1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-12-01 02:27:24 +01:00
Commit Graph

3435 Commits

Author SHA1 Message Date
8chan
3e68a3e8b8 Merge 2015-02-26 09:11:48 +00:00
8chan
b49fe85345 ( ͡° ͜ʖ ͡°) Allow board owners to enable Zalgo text 2015-02-26 01:10:00 -08:00
8chan
652497ad57 Merge 2015-02-26 02:07:22 +00:00
8chan
d970baa5d8 Public action logs commit (log.php)
Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now.
2015-02-25 17:21:49 -08:00
8chan
276f2e58ad have this handy in case i need to shut off /infinity/'s settings again 2015-02-25 17:18:01 -08:00
8chan
fbb85593fa New API endpoint: settings.php - get settings of board 2015-02-25 17:16:44 -08:00
8chan
46ba60fff1 Handle NULL files in class Post 2015-02-25 17:15:45 -08:00
8chan
8db4baccca Allow title attr in img and href 2015-02-25 17:15:18 -08:00
8chan
3312e38f07 Change from fopen/flock to dio_open/dio_fcntl in file_write
8chan uses NFS and flock() does not work over NFS. See http://0pointer.de/blog/projects/locking.html for more information.

Without proper file locking, race conditions are possible in ?/settings and other pages. The one in ?/settings is particularly bad, too many successive writes can cause a PHP file with bad syntax to be written which breaks an entire board and many scripts that call openBoard().

You need to install the dio.so module if you merge this commit.
2015-02-25 17:12:25 -08:00
Anonish
14f664b558 Merge pull request #4 from ctrlcctrlv/master
update to infinity
2015-02-22 13:28:31 -06:00
8chan
ae02998948 Upgrade HTMLPurifier library 4.5->4.6 2015-02-20 23:16:38 -08:00
8chan
e2baf27c5c SECURITY: No more off-site images in board announcements 2015-02-20 23:13:52 -08:00
anonish
6dd547e1bf revert changes to template.php 2015-02-21 00:47:07 -06:00
Anonish
79e972945f Merge pull request #3 from ctrlcctrlv/master
update to infinity
2015-02-21 00:39:20 -06:00
8chan
aa1d2b3128 /infinity/ board with locked owner password 2015-02-20 17:16:06 -08:00
8chan
488f8e2648 Redchanit CSS 2015-02-20 17:15:40 -08:00
8chan
8c63d906e9 Sorry @Kyokou, this should fix both problems, close ctrlcctrlv/infinity#399 2015-02-20 10:16:28 +00:00
8chan
3e0134e53e New feature: Board owner logs of their board 2015-02-19 22:58:30 -08:00
8chan
61fd6ef25c Use post filter JS instead of hide-threads 2015-02-19 20:52:53 -08:00
8chan
ef21c6d864 Close ctrlcctrlv/infinity#396 2015-02-19 20:52:26 -08:00
8chan
9beffe618c /meta/ back in top bar next to /operate/ 2015-02-19 19:14:55 -08:00
8chan
4e335db3e8 Add event to quote backlinks 2015-02-18 16:55:03 -08:00
8chan
8ddc472239 Fix shadow cap 2015-02-16 16:56:09 -08:00
8chan
027687acc0 Merge https://github.com/ctrlcctrlv/infinity
Conflicts:
	inc/8chan-mod-pages.php
	templates/mod/settings.html
2015-02-17 00:43:00 +00:00
8chan
0389b280d8 Fix mod_move if file deleted or spoiler 2015-02-16 16:35:15 -08:00
8chan
f00d342c41 Extend max webm length 2015-02-16 16:35:01 -08:00
8chan
61e50ff3cf Show what line an error occured on by default 2015-02-16 16:34:45 -08:00
8chan
c7f26b31c1 board_log function, ?/log🅱️test 2015-02-16 16:28:22 -08:00
8chan
fb800497f1 /meta/ -> /operate 2015-02-16 16:26:20 -08:00
8chan
15987f919f Fix *0 secure tripcodes caused by accidentally feeding + signs to crypt() 2015-02-16 16:24:54 -08:00
8chan
ee635db05f new checkDNSBL() function, return true/false, not error 2015-02-16 16:24:11 -08:00
8chan
ecdc53522f New event: rebuildpost, allows you to bind events to ?/edit 2015-02-16 16:21:30 -08:00
8chan
11b1d2fcb9 Add email selectbox to forced anonymous 2015-02-16 16:20:14 -08:00
8chan
2cb1bbe3da Fix webm bug: Wrong max length shown in error message 2015-02-16 16:19:55 -08:00
8chan
