1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-11-26 16:30:52 +01:00
Commit Graph

1080 Commits

Author SHA1 Message Date
Michael Foster
e740f45ed1 Bugfix: HTML injection in post editing (introduces and fixes yet another bug) 2013-07-31 21:24:17 -04:00
czaks
164d0e6e3b Revert "markup modifiers: make it even harder to escape"
This reverts commit d7ea47a91f.
2013-07-31 21:22:57 -04:00
czaks
07f8aa8c4c Revert "facilitate using markup modifiers multiple times; make raw html not consume the whole post"
This reverts commit e7dd0bbc4a.
2013-07-31 21:22:32 -04:00
czaks
ef9ede073f Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	inc/functions.php
2013-07-31 21:03:13 -04:00
Michael Foster
d30d94960c Allow public ban messages on raw HTML posts 2013-07-31 21:02:26 -04:00
Michael Foster
286524ca46 Newline before <tinyboard ban message> 2013-07-31 20:54:20 -04:00
Michael Foster
da5048a0e4 SQL cleanup 2013-07-31 20:51:43 -04:00
czaks
644f1d90cb fix previous commit; markup is called via reference 2013-07-31 20:41:56 -04:00
czaks
08e7192377 markup modifiers: there was a plan for adding markup to ban reasons, but assignment was missing; escape markup there too 2013-07-31 20:33:27 -04:00
czaks
99427246e1 markup modifiers: make it even harder to escape 2013-07-31 20:13:19 -04:00
czaks
ada248ce4a facilitate using markup modifiers multiple times; make raw html not consume the whole post 2013-07-31 20:11:11 -04:00
czaks
2c7fa51012 fix post editing for tinyboard markup 2013-07-31 19:50:25 -04:00
czaks
0eaf52583f Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	templates/thread.html
2013-07-31 19:25:04 -04:00
Michael Foster
2b74f8b37d Markup modifiers: raw HTML 2013-07-31 19:18:55 -04:00
Michael Foster
be11041471 Markup modifiers. Fix issue #66 (public ban message lost when rebuilding post body) 2013-07-31 18:59:54 -04:00
Michael Foster
89285fd7c3 Fix issue #72 2013-07-31 18:29:09 -04:00
czaks
2c8bd71a9a Merge branch 'master' of https://github.com/savetheinternet/Tinyboard 2013-07-31 17:05:53 -04:00
Michael Foster
19b719f0af Fix last commit 2013-07-31 17:04:36 -04:00
Michael Foster
7619d23499 Only run SQL query to count threads if we really need to 2013-07-31 17:02:42 -04:00
czaks
625a7961bd Merge branch 'master' of https://github.com/savetheinternet/Tinyboard 2013-07-31 17:02:30 -04:00
Michael Foster
44910c34c3 Fix last commit; Make Tinyboard Twig extension more mb-safe 2013-07-31 16:38:09 -04:00
Michael Foster
d447c0bd72 Issue #125 2013-07-31 16:22:27 -04:00
czaks
ed2f3358db fix merge 2013-07-31 15:01:44 -04:00
czaks
7e58e50516 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	inc/config.php
	inc/display.php
	inc/functions.php
	inc/image.php
	js/expand.js
	js/hide-threads.js
	js/local-time.js
	js/smartphone-spoiler.js
	templates/header.html
	templates/index.html
	templates/main.js
	templates/page.html
	templates/post_reply.html
	templates/post_thread.html
	templates/thread.html
2013-07-31 14:54:20 -04:00
Michael Foster
cf7f7cc9d6 i18n some more strings in inc/config.php 2013-07-31 06:56:57 -04:00
Michael Foster
18017ff761 Javascript l10n: Work without $config['additional_javascript_compile'] 2013-07-31 06:54:53 -04:00
Michael Foster
0f7777e4a6 Disallow board names which are too large for the filesytem to handle 2013-07-31 06:40:57 -04:00
Michael Foster
f0e3d62b0f Undo 7e0cec for now. Will restore later once I resolve issues 2013-07-31 05:03:50 -04:00
czaks
1924e15354 js i18n: finish implementation with addition of the compiled locale strings file to additional javascripts 2013-07-31 04:57:50 -04:00
