Cool_Tools/vichan
1
0
Fork 0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-12-04 20:08:02 +01:00
Code Releases Wiki Activity
7,467 Commits 50 Branches 28 Tags 70 MiB
12fa8ec3ef
Commit Graph

3375 Commits

Author SHA1 Message Date
8chan
3312e38f07 Change from fopen/flock to dio_open/dio_fcntl in file_write 
8chan uses NFS and flock() does not work over NFS. See http://0pointer.de/blog/projects/locking.html for more information.

Without proper file locking, race conditions are possible in ?/settings and other pages. The one in ?/settings is particularly bad, too many successive writes can cause a PHP file with bad syntax to be written which breaks an entire board and many scripts that call openBoard().

You need to install the dio.so module if you merge this commit.
 2015-02-25 17:12:25 -08:00
Anonish
14f664b558 Merge pull request #4 from ctrlcctrlv/master 
update to infinity
 2015-02-22 13:28:31 -06:00
8chan
ae02998948 Upgrade HTMLPurifier library 4.5->4.6 2015-02-20 23:16:38 -08:00
8chan
e2baf27c5c SECURITY: No more off-site images in board announcements 2015-02-20 23:13:52 -08:00
anonish
6dd547e1bf revert changes to template.php 2015-02-21 00:47:07 -06:00
Anonish
79e972945f Merge pull request #3 from ctrlcctrlv/master 
update to infinity
 2015-02-21 00:39:20 -06:00
8chan
aa1d2b3128 /infinity/ board with locked owner password 2015-02-20 17:16:06 -08:00
8chan
488f8e2648 Redchanit CSS 2015-02-20 17:15:40 -08:00
8chan
8c63d906e9 Sorry @Kyokou, this should fix both problems, close ctrlcctrlv/infinity#399 2015-02-20 10:16:28 +00:00
8chan
3e0134e53e New feature: Board owner logs of their board 2015-02-19 22:58:30 -08:00
8chan
61fd6ef25c Use post filter JS instead of hide-threads 2015-02-19 20:52:53 -08:00
8chan
ef21c6d864 Close ctrlcctrlv/infinity#396 2015-02-19 20:52:26 -08:00
8chan
9beffe618c /meta/ back in top bar next to /operate/ 2015-02-19 19:14:55 -08:00
8chan
4e335db3e8 Add event to quote backlinks 2015-02-18 16:55:03 -08:00
8chan
8ddc472239 Fix shadow cap 2015-02-16 16:56:09 -08:00
8chan
027687acc0 Merge https://github.com/ctrlcctrlv/infinity 
Conflicts:
	inc/8chan-mod-pages.php
	templates/mod/settings.html
 2015-02-17 00:43:00 +00:00
8chan
0389b280d8 Fix mod_move if file deleted or spoiler 2015-02-16 16:35:15 -08:00
8chan
f00d342c41 Extend max webm length 2015-02-16 16:35:01 -08:00
8chan
61e50ff3cf Show what line an error occured on by default 2015-02-16 16:34:45 -08:00
8chan
c7f26b31c1 board_log function, ?/log🅱️test 2015-02-16 16:28:22 -08:00
8chan
fb800497f1 /meta/ -> /operate 2015-02-16 16:26:20 -08:00
8chan
15987f919f Fix *0 secure tripcodes caused by accidentally feeding + signs to crypt() 2015-02-16 16:24:54 -08:00
8chan
ee635db05f new checkDNSBL() function, return true/false, not error 2015-02-16 16:24:11 -08:00
8chan
ecdc53522f New event: rebuildpost, allows you to bind events to ?/edit 2015-02-16 16:21:30 -08:00
8chan
11b1d2fcb9 Add email selectbox to forced anonymous 2015-02-16 16:20:14 -08:00
8chan
2cb1bbe3da Fix webm bug: Wrong max length shown in error message 2015-02-16 16:19:55 -08:00
8chan
df7c7c8454 Make ban list faster for board owners/vols 2015-02-16 16:19:02 -08:00
8chan
ed73fd525e Poster IDs in API 2015-02-16 16:17:18 -08:00
8chan
06ecd784cf SECURITY: Fix more cross-linking problems in ?/settings CSS 2015-02-16 16:15:15 -08:00
8chan
0eb3073819 Tor posting ?/settings option 2015-02-16 16:14:40 -08:00
8chan
b6abb4ab4f Allow global volunteers to move threads 2015-02-16 16:14:05 -08:00
8chan
c3ff6daa53 Billion laughs detection in wordfilters 2015-02-16 16:11:21 -08:00
anonish
b7a6f6419f Merge branch 'master' of https://github.com/anonish/infinity-anonish 2015-02-08 21:37:18 -06:00
anonish
78cc03c204 Updating expand-video.js 2015-02-08 21:36:33 -06:00
Fredrick Brennan
4434f2cd93 Merge pull request #375 from blahblah666/master 
Option to enable captcha for thread creation only + README.md with better install instructions
 2015-02-02 12:33:03 +08:00
8chan
546e49f560 Add the subject field to forced anonymous by default 2015-01-30 21:12:20 -08:00
8chan
f4e0b415ac [aa] tags - ASCII art 2015-01-30 21:12:03 -08:00
8chan
1338ca3091 SECURITY / XSS: Stop arbitrary HTML injection introduced by @forklessanon 2015-01-29 19:01:59 -08:00
8chan
da3927ed17 Put a limit on ?/recent 2015-01-29 19:01:11 -08:00
blahblah666
885dffdd01 Fixed idiotic typo. tread > thread 2015-01-29 05:46:41 -08:00
blahblah666
cea12ee665 Update 8chan-mod-pages.php 2015-01-29 04:19:38 -08:00
blahblah666
