Michael Foster
e740f45ed1
Bugfix: HTML injection in post editing (introduces and fixes yet another bug)
2013-07-31 21:24:17 -04:00
czaks
164d0e6e3b
Revert "markup modifiers: make it even harder to escape"
...
This reverts commit d7ea47a91f
.
2013-07-31 21:22:57 -04:00
czaks
07f8aa8c4c
Revert "facilitate using markup modifiers multiple times; make raw html not consume the whole post"
...
This reverts commit e7dd0bbc4a
.
2013-07-31 21:22:32 -04:00
czaks
ef9ede073f
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
inc/functions.php
2013-07-31 21:03:13 -04:00
Michael Foster
d30d94960c
Allow public ban messages on raw HTML posts
2013-07-31 21:02:26 -04:00
Michael Foster
286524ca46
Newline before <tinyboard ban message>
2013-07-31 20:54:20 -04:00
Michael Foster
da5048a0e4
SQL cleanup
2013-07-31 20:51:43 -04:00
czaks
644f1d90cb
fix previous commit; markup is called via reference
2013-07-31 20:41:56 -04:00
czaks
08e7192377
markup modifiers: there was a plan for adding markup to ban reasons, but assignment was missing; escape markup there too
2013-07-31 20:33:27 -04:00
czaks
99427246e1
markup modifiers: make it even harder to escape
2013-07-31 20:13:19 -04:00
czaks
ada248ce4a
facilitate using markup modifiers multiple times; make raw html not consume the whole post
2013-07-31 20:11:11 -04:00
czaks
2c7fa51012
fix post editing for tinyboard markup
2013-07-31 19:50:25 -04:00
czaks
0eaf52583f
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
templates/thread.html
2013-07-31 19:25:04 -04:00
Michael Foster
2b74f8b37d
Markup modifiers: raw HTML
2013-07-31 19:18:55 -04:00
Michael Foster
be11041471
Markup modifiers. Fix issue #66 (public ban message lost when rebuilding post body)
2013-07-31 18:59:54 -04:00
Michael Foster
89285fd7c3
Fix issue #72
2013-07-31 18:29:09 -04:00
czaks
2c8bd71a9a
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-07-31 17:05:53 -04:00
Michael Foster
19b719f0af
Fix last commit
2013-07-31 17:04:36 -04:00
Michael Foster
7619d23499
Only run SQL query to count threads if we really need to
2013-07-31 17:02:42 -04:00
czaks
625a7961bd
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-07-31 17:02:30 -04:00
Michael Foster
44910c34c3
Fix last commit; Make Tinyboard Twig extension more mb-safe
2013-07-31 16:38:09 -04:00
Michael Foster
d447c0bd72
Issue #125
2013-07-31 16:22:27 -04:00
czaks
ed2f3358db
fix merge
2013-07-31 15:01:44 -04:00
czaks
7e58e50516
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
inc/config.php
inc/display.php
inc/functions.php
inc/image.php
js/expand.js
js/hide-threads.js
js/local-time.js
js/smartphone-spoiler.js
templates/header.html
templates/index.html
templates/main.js
templates/page.html
templates/post_reply.html
templates/post_thread.html
templates/thread.html
2013-07-31 14:54:20 -04:00
Michael Foster
cf7f7cc9d6
i18n some more strings in inc/config.php
2013-07-31 06:56:57 -04:00
Michael Foster
18017ff761
Javascript l10n: Work without $config['additional_javascript_compile']
2013-07-31 06:54:53 -04:00
Michael Foster
0f7777e4a6
Disallow board names which are too large for the filesytem to handle
2013-07-31 06:40:57 -04:00
Michael Foster
f0e3d62b0f
Undo 7e0cec for now. Will restore later once I resolve issues
2013-07-31 05:03:50 -04:00
czaks
1924e15354
js i18n: finish implementation with addition of the compiled locale strings file to additional javascripts
2013-07-31 04:57:50 -04:00
czaks
fb1968c0b9
i18n one more string in inc/functions.php
2013-07-31 04:56:42 -04:00
czaks
e968fd6ce9
localise time values
2013-07-31 04:55:34 -04:00
czaks
ef68982c79
i18n some strings in inc/config.php
2013-07-31 04:54:08 -04:00
Michael Foster
e06a800027
Convert to UNIX line endings
2013-07-31 04:28:26 -04:00
Marcin Łabanowski
247e183077
Facilitate styling of subboard listings
2013-07-31 04:09:35 -04:00
czaks
a7e0872eb2
Update Polish locale
2013-07-31 04:07:15 -04:00
czaks
23b1ed316e
Update Polish translation
2013-07-31 04:07:03 -04:00
czaks
787c5c3d91
locale: update polish translation
2013-07-31 04:06:57 -04:00
czaks
216e13d59c
Update Polish translation; javascript l10n
2013-07-31 04:06:52 -04:00
55ch
d75cfa2af4
Brazilian Portuguese translation for Tinyboard
2013-07-31 04:05:55 -04:00
Marcin Łabanowski
c2390bb87d
Fixed typo in Polish translation
2013-07-31 04:05:49 -04:00
Marcin Łabanowski
2079df074b
Updated Polish translation (3)
2013-07-31 04:05:44 -04:00
Marcin Łabanowski
e296034aaf
Updated Polish translation (2)
2013-07-31 04:05:38 -04:00
Marcin Łabanowski
ba24892063
Updated Polish translation
2013-07-31 04:05:29 -04:00
Michael Foster
7641c7280a
Small comment change
2013-07-31 04:02:40 -04:00
Marcin Łabanowski
64c986017a
Implement image identification buttons using regex.info/exif, google images and tineye
2013-07-31 04:00:22 -04:00
Michael Foster
84252f1c8a
Rename $config['url_ads'] to $config['link_prefix']
2013-07-31 03:43:01 -04:00
szalej
da43b78b8c
Update inc/config.php
...