czaks
fb1968c0b9 i18n one more string in inc/functions.php 2013-07-31 04:56:42 -04:00
czaks
e968fd6ce9 localise time values 2013-07-31 04:55:34 -04:00
czaks
ef68982c79 i18n some strings in inc/config.php 2013-07-31 04:54:08 -04:00
Michael Foster
e06a800027 Convert to UNIX line endings 2013-07-31 04:28:26 -04:00
Marcin Łabanowski
247e183077 Facilitate styling of subboard listings 2013-07-31 04:09:35 -04:00
czaks
a7e0872eb2 Update Polish locale 2013-07-31 04:07:15 -04:00
czaks
23b1ed316e Update Polish translation 2013-07-31 04:07:03 -04:00
czaks
787c5c3d91 locale: update polish translation 2013-07-31 04:06:57 -04:00
czaks
216e13d59c Update Polish translation; javascript l10n 2013-07-31 04:06:52 -04:00
55ch
d75cfa2af4 Brazilian Portuguese translation for Tinyboard 2013-07-31 04:05:55 -04:00
Marcin Łabanowski
c2390bb87d Fixed typo in Polish translation 2013-07-31 04:05:49 -04:00
Marcin Łabanowski
2079df074b Updated Polish translation (3) 2013-07-31 04:05:44 -04:00
Marcin Łabanowski
e296034aaf Updated Polish translation (2) 2013-07-31 04:05:38 -04:00
Marcin Łabanowski
ba24892063 Updated Polish translation 2013-07-31 04:05:29 -04:00
Michael Foster
7641c7280a Small comment change 2013-07-31 04:02:40 -04:00
Marcin Łabanowski
64c986017a Implement image identification buttons using regex.info/exif, google images and tineye 2013-07-31 04:00:22 -04:00
Michael Foster
84252f1c8a Rename $config['url_ads'] to $config['link_prefix'] 2013-07-31 03:43:01 -04:00
szalej
da43b78b8c Update inc/config.php
hide referrer option
2013-07-31 03:39:51 -04:00
Marcin Łabanowski
61c0280288 url_ads: fix it not working 2013-07-31 03:39:20 -04:00
szalej
f42121db4a Update inc/functions.php
url ads
2013-07-31 03:39:15 -04:00
szalej
8021d22e3b Update inc/functions.php
Hide Referrer (nullrefer.com)
2013-07-31 03:39:10 -04:00
asiekierka
0e909ee96e Embedding: added vocaroo support 2013-07-31 03:37:09 -04:00
Michael Foster
42bbbb037f Tiny code clean-up 2013-07-31 03:35:07 -04:00
Marcin Łabanowski
140e34324d convert+gifsicle: fix previous commit 2013-07-31 03:33:12 -04:00
Marcin Łabanowski
4263bb7dd8 Support for resizing gifs using gifsicle with resizing the rest using ImageMagick 2013-07-31 03:33:06 -04:00
Marcin Łabanowski
e1a5dbbcc2 Fix animated .gif conversion when $config['thumb_ext'] == '' 2013-07-31 03:32:44 -04:00
czaks
6eaff24cdc Merge branch 'master' of https://github.com/savetheinternet/Tinyboard 2013-07-31 03:18:11 -04:00
Michael Foster
a15a37cd4e Previous commit comment fix 2013-07-31 03:13:51 -04:00
Michael Foster
a8918d3bbe Markup/quote fix for multibyte 2013-07-31 03:12:06 -04:00
czaks
eed8767039 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	inc/functions.php
	inc/mod/pages.php
	install.php
	js/expand.js
	mod.php
2013-07-31 02:30:44 -04:00
Michael Foster
c823bcb2c3 Fix last commit: purge() issue 2013-07-31 02:19:58 -04:00
Michael Foster
ca6cb1fdea Allow Unicode in board URIs. 2013-07-31 02:08:55 -04:00
Michael Foster
2545acd35f Ability to hide IP addresses from mod log 2013-07-31 00:04:57 -04:00
Michael Foster
e01b659183 ?/IP/: Don't show posts for board user doesn't have access to 2013-07-30 23:30:49 -04:00
Michael Foster
a01f53b4a4 Upgrade to utf8mb4 charset for MySQL server versions above 5.5.3. Keep support for older versions. Fix charsets for multiple columns and tables. 2013-07-30 22:08:56 -04:00
Michael Foster
e2adc0093d MySQL's utf8 charset only supports up to 3-byte symbols. Insterting four byte symbols (U+010000 to U+10FFFF) can be done maliciously to break HTML mark-up.
