garvin Hicking 00be5d7b4c Security fixes from Tim Coen (file upload, comment token escaping, 2k11 js comment name escaping) 2015-07-24 13:27:21 +02:00
Garvin Hicking 2e63945f60 Merge pull request #352 from smoeding/stm/fix-db-query_quoting
Fix column quotes for INSERT statement
2015-07-05 09:57:25 +02:00
Garvin Hicking 64f32ef864 Fixes Issue #350
Make sure to put user.css after plugin output so that it can override it.
2015-06-26 12:59:52 +02:00
Garvin Hicking fbc8e55d09 new lang constant 2015-06-16 12:54:34 +02:00
Garvin Hicking 5056cd6409 added ifModule checks 2015-05-22 09:40:00 +02:00
Garvin Hicking 1712d9bb5b use ssl when called, thanks to hboeck! 2015-04-17 15:36:54 +02:00
Garvin Hicking 6fdde3a251 remove file in array 2015-04-01 12:22:57 +02:00
Garvin Hicking 2616671c6e remove uneccesary file 2015-04-01 12:09:42 +02:00
Garvin Hicking 8112c39485 fix templatechooser to not apply theme in backend
Conflicts:
	docs/NEWS
	index.php
2015-04-01 12:02:54 +02:00
Garvin Hicking b55d8a26f2 Document 2015-03-27 10:33:11 +01:00
Garvin Hicking 5985577fbe Use "secure" flag on SSL connections, thanks to dayton967 2015-03-22 00:41:37 +01:00
Garvin Hicking e7d822be11 Things I noticed for s9y.github.io 2015-03-19 16:17:30 +01:00
Garvin Hicking 5f14b67e66 Things I noted during configuration 2015-03-19 16:08:39 +01:00
Garvin Hicking 93e781048c * Make preview_iframe.tpl template files load the proper frontend
CSS file, including cache-busting version string when changing
     themes

References #302
2015-03-18 13:32:14 +01:00
Garvin Hicking 2970ac60a6 patch by @fugue88 for shared installs
references #328
2015-03-16 17:44:57 +01:00
Garvin Hicking 0fd299adf2 Merge branch 'master' of github.com:s9y/Serendipity 2015-03-16 17:42:44 +01:00
Garvin Hicking 5398e2f72a Let spartacus hook into cronjob plugin to mail plugin update notifications 2015-03-16 17:42:22 +01:00
Garvin Hicking 9278c9e40c * Allow templatechooser plugin to read a custom "blacklist.txt"
within its directory, that can blacklist certain themes from
     being selected.
2015-03-16 14:13:55 +01:00
Garvin Hicking 98cd0e0541 fix 2015-03-16 14:07:24 +01:00
Garvin Hicking 5f59a811e8 Allow to set custom cookie validity.
Will be needed for blog.s9y.org templatechooser, which is why I need it in 2.0.1
2015-03-16 13:58:52 +01:00
Garvin Hicking 6b81f519e7 Also add a var for comments limit 2015-03-16 11:14:27 +01:00
Garvin Hicking 872d978d63 Added config vars to influence dashboard limit
http://board.s9y.org/posting.php?mode=quote&f=10&p=10442506
2015-03-16 10:47:56 +01:00
Garvin Hicking 863db549f7 Add a space when styling is missing to not clutter output 2015-03-16 10:46:53 +01:00
Garvin Hicking c249403c16 * Adapt .htaccess profile of "mod_rewrite for 1&1 and problematic
servers" to not include the "Options -MultiViews" option, since
     this is often blocked
2015-03-16 10:16:35 +01:00
Garvin Hicking 88a4776891 Fix not initializing smarty framework in the preview iframe, which lead to templates
config.inc.php files not being loaded (to hook into a config.inc.php)
2015-03-13 15:37:10 +01:00
Garvin Hicking 8f88998c90 only show relative dir 2015-03-13 15:03:00 +01:00