Cool_Tools/vichan
1
0
Fork 0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-12-04 20:08:02 +01:00
Code Releases Wiki Activity
7,079 Commits 50 Branches 28 Tags 70 MiB
108f3ff99a
Commit Graph

599 Commits

Author SHA1 Message Date
8chan
351375185e Early 404 option in clean() 2014-12-31 22:33:31 -08:00
8chan
87e914948b SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard> 
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
 2014-12-24 06:08:19 -08:00
8chan
f8c1d7c80f what the fuck were you even thinking 
this is an insane default

BUGFIX: all-Japanese, all-Arabic, etc posts no longer trip the filter if not robot_enable
 2014-12-15 17:50:22 -08:00
8chan
b9b1935e08 Bug fix: Boards were always unindexed in search engines 2014-12-14 03:28:04 -08:00
8chan
9db6895c98 Allow + in board names, add some new config vars (news+) 2014-12-14 03:25:43 -08:00
8chan
3df5b86235 Return some important info from listBoards() 2014-12-03 00:19:50 -08:00
8chan
8d34866636 Fix locale bugs, init_locale was not calling setlocale!? 2014-12-03 00:17:24 -08:00
8chan
dd1c160d35 Hash masked IPs option, use less_ip in inc/bans 2014-12-03 00:15:24 -08:00
8chan
fa9a3da913 New boards.html page now with tags 2014-12-03 00:10:28 -08:00
8chan
6d54ae5262 read.php +50 fix 2014-11-22 00:44:57 -08:00
8chan
7d11c7a884 Fix mod mode for read.php 2014-11-21 16:17:00 -08:00
8chan
faa51accaa We dynamic pages now, read.php 2014-11-21 04:05:20 -08:00
8chan
4f2398f7b8 Make deletePost more tolerant of errors 
Sometimes thumbnail generation fails but the post is still there, sometimes post deletion is aborted halfway through

Ignore errors from file_unlink and don't fail if $f->file, $f->thumb not set
 2014-11-12 21:06:58 -08:00
8chan
cfb31c53af Merge https://github.com/ctrlcctrlv/8chan 2014-10-22 19:20:28 -07:00
8chan
0f8aef4f50 I'm going to run this on a cron job instead...people were using this to DoS 2014-10-22 19:19:49 -07:00
8chan
840c42adc4 array_unique to prevent JS Errors 2014-10-22 19:16:45 -07:00
unknown
4c8e920303 [#184] Resolved duplicate report issue. Added rudamentary Clean functionality. 2014-10-20 10:17:19 -05:00
unknown
3c2ebb2d6b Merge branch 'master' of git://github.com/ctrlcctrlv/8chan 
Conflicts:
	templates/8chan/index.html
 2014-10-19 11:15:57 -05:00
8chan
fceea15317 Be smarter about rebuilds 2014-10-18 13:21:08 -07:00
unknown
9920a51ff5 - Resolved board creation script throwing SQL error for mismatched column count. 
- Resolved warnings would be thrown if inc/dnsbls.php did not exist.
- Resolved problem where shell_exec_error was incorrectly reporting a success in instances where 'md5sum' was not supported, resulting in "'md5sum'" literally being recorded as the file hash. This then lead to hex2bin throwing an error on page load, preventing access to threads (among other problems).
 2014-10-17 02:32:39 -05:00
8chan
9bf6ebec43 SECURITY: IPs were still being shown on IP_less in a few places 2014-10-12 16:34:34 -07:00
8chan
fe9297aaaa Attempt to hide IPs from board volunteers 2014-10-09 21:39:37 -04:00
czaks
3e88cc23fb Merge vichan 2014-10-09 04:09:44 +02:00
czaks
3a552e5b76 hopefully fix locales 2014-10-09 04:09:30 +02:00
czaks
d3a52f6aed Merge vichan 2014-10-09 03:57:38 +02:00
czaks
dfd05e88f9 possible fix of themes` interactions 2014-10-09 03:57:18 +02:00
8chan
d58adad48d SECURITY: Move indexed option to table...fixes unindexed boards appearing in search/random 2014-10-07 20:54:00 -07:00
8chan
ba88035109 Edited at feature...add edited_at DATETIME NULL to all tables to use it. 2014-10-07 17:35:50 -07:00
Fredrick Brennan
52a662a395 Merge pull request #160 from wopot/patch-2 
lineup 4 if´s with || (OR)
 2014-10-07 11:24:56 -04:00
8chan
3da946268a SECURITY: Poster IDs could reveal IPs across boards 
Imagine the following scenario:

Alice has permission to view IPs on board A, and Bob has permissions to view IPs on board B.

If the post number was to match, and the same IP made both posts, A and B could trade user IPs which they wouldn't normally have permission to do so. This weird bug has already creeped up on 8chan.co and is now patched.
 2014-10-07 08:16:21 -07:00
wopot
9c47ebed03 lineup 4 if´s with || (OR) 2014-10-07 16:33:27 +02:00
czaks
cc44a64097 Merge https://github.com/vichan-devel/vichan 2014-10-07 00:17:29 +02:00
wopot
c7351dff09 4 times "elseif" is not the way 
and precalc. value sometimes help if well commentent
 2014-10-07 00:16:02 +02:00
Bui
aba8d27ace wasn't aware of DNS function 2014-10-05 23:20:06 +02:00
Bui
1e95e58811 don't break if dns_system is true 2014-10-05 23:20:06 +02:00
Bui
8b9932218f add forward-confirmed reverse DNS 2014-10-05 23:20:06 +02:00
Bui
3f4381cf40 wasn't aware of DNS function 2014-10-06 04:30:32 +09:00
Bui
ca7955ecfc don't break if dns_system is true 2014-10-06 04:08:10 +09:00
Bui
98b172980f add forward-confirmed reverse DNS 2014-10-06 03:37:13 +09:00
czaks
8b698e36e7 Merge https://github.com/vichan-devel/vichan 
Conflicts:
	inc/mod/pages.php
	js/auto-reload.js
	js/id_colors.js
	js/id_highlighter.js
	stylesheets/style.css
	templates/index.html
 2014-10-05 18:12:19 +02:00
kaf
9cee5f6c61 [bugfix]ban appeals (was also present in tinyboard) 2014-10-05 12:53:02 +00:00
8chan
993df563db undo no cache test 2014-09-27 20:05:33 +00:00
8chan
9dc91c1bf4 fuck you php 2014-09-26 03:44:34 +00:00
8chan
19e864c15c I don't know what I did. 2014-09-25 22:53:56 +00:00
Jayden Callahan
fbdb72994a Config: add a thing for clustered installations 2014-09-26 06:46:06 +09:30
Fredrick Brennan
e972548ae2 More dice limits 2014-09-20 15:20:22 +00:00
8chan
adb1294016 Merge https://github.com/vichan-devel/vichan 2014-09-13 16:38:06 +00:00
Juan Tamad
53ada6a5ff added option for showing the mod in ban page. 
also fixes issue where the Staff is not shown in ban appeals.
 2014-09-01 06:30:33 +08:00
8chan
3c8367240a Arbitrary maximum dice 2014-08-30 20:07:08 +00:00
8chan
e28f233e3d Close #51: Prevent players from cheating the dice roller by using markup 2014-08-10 15:38:02 +00:00