52b72c0ee2 Update 8chan-mod-pages.php 2015-01-28 23:37:33 -08:00
blahblah666
86cd7b81f9 Update 8chan-mod-pages.php 2015-01-28 23:25:55 -08:00
blahblah666
89e2677a1e Update config.php 2015-01-28 23:23:50 -08:00
8chan
4cca83da8f b/w issues, disable auto-gif for now 2015-01-28 17:57:31 -08:00
8chan
804247654d No IP showing in purge() 2015-01-28 17:57:16 -08:00
8chan
5efd0e9b18 This is using jQuery now 2015-01-23 02:19:01 -08:00
Fredrick Brennan
f5b7e8adfe Merge pull request #315 from forklessanon/feature-3 
Added mod function to spoiler all images in a given post
 2015-01-22 16:11:25 +08:00
Fredrick Brennan
fd7620bddf Merge pull request #331 from marktaiwan/better-webm-thumbnail 
Better webm thumbnail
 2015-01-22 16:09:10 +08:00
8chan
138f9aeb40 Merge 2015-01-22 08:04:12 +00:00
8chan
c473b5409c Fix no cache bug in display.php 2015-01-21 23:53:43 -08:00
8chan
f9119b16b9 Ban appeals for admin/globals fix 2015-01-21 23:52:50 -08:00
8chan
6cca52e92d ReCAPTCHA lib fix 2015-01-21 23:52:25 -08:00
8chan
f66c78e20b sql_open mask_db_error 2015-01-21 23:51:48 -08:00
8chan
290eed43d0 Some 8chan.co>8ch.net (rest in #348) 2015-01-21 23:49:15 -08:00
Markerov
7011fdf9c2 round starting time down to nearest second 2015-01-07 03:18:24 +08:00
8chan
980d8784e5 Tinyboard is defunct. No reason to keep the update checker 2015-01-06 01:34:54 -08:00
8chan
0a2dfedb0e Ban appeals: limit by board, make more efficient, enable in infinity 2015-01-06 01:34:27 -08:00
8chan
437ff83696 max wf bugfix 2015-01-06 01:32:45 -08:00
8chan
1a154223ea Merge https://github.com/ctrlcctrlv/infinity 2015-01-05 04:40:24 -08:00
8chan
b7e6bca82e Allow ADMIN level to use Global Volunteer capcode 2015-01-05 04:38:16 -08:00
Fredrick Brennan
755fc1e592 Merge pull request #334 from Pashe/css-urls 
Board stylesheet URL filter fixes and whitelist additions
 2015-01-05 12:43:33 +08:00
Pashe
916cb4c997 inc/functions.php: Tabs in code tags (fixes #328) 2015-01-03 23:48:57 -06:00
Pashe
e95a147e3e 8chan-mod-pages.php: Filter CSS imports from sites with potentially unsafe content (pomf.se) 2015-01-03 16:35:03 -06:00
Pashe
fe8b02442a 8chan-mod-pages.php: Make the CSS URL filter error message less vague 2015-01-03 16:16:55 -06:00
Pashe
dbc4fbc5fe 8chan-mod-pages.php: Fix CSS URL filter ignoring all but the last URL on a line 2015-01-02 23:27:12 -06:00
Pashe
aa71065dac 8chan-mod-pages.php: Add 8chan.co and fonts.gstatic.com to the CSS whitelist 2015-01-02 21:09:22 -06:00
Fredrick Brennan
3692d12cbc Merge pull request #332 from cmdrk/master 
Updated dnsbl to only block exit nodes
 2015-01-01 14:57:24 +08:00
8chan
72255ad5b8 Merge 
Conflicts:
	stylesheets/style.css
 2014-12-31 22:45:03 -08:00
8chan
c1ec49dc29 Mask DB error option 2014-12-31 22:42:42 -08:00
8chan
aa5d0e6e4b Hour max threads filter 2014-12-31 22:37:38 -08:00
8chan
3f3b0051d8 Move login check in inc/mod/auth.php to a function 
This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords)
 2014-12-31 22:35:21 -08:00
8chan
351375185e Early 404 option in clean() 2014-12-31 22:33:31 -08:00
8chan
db89ee7827 No file placeholder in catalog 2014-12-31 22:33:10 -08:00
8chan
0f3a65a984 First spam settings in ?/settings 2014-12-31 22:32:26 -08:00
8chan
04afbe904d Move bans.html theme over to cron 2014-12-31 22:31:43 -08:00
cmdrk
69cd484038 Updated dnsbl to only block exit nodes 2015-01-01 00:09:58 -06:00
8chan
8ac83fbba6 Merge 
Conflicts:
	inc/mod/pages.php
 2014-12-24 14:19:35 +00:00
8chan
f60c3f5935 Preview board flags script 2014-12-24 06:14:33 -08:00
8chan
d63dea93c5 Remove links from ban list 2014-12-24 06:14:04 -08:00
8chan
87e914948b SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard> 
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
 2014-12-24 06:08:19 -08:00
8chan
bb81e9e0c3 Fix weird "Default object created from empty vlaue" error 
Looks like $file can be NULL sometimes, though that should be illegal. Probably an unfixed post.php bug...
 2014-12-20 14:00:48 -08:00
8chan
c67c575561 Merge /srv/http 2014-12-20 15:04:23 +00:00
8chan
01cca90597 Unicode emoji support 2014-12-20 07:04:20 -08:00
8chan
025713547c Tweak flag size requirements 2014-12-20 07:01:40 -08:00
8chan
5b5a0b9061 Force subject OP 2014-12-20 07:01:25 -08:00
Forkless
22878daecd Added mod function to spoiler all images in a given post 2014-12-19 06:43:01 -06:00
8chan
d956c9a58e Merge https://github.com/ctrlcctrlv/8chan 2014-12-16 01:52:58 +00:00
8chan
958dbb1af6 Merge /srv/http 2014-12-16 01:52:48 +00:00
8chan
f8c1d7c80f what the fuck were you even thinking 
this is an insane default

