php/LuckyCoinkydink
Archived
1
0
Fork 0
Code Issues Pull Requests Activity
5,071 Commits 2 Branches 42 Tags
6b775e1cac042a9ace0733176918abcfc57e1129
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Garvin Hicking 13750e09e5 next major release 2017-04-09 09:41:05 +02:00
Garvin Hicking 701ebe442d Rever this for the release, re-introduce later 2017-04-09 09:35:14 +02:00
Garvin Hicking 8fee805ca1 Prepare release 2.1.1 2017-04-09 09:15:55 +02:00
Garvin Hicking 2bedc9243e next version 2017-04-08 18:47:50 +02:00
Garvin Hicking a794481941 bump release 2017-04-08 18:30:49 +02:00
Garvin Hicking a385c10890 bump version 2017-04-08 18:23:46 +02:00
Garvin Hicking 7832c364d7 IteratorIteratorIteratorIterator iterated iteration fix. To understand iteration, you first need to understand recursion and iteration and iteration and iteration and iteration. 2017-04-08 17:38:47 +02:00
Garvin Hicking b8897b3250 PHP7 check 2017-04-08 17:01:31 +02:00
Garvin Hicking 86a17f9a2b Register fatal error handler 2017-04-08 15:45:21 +02:00
Garvin HickingandGitHub 3e442e73ff Merge pull request #466 from ka7/feature/spelling 
spelling fixes
 2017-04-07 10:48:11 +02:00
Garvin Hicking 55ec5e4ab4 document, bump 2017-01-30 14:58:52 +01:00
Garvin Hicking c2cebad52b issue #442 2017-01-30 14:58:37 +01:00
Garvin Hicking ba6d9ee127 prepare release 2017-01-26 11:50:15 +01:00
Garvin Hicking 2b5de12b38 Issue #437 2017-01-26 08:25:06 +01:00
Garvin Hicking 97277cfd1a issue #430 2017-01-26 08:23:17 +01:00
Garvin Hicking 5bf0cf9fea Merge branch 'master' of github.com:s9y/Serendipity 2017-01-26 08:16:22 +01:00
Garvin Hicking 69d8a34c90 document 2017-01-26 08:16:14 +01:00
Garvin Hicking c62d667287 * [Security] Fix missing integer casting for inserting new categories 
(thanks to cdxy)
 2017-01-16 11:29:15 +01:00
Garvin Hicking 6285933470 * [Security] Redirection of comment.php now checks the referrer 
and only allows the blog's host (thanks to Lee Sheldon Victor)
 2017-01-12 12:02:27 +01:00
Garvin Hicking a48708021c * [Security] Reject %0D/%0A in exit tracking and other places 
(Issue #434)
 2017-01-03 09:21:25 +01:00
Garvin Hicking edfc8bcff1 disable selenium test files 2017-01-02 09:42:37 +01:00
Garvin Hicking 4e8c310156 Issue #435, fix missing escaping of HTTP referer to prevent XSS 2017-01-02 09:37:45 +01:00
Garvin Hicking 0c8416f5df Allow setting a default category. 
Needs some testing, I am not sure how to solve the case now where "no category" shall be used. It will always fall back to the default category.
Probably if someone uses a default category, that's the intended behaviour?