df7c7c8454 Make ban list faster for board owners/vols 2015-02-16 16:19:02 -08:00
8chan
ed73fd525e Poster IDs in API 2015-02-16 16:17:18 -08:00
8chan
06ecd784cf SECURITY: Fix more cross-linking problems in ?/settings CSS 2015-02-16 16:15:15 -08:00
8chan
0eb3073819 Tor posting ?/settings option 2015-02-16 16:14:40 -08:00
8chan
b6abb4ab4f Allow global volunteers to move threads 2015-02-16 16:14:05 -08:00
8chan
c3ff6daa53 Billion laughs detection in wordfilters 2015-02-16 16:11:21 -08:00
anonish
b7a6f6419f Merge branch 'master' of https://github.com/anonish/infinity-anonish 2015-02-08 21:37:18 -06:00
anonish
78cc03c204 Updating expand-video.js 2015-02-08 21:36:33 -06:00
Fredrick Brennan
4434f2cd93 Merge pull request #375 from blahblah666/master
Option to enable captcha for thread creation only + README.md with better install instructions
2015-02-02 12:33:03 +08:00
8chan
546e49f560 Add the subject field to forced anonymous by default 2015-01-30 21:12:20 -08:00
8chan
f4e0b415ac [aa] tags - ASCII art 2015-01-30 21:12:03 -08:00
8chan
1338ca3091 SECURITY / XSS: Stop arbitrary HTML injection introduced by @forklessanon 2015-01-29 19:01:59 -08:00
8chan
da3927ed17 Put a limit on ?/recent 2015-01-29 19:01:11 -08:00
blahblah666
885dffdd01 Fixed idiotic typo. tread > thread 2015-01-29 05:46:41 -08:00
blahblah666
cea12ee665 Update 8chan-mod-pages.php 2015-01-29 04:19:38 -08:00
blahblah666
52b72c0ee2 Update 8chan-mod-pages.php 2015-01-28 23:37:33 -08:00
blahblah666
86cd7b81f9 Update 8chan-mod-pages.php 2015-01-28 23:25:55 -08:00
blahblah666
89e2677a1e Update config.php 2015-01-28 23:23:50 -08:00
8chan
4cca83da8f b/w issues, disable auto-gif for now 2015-01-28 17:57:31 -08:00
8chan
804247654d No IP showing in purge() 2015-01-28 17:57:16 -08:00
8chan
5efd0e9b18 This is using jQuery now 2015-01-23 02:19:01 -08:00
Fredrick Brennan
f5b7e8adfe Merge pull request #315 from forklessanon/feature-3
Added mod function to spoiler all images in a given post
2015-01-22 16:11:25 +08:00
Fredrick Brennan
fd7620bddf Merge pull request #331 from marktaiwan/better-webm-thumbnail
Better webm thumbnail
2015-01-22 16:09:10 +08:00
8chan
138f9aeb40 Merge 2015-01-22 08:04:12 +00:00
8chan
c473b5409c Fix no cache bug in display.php 2015-01-21 23:53:43 -08:00
8chan
f9119b16b9 Ban appeals for admin/globals fix 2015-01-21 23:52:50 -08:00
8chan
6cca52e92d ReCAPTCHA lib fix 2015-01-21 23:52:25 -08:00
8chan
f66c78e20b sql_open mask_db_error 2015-01-21 23:51:48 -08:00
8chan
290eed43d0 Some 8chan.co>8ch.net (rest in #348) 2015-01-21 23:49:15 -08:00
Markerov
7011fdf9c2 round starting time down to nearest second 2015-01-07 03:18:24 +08:00
8chan
980d8784e5 Tinyboard is defunct. No reason to keep the update checker 2015-01-06 01:34:54 -08:00
8chan
0a2dfedb0e Ban appeals: limit by board, make more efficient, enable in infinity 2015-01-06 01:34:27 -08:00
8chan
437ff83696 max wf bugfix 2015-01-06 01:32:45 -08:00
8chan
1a154223ea Merge https://github.com/ctrlcctrlv/infinity 2015-01-05 04:40:24 -08:00
8chan
b7e6bca82e Allow ADMIN level to use Global Volunteer capcode 2015-01-05 04:38:16 -08:00
Fredrick Brennan
755fc1e592 Merge pull request #334 from Pashe/css-urls
Board stylesheet URL filter fixes and whitelist additions
2015-01-05 12:43:33 +08:00
Pashe
916cb4c997 inc/functions.php: Tabs in code tags (fixes #328) 2015-01-03 23:48:57 -06:00
Pashe
e95a147e3e 8chan-mod-pages.php: Filter CSS imports from sites with potentially unsafe content (pomf.se) 2015-01-03 16:35:03 -06:00
Pashe
fe8b02442a 8chan-mod-pages.php: Make the CSS URL filter error message less vague 2015-01-03 16:16:55 -06:00
Pashe
dbc4fbc5fe 8chan-mod-pages.php: Fix CSS URL filter ignoring all but the last URL on a line 2015-01-02 23:27:12 -06:00