The ideal solution was to convert to MySQL's utf8mb4 charset, but then we would lose support for MySQL < 5.5.3. In this fix, incompatible characters are encoded as HTML numeric character references (eg. #65536) and just stripped from body_nommarkup.
2013-07-30 16:41:10 -04:00
czaks
10f9220657 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	js/inline-expanding.js
2013-07-29 23:17:37 -04:00
Michael Foster
1d5339d7c6 Post search: Search other fields too 2013-07-29 20:20:07 -04:00
czaks
32eca7cfc9 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard 2013-07-29 16:26:10 -04:00
Michael Foster
cc7615cf06 Search posts 2013-07-29 16:18:06 -04:00
Michael Foster
4f747172c2 Make font-awesome enabled by default 2013-07-29 12:27:10 -04:00
czaks
f5115f1945 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard 2013-07-28 20:51:43 -04:00
Michael Foster
d9dfed5e1c Fix for last commit 2013-07-28 20:46:00 -04:00
Michael Foster
9a14d32c77 Strip combining characters from Unicode strings (eg. Zalgo) 2013-07-28 20:33:26 -04:00
czaks
055342e6e3 Update Polish locale 2013-07-27 02:01:42 -04:00
czaks
a61c7a32bb localise time values 2013-07-27 01:50:38 -04:00
czaks
74ee540759 i18n some strings in inc/config.php 2013-07-27 01:33:21 -04:00
czaks
56206315c6 i18n one more string in inc/functions.php 2013-07-27 01:21:30 -04:00
czaks
e1d4b9edf1 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	inc/functions.php
2013-07-26 13:47:53 -04:00
Michael Foster
5359769088 Fix markup overlapping. Issue #124 2013-07-26 11:01:13 -04:00
czaks
2e2469569b Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	install.php
2013-07-24 16:24:20 -04:00
Michael Foster
8daaaf350a %length% in public ban messages 2013-07-24 11:30:01 -04:00
Michael Foster
d6090fb776 Long overdue: Salted password hashes 2013-07-24 11:15:55 -04:00
czaks
808ae271f4 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	templates/index.html
	templates/post_thread.html
	templates/thread.html
2013-07-23 10:25:33 -04:00
Michael Foster
e84dceb60c Option to use font-awesome for sticky/lock icons, etc. 2013-07-23 09:38:42 -04:00
Michael Foster
ad2edf62d7 Option to make stylesheet selections board-specific 2013-07-23 01:35:56 -04:00
czaks
b471c5e35d Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	js/hide-threads.js
2013-07-22 23:33:02 -04:00
Michael Foster
9a35acdd1e Add custom links to dashboard 2013-07-22 18:30:45 -04:00
Michael Foster
aa598d28d1 Option to check public ban message by default 2013-07-22 17:51:13 -04:00
czaks
73414519ba Merge branch 'master' of https://github.com/savetheinternet/Tinyboard 2013-07-22 10:14:17 -04:00
Michael Foster
f798bb5209 Option to automatically strip EXIF metadata from JPEGs 2013-07-21 15:50:45 -04:00
czaks
600324b137 Remove imgcaptcha, this code is unused in any of our forks and needs work to get here back.
Revert "Merge branch 'imgcaptcha' of https://github.com/asiekierka/Tinyboard"

This reverts commit 49afb685c8, reversing
changes made to 2451a0f29c.