 2016-12-23 10:14:27 +01:00
Garvin Hicking 6b1348a7f1 improve hidding password from recent chrome 2016-12-23 10:13:40 +01:00
Garvin Hicking fd2f23f3e7 upport security bugfix to escape dbType parameter on first installation (issue #433) 2016-12-19 11:18:10 +01:00
Garvin Hicking cb03731e90 release 2016-11-28 15:51:51 +01:00
Garvin Hicking e2a665e13b Sync changes 2016-11-28 15:34:10 +01:00
Garvin Hicking dc3eb1e735 Merge branch 'master' of github.com:s9y/Serendipity 2016-11-02 12:18:58 +01:00
Garvin Hicking 26de428c18 Enhanced media upload check to also check redirects for local files, thanks to Xu Yue (again!) 2016-11-02 12:18:49 +01:00
Garvin Hicking d7980e5f94 bump 2016-09-26 10:38:01 +02:00
Garvin Hicking c5c953b2f5 add language constant 2016-09-26 10:34:49 +02:00
Garvin Hicking 929fe9ade7 bump version, prep release 2016-09-26 10:28:20 +02:00
Garvin Hicking 846dbbeb85 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-26 09:45:37 +02:00
Garvin Hicking 06e33c5421 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-25 15:30:10 +02:00
Garvin Hicking 4aaa9845eb Add header API 2016-09-22 15:38:12 +02:00
Garvin Hicking d60a7da9c3 support http auth 2016-09-22 15:34:27 +02:00
Garvin Hicking 20ade83792 allow arrays 2016-09-22 14:33:52 +02:00
Garvin Hicking 80f3b39502 forward compatibility to serendipity_request_url 2016-09-22 14:26:59 +02:00
Garvin Hicking 1bb335dc17 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-22 12:51:41 +02:00
Garvin Hicking cfd75ec877 Security patch, see docs/NEWS 2016-09-22 12:51:00 +02:00
Garvin Hicking c1e4f4c533 Add serendipity_request_url() 2016-09-22 12:35:48 +02:00
Garvin Hicking ce7af03e66 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-20 10:35:49 +02:00
Garvin Hicking 6d68ec389d experimental commit to use "content_message" for emitting a default "404 not found" message when redirecting to the blog to indicate 404 view 
http://board.s9y.org/viewtopic.php?f=2&t=20861
 2016-09-20 10:35:11 +02:00
Garvin Hicking fb7896b2bd prepare release 2016-06-08 09:15:07 +02:00
Garvin Hicking 72f555d9a6 port cors 2016-05-19 14:27:16 +02:00
Garvin Hicking 98099b6a02 Improve custom s9y error handling. Will post in issue #399 for details. 2016-05-09 14:34:34 +02:00
Garvin Hicking e35898342d proper EOL 2016-02-10 12:50:00 +01:00
Garvin Hicking 74b9251c40 Revert "addlang" 
This reverts commit c3db29a036.
 2016-02-10 12:48:59 +01:00
Garvin Hicking c3db29a036 addlang 2016-02-10 09:51:37 +01:00
Garvin Hicking 69d157062c Execute addlang 2016-01-18 09:40:09 +01:00
Garvin Hicking fe90ba6b5d execute addlang.sh 2016-01-12 12:05:19 +01:00
Garvin Hicking c635de6e85 rework some constants to be added. @ophian ok like this? 2016-01-12 11:16:53 +01:00
Garvin Hicking d4be55a236 update 2016-01-04 11:14:58 +01:00
Garvin Hicking c16e034f7c XSS fix 2016-01-04 10:53:52 +01:00
Garvin Hicking de82c49fb3 proposal of different wording, see github node to commit @2b610dc 2015-10-06 10:09:08 +02:00
Garvin Hicking e6ae8f0920 fix date 2015-07-24 14:02:03 +02:00
Garvin Hicking 6cd46eed6b Merge branch 'master' of github.com:s9y/Serendipity 
Conflicts:
	docs/NEWS
 2015-07-24 13:28:13 +02:00
Garvin Hicking 00be5d7b4c Security fixes from Tim Coen (file upload, comment token escaping, 2k11 js comment name escaping) 2015-07-24 13:27:21 +02:00
Garvin Hicking 2e63945f60 Merge pull request #352 from smoeding/stm/fix-db-query_quoting 
Fix column quotes for INSERT statement
 2015-07-05 09:57:25 +02:00
Garvin Hicking 64f32ef864 Fixes Issue #350 
Make sure to put user.css after plugin output so that it can override it.