hide referrer option
2013-07-31 03:39:51 -04:00
Marcin Łabanowski
61c0280288
url_ads: fix it not working
2013-07-31 03:39:20 -04:00
szalej
f42121db4a
Update inc/functions.php
...
url ads
2013-07-31 03:39:15 -04:00
szalej
8021d22e3b
Update inc/functions.php
...
Hide Referrer (nullrefer.com)
2013-07-31 03:39:10 -04:00
asiekierka
0e909ee96e
Embedding: added vocaroo support
2013-07-31 03:37:09 -04:00
Michael Foster
42bbbb037f
Tiny code clean-up
2013-07-31 03:35:07 -04:00
Marcin Łabanowski
140e34324d
convert+gifsicle: fix previous commit
2013-07-31 03:33:12 -04:00
Marcin Łabanowski
4263bb7dd8
Support for resizing gifs using gifsicle with resizing the rest using ImageMagick
2013-07-31 03:33:06 -04:00
Marcin Łabanowski
e1a5dbbcc2
Fix animated .gif conversion when $config['thumb_ext'] == ''
2013-07-31 03:32:44 -04:00
czaks
6eaff24cdc
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-07-31 03:18:11 -04:00
Michael Foster
a15a37cd4e
Previous commit comment fix
2013-07-31 03:13:51 -04:00
Michael Foster
a8918d3bbe
Markup/quote fix for multibyte
2013-07-31 03:12:06 -04:00
czaks
eed8767039
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
inc/functions.php
inc/mod/pages.php
install.php
js/expand.js
mod.php
2013-07-31 02:30:44 -04:00
Michael Foster
c823bcb2c3
Fix last commit: purge() issue
2013-07-31 02:19:58 -04:00
Michael Foster
ca6cb1fdea
Allow Unicode in board URIs.
2013-07-31 02:08:55 -04:00
Michael Foster
2545acd35f
Ability to hide IP addresses from mod log
2013-07-31 00:04:57 -04:00
Michael Foster
e01b659183
?/IP/: Don't show posts for board user doesn't have access to
2013-07-30 23:30:49 -04:00
Michael Foster
a01f53b4a4
Upgrade to utf8mb4 charset for MySQL server versions above 5.5.3. Keep support for older versions. Fix charsets for multiple columns and tables.
2013-07-30 22:08:56 -04:00
Michael Foster
e2adc0093d
MySQL's utf8 charset only supports up to 3-byte symbols. Insterting four byte symbols (U+010000 to U+10FFFF) can be done maliciously to break HTML mark-up.
...
The ideal solution was to convert to MySQL's utf8mb4 charset, but then we would lose support for MySQL < 5.5.3. In this fix, incompatible characters are encoded as HTML numeric character references (eg. #65536 ) and just stripped from body_nommarkup.
