1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2025-01-29 03:25:50 +01:00

6640 Commits

Author SHA1 Message Date
8chan
3da946268a SECURITY: Poster IDs could reveal IPs across boards
Imagine the following scenario:

Alice has permission to view IPs on board A, and Bob has permissions to view IPs on board B.

If the post number was to match, and the same IP made both posts, A and B could trade user IPs which they wouldn't normally have permission to do so. This weird bug has already creeped up on 8chan.co and is now patched.
2014-10-07 08:16:21 -07:00
8chan
9468df05b9 fuck 2014-10-06 19:03:50 -07:00
8chan
85a9077645 Fix name and order 2014-10-06 19:02:39 -07:00
8chan
31127bbdbe This makes the options appear at the bottom for some reason 2014-10-06 18:42:07 -07:00
8chan
5295c6366f User can disable backlinks if they want to, off by default 2014-10-06 18:39:38 -07:00
8chan
db55a3040f Make inline.js work in mod panel 2014-10-06 18:36:19 -07:00
8chan
ed94a1671d Merge https://github.com/ctrlcctrlv/8chan
Conflicts:
	post.php
2014-10-06 18:12:50 -07:00
8chan
a6775357ff BINARY 2014-10-06 18:02:58 -07:00
8chan
47e81b7e9b Fix spoiler image not working 2014-10-06 18:02:50 -07:00
8chan
d94bff238e Home page for unique IP based featured boards 2014-10-06 18:02:30 -07:00
8chan
345e5aa3a4 Featured boards now based on uniques 2014-10-06 18:01:01 -07:00
Fredrick Brennan
34627e4331 Merge pull request #34 from aeosynth/inline
[wip] inline posts
2014-10-06 19:26:10 -04:00
czaks
2d7da73534 Merge branch 'master' of https://github.com/ctrlcctrlv/8chan 2014-10-07 00:19:56 +02:00
czaks
8dee0703c3 Merge https://github.com/vichan-devel/vichan 2014-10-07 00:19:38 +02:00
8chan
93b30d6829 class around poster IDs 2014-10-07 00:19:15 +02:00
czaks
cc44a64097 Merge https://github.com/vichan-devel/vichan 2014-10-07 00:17:29 +02:00
wopot
c7351dff09 4 times "elseif" is not the way
and precalc. value sometimes help if well commentent
2014-10-07 00:16:02 +02:00
Bui
cb9b4db73d do security checks *after* checking captcha 2014-10-07 00:15:45 +02:00
Marcin Łabanowski
171fc86d66 Merge pull request #152 from bui/captcha-validate
do security checks *after* checking captcha
2014-10-07 00:12:30 +02:00
Marcin Łabanowski
9f3dba7372 Merge pull request #105 from anonfagola/patch-17
Update instance-config.php
2014-10-07 00:11:52 +02:00
Marcin Łabanowski
fee7f74067 Merge pull request #154 from wopot/patch-1
4 times "elseif" is not the way
2014-10-07 00:05:40 +02:00
wopot
ba3f0f25fe 4 times "elseif" is not the way
and precalc. value sometimes help if well commentent
2014-10-06 17:50:05 +02:00
Bui
e9773f3fb0 do security checks *after* checking captcha 2014-10-06 19:35:37 +09:00
James Campos
a1e7f171b0 optional backlink hiding 2014-10-05 17:26:50 -07:00
James Campos
6e16a963b3 add loading stub 2014-10-05 16:52:00 -07:00
James Campos
4119442877 optional 2014-10-05 16:20:25 -07:00
James Campos
68d138fa6c extract caching 2014-10-05 15:51:22 -07:00
czaks
a7a1a81d93 Merge https://github.com/vichan-devel/vichan 2014-10-05 23:20:24 +02:00
Bui
aba8d27ace wasn't aware of DNS function 2014-10-05 23:20:06 +02:00
Bui
1e95e58811 don't break if dns_system is true 2014-10-05 23:20:06 +02:00
Bui
8b9932218f add forward-confirmed reverse DNS 2014-10-05 23:20:06 +02:00
czaks
116a1278d8 Merge branch 'master' of https://github.com/ctrlcctrlv/8chan 2014-10-05 23:05:25 +02:00
czaks
64df5ae77c Merge https://github.com/vichan-devel/vichan 2014-10-05 22:18:04 +02:00
Fredrick Brennan
1f7090ff98 Merge pull request #149 from bui/fcrdns
add forward-confirmed reverse DNS
2014-10-05 16:17:29 -04:00
czaks
6804a2ede0 remove default margin for table elements; fixes vichan-devel#95 2014-10-05 22:16:36 +02:00
Marcin Łabanowski
2b1a1dffa4 Merge pull request #104 from kaernyk/master
Fix post width & codeblocks
2014-10-05 22:11:44 +02:00
kaernyk
944c3b6c28 Fix post width & codeblocks
I noticed that some url's were causing the posts to stretch over the
maximum device with.

  The code blocks were exhibiting similar behavior as well, and have
been adjusted to display well on all themes.

  I still need to fix the post form for handhelds, though it is not
as annoying as the other things fixed
2014-10-05 15:40:42 -04:00
Bui
3f4381cf40 wasn't aware of DNS function 2014-10-06 04:30:32 +09:00
Bui
ca7955ecfc don't break if dns_system is true 2014-10-06 04:08:10 +09:00
Bui
98b172980f add forward-confirmed reverse DNS 2014-10-06 03:37:13 +09:00
8chan
6d19be38e3 Merge https://github.com/ctrlcctrlv/8chan
Conflicts:
	inc/instance-config.php
2014-10-05 17:09:50 +00:00
8chan
4414ef80b4 DNSBLs bypass stuff, fix Opera bug. 2014-10-05 17:07:59 +00:00
8chan
7bfbd10d69 Re-enable this filter 2014-10-05 17:06:57 +00:00
8chan
f42173b260 Make expire.php work seemlessly even on large workloads 2014-10-05 17:06:39 +00:00
czaks
e0e3de2773 Merge https://github.com/vichan-devel/vichan 2014-10-05 18:38:45 +02:00
czaks
8518164352 sync locales with transifex 2014-10-05 18:38:25 +02:00
czaks
1002381bab Merge https://github.com/vichan-devel/vichan
Conflicts:
	js/auto-reload.js
2014-10-05 18:31:30 +02:00
czaks
606b39450d better synchronize the javascripts with 8chan 2014-10-05 18:30:47 +02:00
czaks
4a4c985235 missed one line 2014-10-05 18:16:18 +02:00
czaks
8b698e36e7 Merge https://github.com/vichan-devel/vichan
Conflicts:
	inc/mod/pages.php
	js/auto-reload.js
	js/id_colors.js
	js/id_highlighter.js
	stylesheets/style.css
	templates/index.html
2014-10-05 18:12:19 +02:00