 2015-06-26 12:59:52 +02:00
Garvin Hicking fbc8e55d09 new lang constant 2015-06-16 12:54:34 +02:00
Garvin Hicking 5056cd6409 added ifModule checks 2015-05-22 09:40:00 +02:00
Garvin Hicking 1712d9bb5b use ssl when called, thanks to hboeck! 2015-04-17 15:36:54 +02:00
Garvin Hicking 6fdde3a251 remove file in array 2015-04-01 12:22:57 +02:00
Garvin Hicking 2616671c6e remove uneccesary file 2015-04-01 12:09:42 +02:00
Garvin Hicking 8112c39485 fix templatechooser to not apply theme in backend 
Conflicts:
	docs/NEWS
	index.php
 2015-04-01 12:02:54 +02:00
Garvin Hicking b55d8a26f2 Document 2015-03-27 10:33:11 +01:00
Garvin Hicking 5985577fbe Use "secure" flag on SSL connections, thanks to dayton967 2015-03-22 00:41:37 +01:00
Garvin Hicking e7d822be11 Things I noticed for s9y.github.io 2015-03-19 16:17:30 +01:00
Garvin Hicking 5f14b67e66 Things I noted during configuration 2015-03-19 16:08:39 +01:00
Garvin Hicking 93e781048c * Make preview_iframe.tpl template files load the proper frontend 
CSS file, including cache-busting version string when changing
     themes

References #302
 2015-03-18 13:32:14 +01:00
Garvin Hicking 2970ac60a6 patch by @fugue88 for shared installs 
references #328
 2015-03-16 17:44:57 +01:00
Garvin Hicking 0fd299adf2 Merge branch 'master' of github.com:s9y/Serendipity 2015-03-16 17:42:44 +01:00
Garvin Hicking 5398e2f72a Let spartacus hook into cronjob plugin to mail plugin update notifications 2015-03-16 17:42:22 +01:00
Garvin Hicking 9278c9e40c * Allow templatechooser plugin to read a custom "blacklist.txt" 
within its directory, that can blacklist certain themes from
     being selected.
 2015-03-16 14:13:55 +01:00
Garvin Hicking 98cd0e0541 fix 2015-03-16 14:07:24 +01:00
Garvin Hicking 5f59a811e8 Allow to set custom cookie validity. 
Will be needed for blog.s9y.org templatechooser, which is why I need it in 2.0.1
 2015-03-16 13:58:52 +01:00
Garvin Hicking 6b81f519e7 Also add a var for comments limit 2015-03-16 11:14:27 +01:00
Garvin Hicking 872d978d63 Added config vars to influence dashboard limit 
http://board.s9y.org/posting.php?mode=quote&f=10&p=10442506
 2015-03-16 10:47:56 +01:00
Garvin Hicking 863db549f7 Add a space when styling is missing to not clutter output 2015-03-16 10:46:53 +01:00
Garvin Hicking c249403c16 * Adapt .htaccess profile of "mod_rewrite for 1&1 and problematic 
servers" to not include the "Options -MultiViews" option, since
     this is often blocked
 2015-03-16 10:16:35 +01:00
Garvin Hicking 88a4776891 Fix not initializing smarty framework in the preview iframe, which lead to templates 
config.inc.php files not being loaded (to hook into a config.inc.php)
 2015-03-13 15:37:10 +01:00
Garvin Hicking 8f88998c90 only show relative dir 2015-03-13 15:03:00 +01:00
Garvin Hicking 1062145b49 next ver 2015-03-12 20:35:12 +01:00
Garvin Hicking 0eab8c6efa release 2015-03-12 20:28:55 +01:00
Garvin Hicking 820ccc4709 document 2015-03-12 20:17:14 +01:00
Garvin Hicking 7c51555438 Modify if-statement 
References #324
 2015-03-12 20:13:01 +01:00
Garvin Hicking 94eb2b32de We also need to escape the JS at this point 2015-03-12 12:23:52 +01:00
Garvin Hicking f5669177de Unify gravatar 2015-03-12 10:46:57 +01:00
Garvin Hicking b76e117366 Unify gravatar 2015-03-12 10:46:34 +01:00
Garvin Hicking bdd6c4fb17 Fix missing escaping (possible XSS) of category names in the Backend 
Entry Admin, which would allow editors that create a forged
category name to attack other editors in the backend (privileged
access to the backend required).
Thanks a lot to Edric Teo for reporting this issue.
 2015-03-12 10:16:59 +01:00
Garvin Hicking 5ee05f1143 We don't really need those files anymore. 2015-03-09 10:16:45 +01:00
Garvin Hicking 811af79b16 should be truncated 2015-03-02 12:31:46 +01:00
Garvin Hicking 12ddca1070 Upport. 
Improved detection for possible javascript errors (i.e. PHP errors, plugins that use invalid PHP 5.4+ syntax, other causes - that people seem to hit a lot)
If the serendipity.spawn function could not be found, we emit a warning (through javascript...)