BUGFIX: all-Japanese, all-Arabic, etc posts no longer trip the filter if not robot_enable
 2014-12-15 17:50:22 -08:00
Fredrick Brennan
14fce406a8 Merge pull request #308 from forklessanon/patch-6 
Added tripcode removal to post editing
 2014-12-16 09:42:53 +08:00
Forkless
d457cb57b8 Added tripcode removal to post editing 2014-12-14 22:49:54 -06:00
8chan
1b2ef21b8c Merge /srv/http 2014-12-14 11:29:50 +00:00
8chan
b9b1935e08 Bug fix: Boards were always unindexed in search engines 2014-12-14 03:28:04 -08:00
8chan
d705606729 Allow a board called news to exist 2014-12-14 03:27:26 -08:00
8chan
6ed13f3fb0 SECURITY: Board Owners could brick accounts by creating account names of matching users with different capitalizations 2014-12-14 03:26:45 -08:00
8chan
9db6895c98 Allow + in board names, add some new config vars (news+) 2014-12-14 03:25:43 -08:00
8chan
27cb60ebc5 Disable notes completely until per-board notes 2014-12-03 01:15:02 -08:00
8chan
8165dd6f66 Merge https://github.com/ctrlcctrlv/8chan 2014-12-03 09:13:46 +00:00
Fredrick Brennan
5cc158732e Merge pull request #289 from b4x/master 
Changed moderate to volunteer on
 2014-12-03 16:26:16 +08:00