Conflicts:

	js/imgcaptcha.js
2013-07-20 22:47:26 -04:00
czaks
c8a72be62f post search: missed default config 2013-07-20 22:45:21 -04:00
czaks
52bf3d3623 Merge branch 'master' of github.com:vichan-devel/Tinyboard 2013-07-20 22:33:56 -04:00
czaks
8b3bd5835a Update Polish translation 2013-07-20 20:23:55 -04:00
Czterooki
5feda30e63 Merge branch 'master' of github.com:vichan-devel/Tinyboard 2013-07-20 18:28:57 -04:00
czaks
274a86dd03 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	templates/themes/sitemap/info.php
2013-07-20 17:28:34 -04:00
Michael Foster
f552849495 Fix permissions with search 2013-07-20 13:15:44 -04:00
Michael Foster
f49e6c9fc3 Search update 2013-07-20 12:05:42 -04:00
Michael Foster
b34ba883c5 Bring back search (searching posts not implemented yet) 2013-07-20 07:50:33 -04:00
Czterooki
acf93cda21 merge with vichan-gold 2013-07-20 00:19:08 -04:00
Czterooki
36e67de205 inc/mod/pages.php 2013-07-20 00:05:08 -04:00
Czterooki
7761dc3fff config.php 2013-07-20 00:03:45 -04:00
Michael Foster
731cfba33b Only store video URLs in database, instead of the generated player HTML. 2013-07-19 18:36:12 -04:00
czaks
cef5d586ff locale: update polish translation 2013-07-18 16:34:22 -04:00
czaks
495c6fa846 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	post.php
2013-07-18 15:19:03 -04:00
Michael Foster
34b5f62600 Themes edit: Split "post" into two seperate actions: "post" (replies) and "post-thread". And add a $board variable. 2013-07-18 12:06:26 -04:00
Michael Foster
072e22bdfa Update filters to work with new ban table 2013-07-18 10:17:19 -04:00
czaks
49f968fa5d Merge branch 'master' of https://github.com/kaja47/Tinyboard 2013-07-16 13:40:56 -04:00
czaks
6152ed43bd Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	install.php
	templates/index.html
	templates/thread.html
2013-07-16 13:02:13 -04:00
Michael Foster
390e529717 More ban stuff: Show whether or not user has "seen" a ban yet in the ban list and on IP address pages. Purge useless expired ban records. 2013-07-16 08:50:39 -04:00
Michael Foster
4340e74569 $config['require_ban_view']: Force users to view the "You are banned" page at least once before letting a ban disappear naturally. 2013-07-16 06:33:37 -04:00
Michael Foster
9825d8611f Outputting thread subject in header/title (issue #122) 2013-07-16 02:48:20 -04:00
Michael Foster
4eea9507c3 Automatically dismiss all reports regarding a thread after it is locked. 2013-07-16 02:32:44 -04:00
Michael Foster
a378ff7658 Fix issue #24 2013-07-16 02:27:20 -04:00
Michael Foster
a5e04f0ba7 Add clean() to mod_move function 2013-07-16 01:38:24 -04:00
Michael Foster
5c7e328f5d Add "write" (files written to) to debug section 2013-07-16 01:21:06 -04:00
Macil Tech
90c2b95f92 Argh, just remove all RTL and LTR control codes in bidi_cleanup.
If the name and subject fields both start with RLO characters, then the
subject would be after the name with the old bidi_cleanup.
2013-07-08 13:26:31 -05:00
czaks
1ef6d23e7e Update Polish translation; javascript l10n 2013-07-03 01:59:36 -04:00
czaks
7503a1a7b6 js i18n: finish implementation with addition of the compiled locale strings file to additional javascripts 2013-07-03 00:25:32 -04:00
K
1b3852c8b4 Add support for 4chan-compatible json API. 2013-07-02 19:52:29 +02:00
czaks
a139c44a80 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
Conflicts:
	templates/page.html
2013-06-21 16:41:39 -04:00
Michael
bab6548929 Merge pull request #116 from Macil/hardlimits
Adds image_hard_limit and reply_hard_limit options
2013-06-18 10:46:25 -07:00
Michael
a087ab72db Merge pull request #115 from Macil/miscfixes
Miscellaneous fixes
2013-06-18 10:45:13 -07:00
Michael
9ca0aa37f5 Merge pull request #114 from Macil/rtlfix
Fix display issues with RTL control characters in post names, subjects, ...