2013-07-30 16:41:10 -04:00
czaks
10f9220657
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
js/inline-expanding.js
2013-07-29 23:17:37 -04:00
Michael Foster
1d5339d7c6
Post search: Search other fields too
2013-07-29 20:20:07 -04:00
czaks
32eca7cfc9
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-07-29 16:26:10 -04:00
Michael Foster
cc7615cf06
Search posts
2013-07-29 16:18:06 -04:00
Michael Foster
4f747172c2
Make font-awesome enabled by default
2013-07-29 12:27:10 -04:00
czaks
f5115f1945
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-07-28 20:51:43 -04:00
Michael Foster
d9dfed5e1c
Fix for last commit
2013-07-28 20:46:00 -04:00
Michael Foster
9a14d32c77
Strip combining characters from Unicode strings (eg. Zalgo)
2013-07-28 20:33:26 -04:00
czaks
055342e6e3
Update Polish locale
2013-07-27 02:01:42 -04:00
czaks
a61c7a32bb
localise time values
2013-07-27 01:50:38 -04:00
czaks
74ee540759
i18n some strings in inc/config.php
2013-07-27 01:33:21 -04:00
czaks
56206315c6
i18n one more string in inc/functions.php
2013-07-27 01:21:30 -04:00
czaks
e1d4b9edf1
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
inc/functions.php
2013-07-26 13:47:53 -04:00
Michael Foster
5359769088
Fix markup overlapping. Issue #124
2013-07-26 11:01:13 -04:00
czaks
2e2469569b
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
install.php
2013-07-24 16:24:20 -04:00
Michael Foster
8daaaf350a
%length% in public ban messages
2013-07-24 11:30:01 -04:00
Michael Foster
d6090fb776
Long overdue: Salted password hashes
2013-07-24 11:15:55 -04:00
czaks
808ae271f4
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
templates/index.html
templates/post_thread.html
templates/thread.html
2013-07-23 10:25:33 -04:00
Michael Foster
e84dceb60c
Option to use font-awesome for sticky/lock icons, etc.
2013-07-23 09:38:42 -04:00
Michael Foster
ad2edf62d7
Option to make stylesheet selections board-specific
2013-07-23 01:35:56 -04:00
czaks
b471c5e35d
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
js/hide-threads.js
2013-07-22 23:33:02 -04:00
Michael Foster
9a35acdd1e
Add custom links to dashboard
2013-07-22 18:30:45 -04:00
Michael Foster
aa598d28d1
Option to check public ban message by default
2013-07-22 17:51:13 -04:00
czaks
73414519ba
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-07-22 10:14:17 -04:00
Michael Foster
f798bb5209
Option to automatically strip EXIF metadata from JPEGs
2013-07-21 15:50:45 -04:00
czaks
600324b137
Remove imgcaptcha, this code is unused in any of our forks and needs work to get here back.
...
Revert "Merge branch 'imgcaptcha' of https://github.com/asiekierka/Tinyboard "
This reverts commit 49afb685c8
, reversing
changes made to 2451a0f29c
.
Conflicts:
js/imgcaptcha.js
2013-07-20 22:47:26 -04:00
czaks
c8a72be62f
post search: missed default config
2013-07-20 22:45:21 -04:00
czaks
52bf3d3623
Merge branch 'master' of github.com:vichan-devel/Tinyboard
2013-07-20 22:33:56 -04:00
czaks
8b3bd5835a
Update Polish translation
2013-07-20 20:23:55 -04:00
Czterooki
5feda30e63
Merge branch 'master' of github.com:vichan-devel/Tinyboard
2013-07-20 18:28:57 -04:00
czaks
274a86dd03
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
templates/themes/sitemap/info.php
2013-07-20 17:28:34 -04:00
Michael Foster
f552849495
Fix permissions with search
2013-07-20 13:15:44 -04:00
Michael Foster
f49e6c9fc3
Search update
2013-07-20 12:05:42 -04:00
Michael Foster
b34ba883c5
Bring back search (searching posts not implemented yet)
2013-07-20 07:50:33 -04:00
Czterooki
acf93cda21
merge with vichan-gold
2013-07-20 00:19:08 -04:00
Czterooki
36e67de205
inc/mod/pages.php
2013-07-20 00:05:08 -04:00
Czterooki
7761dc3fff
config.php
2013-07-20 00:03:45 -04:00
Michael Foster
731cfba33b
Only store video URLs in database, instead of the generated player HTML.
2013-07-19 18:36:12 -04:00
czaks
cef5d586ff
locale: update polish translation
2013-07-18 16:34:22 -04:00
czaks
495c6fa846
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
post.php
2013-07-18 15:19:03 -04:00
Michael Foster
34b5f62600
Themes edit: Split "post" into two seperate actions: "post" (replies) and "post-thread". And add a $board variable.
2013-07-18 12:06:26 -04:00
Michael Foster
072e22bdfa
Update filters to work with new ban table
2013-07-18 10:17:19 -04:00
czaks
49f968fa5d
Merge branch 'master' of https://github.com/kaja47/Tinyboard
2013-07-16 13:40:56 -04:00
czaks
6152ed43bd
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
install.php
templates/index.html
templates/thread.html
2013-07-16 13:02:13 -04:00
Michael Foster
390e529717
More ban stuff: Show whether or not user has "seen" a ban yet in the ban list and on IP address pages. Purge useless expired ban records.
2013-07-16 08:50:39 -04:00
Michael Foster
4340e74569
$config['require_ban_view']: Force users to view the "You are banned" page at least once before letting a ban disappear naturally.
2013-07-16 06:33:37 -04:00
Michael Foster
9825d8611f
Outputting thread subject in header/title (issue #122 )
2013-07-16 02:48:20 -04:00
Michael Foster
4eea9507c3
Automatically dismiss all reports regarding a thread after it is locked.
