1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2025-02-07 15:11:32 +01:00

3100 Commits

Author SHA1 Message Date
8chan
3da946268a SECURITY: Poster IDs could reveal IPs across boards
Imagine the following scenario:

Alice has permission to view IPs on board A, and Bob has permissions to view IPs on board B.

If the post number was to match, and the same IP made both posts, A and B could trade user IPs which they wouldn't normally have permission to do so. This weird bug has already creeped up on 8chan.co and is now patched.
2014-10-07 08:16:21 -07:00
8chan
db55a3040f Make inline.js work in mod panel 2014-10-06 18:36:19 -07:00
8chan
ed94a1671d Merge https://github.com/ctrlcctrlv/8chan
Conflicts:
	post.php
2014-10-06 18:12:50 -07:00
8chan
47e81b7e9b Fix spoiler image not working 2014-10-06 18:02:50 -07:00
8chan
345e5aa3a4 Featured boards now based on uniques 2014-10-06 18:01:01 -07:00
Marcin Łabanowski
9f3dba7372 Merge pull request #105 from anonfagola/patch-17
Update instance-config.php
2014-10-07 00:11:52 +02:00
wopot
ba3f0f25fe 4 times "elseif" is not the way
and precalc. value sometimes help if well commentent
2014-10-06 17:50:05 +02:00
Bui
3f4381cf40 wasn't aware of DNS function 2014-10-06 04:30:32 +09:00
Bui
ca7955ecfc don't break if dns_system is true 2014-10-06 04:08:10 +09:00
Bui
98b172980f add forward-confirmed reverse DNS 2014-10-06 03:37:13 +09:00
8chan
6d19be38e3 Merge https://github.com/ctrlcctrlv/8chan
Conflicts:
	inc/instance-config.php
2014-10-05 17:09:50 +00:00
8chan
4414ef80b4 DNSBLs bypass stuff, fix Opera bug. 2014-10-05 17:07:59 +00:00
8chan
7bfbd10d69 Re-enable this filter 2014-10-05 17:06:57 +00:00
czaks
e0e3de2773 Merge https://github.com/vichan-devel/vichan 2014-10-05 18:38:45 +02:00
czaks
8518164352 sync locales with transifex 2014-10-05 18:38:25 +02:00
czaks
4a4c985235 missed one line 2014-10-05 18:16:18 +02:00
czaks
8b698e36e7 Merge https://github.com/vichan-devel/vichan
Conflicts:
	inc/mod/pages.php
	js/auto-reload.js
	js/id_colors.js
	js/id_highlighter.js
	stylesheets/style.css
	templates/index.html
2014-10-05 18:12:19 +02:00
Marcin Łabanowski
97a25dad03 Merge pull request #102 from cable6-dev/bugfix-genwebmerror
[bugfix]$config['error']['genwebmerror'] wasn't set in config.php
2014-10-05 17:56:46 +02:00
Marcin Łabanowski
d01d892896 Merge pull request #100 from cable6-dev/feature-hide-sage
Added an option to hide sages
2014-10-05 17:53:32 +02:00
Marcin Łabanowski
42868c672a Merge pull request #103 from cable6-dev/bug-fix-check_spoiler_size
Check spoiler_image size before ussuming it is 128×128px
2014-10-05 17:53:08 +02:00
kaf
3c2529e157 [bugfix]$config['error']['genwebmerror'] wasn't set in config.php 2014-10-05 15:35:52 +00:00
kaf
296e4fd5fa Added an option to hide sages 2014-10-05 15:29:37 +00:00
kaf
fe60590d19 Check spoiler_image size before ussuming it is 128×128px 2014-10-05 15:26:28 +00:00
kaf
9cee5f6c61 [bugfix]ban appeals (was also present in tinyboard) 2014-10-05 12:53:02 +00:00
riking
edf98dbee3 Add example secrets.php file 2014-10-04 13:48:52 -07:00
riking
5d89342b4f Make dnsbls.php optional, secrets.php mandatory 2014-10-04 13:48:11 -07:00
8chan
99e95bb807 Merge ../http
Conflicts:
	templates/themes/catalog/catalog.html
2014-09-30 23:10:27 +00:00
8chan
7ca9b7edaf Max links = 40 2014-09-30 23:06:48 +00:00
Bui
ba7cc64bbb fix languages 2014-09-29 07:30:45 +09:00
8chan
befe393778 Rewrite color IDs script so it actually works 2014-09-27 21:23:51 +00:00
anonfagola
b621699a22 Update instance-config.php
@ctrlcctrlv said to me over IRC he removed the threadscroll script because on some browsers, it would refresh the page when scrolling. This has been fixed in #98, so it should be back in as a default addditional JS.

and i remembered the semicolon this time
2014-09-27 13:19:39 -07:00
8chan
b6bfe97c67 @anonfagola seriously needs to remember his fucking semicolons 2014-09-27 20:08:18 +00:00
8chan
4c3f48c021 Merge /root/8chan 2014-09-27 20:06:27 +00:00
8chan
3747a3396b revert 2014-09-27 20:05:48 +00:00
8chan
993df563db undo no cache test 2014-09-27 20:05:33 +00:00
anonfagola
4c720120e4 Added id_highlighter.js to additional_javscript 2014-09-27 09:49:17 -07:00
czaks
e748a286b3 Merge branch 'master' of https://github.com/ctrlcctrlv/8chan
Conflicts:
	inc/api.php
	js/multi-image.js
2014-09-27 11:34:05 +02:00
czaks
529951f75b Merge https://github.com/vichan-devel/vichan 2014-09-27 11:31:52 +02:00
czaks
ef53af04ec fix a recently added md5 api field 2014-09-27 11:31:30 +02:00
Fredrick Brennan
6afc91d472 Merge pull request #94 from peerau/patch-1
A quick update to config.php
2014-09-27 01:31:33 -04:00
8chan
47a92791ed Merge branch 'master' of https://github.com/bui/8chan into bui-master
Conflicts:
	boards.php
2014-09-27 04:58:41 +00:00
8chan
24caf95f20 Fix mod.php catalog 404 bug 2014-09-27 00:52:21 +00:00
8chan
695a8a3aaf Update instance config 2014-09-26 23:55:19 +00:00
Jayden Callahan
b4fd7c8e2c A quick update to config.php 2014-09-27 03:03:54 +09:30
hatstand0
d27cddaacc Add file hash to API
The API currently lacks the Base64 encoded file hash 4chan's API provides, which assists in file de-duplication by archive software.
2014-09-26 13:28:04 +02:00
hatstand0
7ea5b129e6 Fix thumbnail width/height in API
The API currently has the thumbnail widths and heights switched around
2014-09-26 13:27:49 +02:00
8chan
9dc91c1bf4 fuck you php 2014-09-26 03:44:34 +00:00
Bui
f4a9c5f551 only use 8chan locales 2014-09-26 10:38:23 +09:00
Bui
da370c53c0 wrong function name 2014-09-26 10:17:47 +09:00
Bui
ae183c1c42 use country names in boards.html 2014-09-26 10:15:17 +09:00