Pashe
aa71065dac 8chan-mod-pages.php: Add 8chan.co and fonts.gstatic.com to the CSS whitelist 2015-01-02 21:09:22 -06:00
Fredrick Brennan
3692d12cbc Merge pull request #332 from cmdrk/master
Updated dnsbl to only block exit nodes
2015-01-01 14:57:24 +08:00
8chan
72255ad5b8 Merge
Conflicts:
	stylesheets/style.css
2014-12-31 22:45:03 -08:00
8chan
c1ec49dc29 Mask DB error option 2014-12-31 22:42:42 -08:00
8chan
aa5d0e6e4b Hour max threads filter 2014-12-31 22:37:38 -08:00
8chan
3f3b0051d8 Move login check in inc/mod/auth.php to a function
This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords)
2014-12-31 22:35:21 -08:00
8chan
351375185e Early 404 option in clean() 2014-12-31 22:33:31 -08:00
8chan
db89ee7827 No file placeholder in catalog 2014-12-31 22:33:10 -08:00
8chan
0f3a65a984 First spam settings in ?/settings 2014-12-31 22:32:26 -08:00
8chan
04afbe904d Move bans.html theme over to cron 2014-12-31 22:31:43 -08:00
cmdrk
69cd484038 Updated dnsbl to only block exit nodes 2015-01-01 00:09:58 -06:00
8chan
8ac83fbba6 Merge
Conflicts:
	inc/mod/pages.php
2014-12-24 14:19:35 +00:00
8chan
f60c3f5935 Preview board flags script 2014-12-24 06:14:33 -08:00
8chan
d63dea93c5 Remove links from ban list 2014-12-24 06:14:04 -08:00
8chan
87e914948b SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2014-12-24 06:08:19 -08:00
8chan
bb81e9e0c3 Fix weird "Default object created from empty vlaue" error
Looks like $file can be NULL sometimes, though that should be illegal. Probably an unfixed post.php bug...
2014-12-20 14:00:48 -08:00
8chan
c67c575561 Merge /srv/http 2014-12-20 15:04:23 +00:00
8chan
01cca90597 Unicode emoji support 2014-12-20 07:04:20 -08:00
8chan
025713547c Tweak flag size requirements 2014-12-20 07:01:40 -08:00
8chan
5b5a0b9061 Force subject OP 2014-12-20 07:01:25 -08:00
Forkless
22878daecd Added mod function to spoiler all images in a given post 2014-12-19 06:43:01 -06:00
8chan
d956c9a58e Merge https://github.com/ctrlcctrlv/8chan 2014-12-16 01:52:58 +00:00
8chan
958dbb1af6 Merge /srv/http 2014-12-16 01:52:48 +00:00
8chan
f8c1d7c80f what the fuck were you even thinking
this is an insane default

BUGFIX: all-Japanese, all-Arabic, etc posts no longer trip the filter if not robot_enable
2014-12-15 17:50:22 -08:00
Fredrick Brennan
14fce406a8 Merge pull request #308 from forklessanon/patch-6
Added tripcode removal to post editing
2014-12-16 09:42:53 +08:00
Forkless
d457cb57b8 Added tripcode removal to post editing 2014-12-14 22:49:54 -06:00
8chan
1b2ef21b8c Merge /srv/http 2014-12-14 11:29:50 +00:00
8chan
b9b1935e08 Bug fix: Boards were always unindexed in search engines 2014-12-14 03:28:04 -08:00
8chan
d705606729 Allow a board called news to exist 2014-12-14 03:27:26 -08:00
8chan
6ed13f3fb0 SECURITY: Board Owners could brick accounts by creating account names of matching users with different capitalizations 2014-12-14 03:26:45 -08:00
8chan
9db6895c98 Allow + in board names, add some new config vars (news+) 2014-12-14 03:25:43 -08:00
8chan
27cb60ebc5 Disable notes completely until per-board notes 2014-12-03 01:15:02 -08:00
8chan
8165dd6f66 Merge https://github.com/ctrlcctrlv/8chan 2014-12-03 09:13:46 +00:00
Fredrick Brennan
5cc158732e Merge pull request #289 from b4x/master
Changed moderate to volunteer on
2014-12-03 16:26:16 +08:00
8chan
3df5b86235 Return some important info from listBoards() 2014-12-03 00:19:50 -08:00
8chan
e7fbb7e509 Update footer, warrant canary, quote US law 2014-12-03 00:19:02 -08:00
8chan
8d34866636 Fix locale bugs, init_locale was not calling setlocale!? 2014-12-03 00:17:24 -08:00
8chan
6413bc78f6 Make this footer message optional 2014-12-03 00:16:25 -08:00