See thread on forums: http://board.s9y.org/viewtopic.php?f=11&t=20286

Conflicts:
	docs/NEWS
	lang/UTF-8/plugin_lang.php
	lang/UTF-8/serendipity_lang_bg.inc.php
	lang/UTF-8/serendipity_lang_cn.inc.php
	lang/UTF-8/serendipity_lang_cs.inc.php
	lang/UTF-8/serendipity_lang_cz.inc.php
	lang/UTF-8/serendipity_lang_da.inc.php
	lang/UTF-8/serendipity_lang_de.inc.php
	lang/UTF-8/serendipity_lang_en.inc.php
	lang/UTF-8/serendipity_lang_es.inc.php
	lang/UTF-8/serendipity_lang_fa.inc.php
	lang/UTF-8/serendipity_lang_fi.inc.php
	lang/UTF-8/serendipity_lang_fr.inc.php
	lang/UTF-8/serendipity_lang_hu.inc.php
	lang/UTF-8/serendipity_lang_is.inc.php
	lang/UTF-8/serendipity_lang_it.inc.php
	lang/UTF-8/serendipity_lang_ja.inc.php
	lang/UTF-8/serendipity_lang_ko.inc.php
	lang/UTF-8/serendipity_lang_nl.inc.php
	lang/UTF-8/serendipity_lang_no.inc.php
	lang/UTF-8/serendipity_lang_pl.inc.php
	lang/UTF-8/serendipity_lang_pt.inc.php
	lang/UTF-8/serendipity_lang_pt_PT.inc.php
	lang/UTF-8/serendipity_lang_ro.inc.php
	lang/UTF-8/serendipity_lang_ru.inc.php
	lang/UTF-8/serendipity_lang_sa.inc.php
	lang/UTF-8/serendipity_lang_se.inc.php
	lang/UTF-8/serendipity_lang_sk.inc.php
	lang/UTF-8/serendipity_lang_ta.inc.php
	lang/UTF-8/serendipity_lang_tn.inc.php
	lang/UTF-8/serendipity_lang_tr.inc.php
	lang/UTF-8/serendipity_lang_tw.inc.php
	lang/UTF-8/serendipity_lang_zh.inc.php
	lang/addlang.txt
	lang/plugin_lang.php
	lang/serendipity_lang_bg.inc.php
	lang/serendipity_lang_cn.inc.php
	lang/serendipity_lang_cs.inc.php
	lang/serendipity_lang_cz.inc.php
	lang/serendipity_lang_da.inc.php
	lang/serendipity_lang_de.inc.php
	lang/serendipity_lang_en.inc.php
	lang/serendipity_lang_es.inc.php
	lang/serendipity_lang_fa.inc.php
	lang/serendipity_lang_fi.inc.php
	lang/serendipity_lang_fr.inc.php
	lang/serendipity_lang_hu.inc.php
	lang/serendipity_lang_is.inc.php
	lang/serendipity_lang_it.inc.php
	lang/serendipity_lang_ja.inc.php
	lang/serendipity_lang_ko.inc.php
	lang/serendipity_lang_nl.inc.php
	lang/serendipity_lang_no.inc.php
	lang/serendipity_lang_pl.inc.php
	lang/serendipity_lang_pt.inc.php
	lang/serendipity_lang_pt_PT.inc.php
	lang/serendipity_lang_ro.inc.php
	lang/serendipity_lang_ru.inc.php
	lang/serendipity_lang_sa.inc.php
	lang/serendipity_lang_se.inc.php
	lang/serendipity_lang_sk.inc.php
	lang/serendipity_lang_ta.inc.php
	lang/serendipity_lang_tn.inc.php
	lang/serendipity_lang_tr.inc.php
	lang/serendipity_lang_tw.inc.php
	lang/serendipity_lang_zh.inc.php
 2015-03-02 11:16:55 +01:00
Garvin Hicking c079c2e8b7 use "user.css" instead 2015-02-11 15:13:48 +01:00
Garvin Hicking 0f175d9478 References Issue #280 
* Issue 280: Allow every theme to utilize a "style_user.css" file
     that gets loaded on top of the frontend (or backend, if in admin/
     subdirectory) theme. This file can be used for customized CSS
     of a blog-admin which carries over to future Serendipity updates
 2015-02-11 14:59:21 +01:00
Garvin Hicking 3605937049 Fix Issue #299 2015-02-11 14:28:14 +01:00
Garvin Hicking 8323d9272d Expose serendipity_rewriteURL to smarty API 2015-02-11 10:34:58 +01:00
Garvin Hicking a3a0ff7980 Execute addlang for branch 2015-02-03 15:50:26 +01:00
Garvin Hicking 71e41b3a5a Issue #238 prevent umlauts and special characters for creating/editing media dirs 2015-01-29 15:40:45 +01:00