2013-06-18 10:41:31 -07:00
Michael
6c367c8f31 Merge pull request #113 from Macil/tzfix
Output times in UTC
2013-06-18 10:40:56 -07:00
Macil Tech
aa881058a3 Adds image_hard_limit and reply_hard_limit options.
Also reworks the numPosts() function and uses it elsewhere too.
2013-06-18 12:21:41 -05:00
Macil Tech
b872cf55e4 m and n dash fix 2013-06-18 12:07:30 -05:00
Macil Tech
01f1c89f7c Fix "Undefined index: sticky" and "locked" errors on new thread creation. 2013-06-18 12:00:26 -05:00
Macil Tech
66965b3655 Fix broken entity removal in post truncation. 2013-06-18 11:16:15 -05:00
Macil Tech
821f40a794 Fix result page after installing theme getting doubled up. 2013-06-18 11:14:02 -05:00
Macil Tech
42aec516f6 Fix openBoard and boardTitle functions using same caching keys.
Added getBoardInfo function that's used by both of the above functions,
and can get a board's info without loading it.
2013-06-18 11:13:43 -05:00
Macil Tech
b992532c32 pm_snippet() should probably use mb_substr if it's using mb_strlen. 2013-06-18 11:12:31 -05:00
Macil Tech
7912f13319 Output times in UTC.
Let the client localize the times with js/local-time.js themselves. No
one cares what the server timezone is.

This fixes a bug where posts made in a different daylight savings mode
have their times displayed off by an hour. Their times would be rendered
to the server's own timezone area correctly, but then the server's
*current* utc-offset would be appended, which wouldn't match up.
2013-06-18 11:10:39 -05:00
Macil Tech
8b14cbb091 Fix display issues with RTL control characters in post names, subjects, and filenames. 2013-06-18 11:07:47 -05:00
Macil Tech
3d9f318397 Fix PM count caching.
cache::get() returns null if the key wasn't found (at least when using
the Redis cache backend).
2013-06-18 11:02:45 -05:00
55ch
0ea05236d5 Brazilian Portuguese translation for Tinyboard 2013-06-15 07:07:16 -04:00
czaks
f6701dfb74 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard 2013-05-26 17:53:00 -04:00
undido
cd3a05a9d1 update config.php config for unban limit
Adding config and error for unban list when a user tries to unban more users than they are allowed too.
2013-04-16 19:14:51 -03:00
undido
5ae9fa3c1f update to pages.php minor exploit
A lot of bans can be removed from a tinyboard database because it isn't limited A staff member could select 100 users all at once with a simple javascript function and unban them all this needs to be limited because a staff member on an image board if they feel hostile they can just remove all bans on the tinyboard site easily without being limited to how many people they can unban at a time, this adds an option to limit it.
2013-04-16 19:09:58 -03:00
Fredrick
b09a46fe99 Fix per-board name not being used 2013-03-20 07:46:48 -04:00
Fredrick
0b4487aafa Fix truncation issue by no longer using HTML entities for Unicode characters 2013-03-17 07:00:55 -04:00
Michael Save
41b3638fbf Mod log in ?/IP (ie. ban history) 2013-03-16 18:27:24 +11:00
Michael Save
642fbb6b78 Fix: Critical security vulnerability 2013-03-15 00:40:02 +11:00
Michael Save
3ae53c0b78 ... 2013-01-30 05:07:09 +11:00
Michael Save
6ff062be0e Instead of showing $config['error']['malformed'] on corrupt session, just go straight to the login form 2013-01-30 04:45:38 +11:00
Marcin Łabanowski
6c431d2dae Merge branch 'master' of https://github.com/savetheinternet/Tinyboard 2013-01-29 14:31:35 +01:00
Michael Save
6b7be343d3 Merge branch 'master' of github.com:savetheinternet/Tinyboard 2013-01-29 22:17:46 +11:00
Michael Save
43fd36dd05 Use === operator in authentication. 2013-01-29 22:13:35 +11:00
Michael Save
242841122b Don't always redirect to dashboard on login 2013-01-29 22:11:33 +11:00
Marcin Łabanowski
cf49306488 Merge branch 'master' of https://github.com/savetheinternet/Tinyboard 2013-01-28 13:29:21 +01:00