8chan
dd1c160d35 Hash masked IPs option, use less_ip in inc/bans 2014-12-03 00:15:24 -08:00
8chan
b9dace7563 New mod.php pages: ?/tags and ?/reassign 2014-12-03 00:11:48 -08:00
8chan
fa9a3da913 New boards.html page now with tags 2014-12-03 00:10:28 -08:00
b4x
c2e9be776b Changed moderate to volunteer on 2014-12-01 20:36:11 +01:00
Markerov
57df02b309 initial commit
generate the thumbnail from the middle of the video
2014-11-29 01:30:18 +08:00
8chan
6d54ae5262 read.php +50 fix 2014-11-22 00:44:57 -08:00
8chan
2228d2f511 Merge branch 'master' of https://github.com/ctrlcctrlv/8chan 2014-11-22 00:15:42 -08:00
8chan
ef0ab8bb00 Isnt set if first write 2014-11-22 00:15:32 -08:00
8chan
a76b5a27c7 Merge https://github.com/ctrlcctrlv/8chan 2014-11-21 23:35:40 -08:00
8chan
d8c385176c New claim.html page 2014-11-21 23:32:22 -08:00
8chan
7d11c7a884 Fix mod mode for read.php 2014-11-21 16:17:00 -08:00
8chan
faa51accaa We dynamic pages now, read.php 2014-11-21 04:05:20 -08:00
8chan
0ba19e163b MP4 support, close ctrlcctrlv/8chan#243 2014-11-19 00:53:35 -08:00
8chan
4bf6c1ab8e Performance enhancement with eval 2014-11-19 00:50:05 -08:00
8chan
71c89de6de >letting board owners change the charset
yeah, nah. thanks anyway though @czaks lmao
2014-11-17 05:27:00 -08:00
czaks
62a6dac022 custom captcha integration 2014-11-14 15:09:52 +01:00
8chan
a68d8628a5 Merge https://github.com/ctrlcctrlv/8chan 2014-11-13 05:08:40 +00:00
8chan
f944116a7c Enabe thread stats 2014-11-12 21:08:48 -08:00
8chan
4f2398f7b8 Make deletePost more tolerant of errors
Sometimes thumbnail generation fails but the post is still there, sometimes post deletion is aborted halfway through

Ignore errors from file_unlink and don't fail if $f->file, $f->thumb not set
2014-11-12 21:06:58 -08:00
Fredrick Brennan
0da5d13e7e Merge pull request #245 from forklessanon/patch-3
Security fix: Added defaults to the banned boards
2014-11-12 10:32:03 +08:00
Forkless
0df4afe917 Security fix: Added defaults to the banned boards list to protect core folders of the codebase.
Added banned boards restriction to the mod_new_board function.
2014-11-10 06:35:53 -06:00
8chan
30f4b5b5c2 Compatability fix 2014-11-09 23:23:47 -08:00
8chan
5848c96fdc Enable catalog search 2014-11-09 23:23:38 -08:00
8chan
c648448a75 Merge https://github.com/ctrlcctrlv/8chan 2014-11-09 22:25:54 -08:00
8chan
cf81d83942 Board flags commit 2014-11-09 22:18:45 -08:00
8chan
34bfa3eaad disable for now 2014-11-08 16:57:00 -08:00
Fredrick Brennan
d75a119a7f Merge pull request #231 from forklessanon/master
Support for youtube's 'start' and 'end' URL parameters
2014-11-08 11:20:38 +08:00
BkPHcgQL3V
f295d77f2d Add data-md5 attributes as on 4chan 2014-11-04 06:55:55 +00:00
BkPHcgQL3V
d398a49fc6 Add MD5 for individual files to the API 2014-11-04 06:55:55 +00:00
Forkless
c009543ce1 Re-added support for youtu.be shortURLs 2014-11-03 09:30:15 -06:00
Forkless
cfa01786bd Missed a couple things for the youtube timeslice support. 2014-11-02 23:46:13 -06:00
Forkless
69bea13a20 Added support for youtube's timeslice embed parameters (start and end) 2014-11-02 23:22:19 -06:00
8chan
c695839cb5 Merge ../http
Conflicts:
	inc/instance-config.php
2014-11-01 16:01:59 -07:00
8chan
364c1bc93b PDF uploading 2014-11-01 16:01:22 -07:00
8chan
a25b5320ea Enable comment toolbar 2014-11-01 16:00:39 -07:00
8chan
3874841f36 Merge branch 'youtube-js' of https://github.com/czaks/8chan into czaks-youtube-js
Conflicts:
	inc/instance-config.php
2014-11-01 15:58:36 -07:00
8chan
659766c1c3 Extra files and IDs in API 2014-10-30 05:33:01 -07:00
8chan
44bb469a75 VP9 support (experimental) 2014-10-30 05:32:39 -07:00