2013-07-16 02:32:44 -04:00
Michael Foster
a378ff7658
Fix issue #24
2013-07-16 02:27:20 -04:00
Michael Foster
a5e04f0ba7
Add clean() to mod_move function
2013-07-16 01:38:24 -04:00
Michael Foster
5c7e328f5d
Add "write" (files written to) to debug section
2013-07-16 01:21:06 -04:00
Macil Tech
90c2b95f92
Argh, just remove all RTL and LTR control codes in bidi_cleanup.
...
If the name and subject fields both start with RLO characters, then the
subject would be after the name with the old bidi_cleanup.
2013-07-08 13:26:31 -05:00
czaks
1ef6d23e7e
Update Polish translation; javascript l10n
2013-07-03 01:59:36 -04:00
czaks
7503a1a7b6
js i18n: finish implementation with addition of the compiled locale strings file to additional javascripts
2013-07-03 00:25:32 -04:00
K
1b3852c8b4
Add support for 4chan-compatible json API.
2013-07-02 19:52:29 +02:00
czaks
a139c44a80
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
templates/page.html
2013-06-21 16:41:39 -04:00
Michael
bab6548929
Merge pull request #116 from Macil/hardlimits
...
Adds image_hard_limit and reply_hard_limit options
2013-06-18 10:46:25 -07:00
Michael
a087ab72db
Merge pull request #115 from Macil/miscfixes
...
Miscellaneous fixes
2013-06-18 10:45:13 -07:00
Michael
9ca0aa37f5
Merge pull request #114 from Macil/rtlfix
...
Fix display issues with RTL control characters in post names, subjects, ...
2013-06-18 10:41:31 -07:00
Michael
6c367c8f31
Merge pull request #113 from Macil/tzfix
...
Output times in UTC
2013-06-18 10:40:56 -07:00
Macil Tech
aa881058a3
Adds image_hard_limit and reply_hard_limit options.
...
Also reworks the numPosts() function and uses it elsewhere too.
2013-06-18 12:21:41 -05:00
Macil Tech
b872cf55e4
m and n dash fix
2013-06-18 12:07:30 -05:00
Macil Tech
01f1c89f7c
Fix "Undefined index: sticky" and "locked" errors on new thread creation.
2013-06-18 12:00:26 -05:00
Macil Tech
66965b3655
Fix broken entity removal in post truncation.
2013-06-18 11:16:15 -05:00
Macil Tech
821f40a794
Fix result page after installing theme getting doubled up.
2013-06-18 11:14:02 -05:00
Macil Tech
42aec516f6
Fix openBoard and boardTitle functions using same caching keys.
...
Added getBoardInfo function that's used by both of the above functions,
and can get a board's info without loading it.
2013-06-18 11:13:43 -05:00
Macil Tech
b992532c32
pm_snippet() should probably use mb_substr if it's using mb_strlen.
2013-06-18 11:12:31 -05:00
Macil Tech
7912f13319
Output times in UTC.
...
Let the client localize the times with js/local-time.js themselves. No
one cares what the server timezone is.
This fixes a bug where posts made in a different daylight savings mode
have their times displayed off by an hour. Their times would be rendered
to the server's own timezone area correctly, but then the server's
*current* utc-offset would be appended, which wouldn't match up.
2013-06-18 11:10:39 -05:00
Macil Tech
8b14cbb091
Fix display issues with RTL control characters in post names, subjects, and filenames.
2013-06-18 11:07:47 -05:00
Macil Tech
3d9f318397
Fix PM count caching.
...
cache::get() returns null if the key wasn't found (at least when using
the Redis cache backend).
2013-06-18 11:02:45 -05:00
55ch
0ea05236d5
Brazilian Portuguese translation for Tinyboard
2013-06-15 07:07:16 -04:00
czaks
f6701dfb74
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-05-26 17:53:00 -04:00
undido
cd3a05a9d1
update config.php config for unban limit
...
Adding config and error for unban list when a user tries to unban more users than they are allowed too.
2013-04-16 19:14:51 -03:00
undido
5ae9fa3c1f
update to pages.php minor exploit
...
A lot of bans can be removed from a tinyboard database because it isn't limited A staff member could select 100 users all at once with a simple javascript function and unban them all this needs to be limited because a staff member on an image board if they feel hostile they can just remove all bans on the tinyboard site easily without being limited to how many people they can unban at a time, this adds an option to limit it.
2013-04-16 19:09:58 -03:00
Fredrick
b09a46fe99
Fix per-board name not being used
2013-03-20 07:46:48 -04:00
Fredrick
0b4487aafa
Fix truncation issue by no longer using HTML entities for Unicode characters
2013-03-17 07:00:55 -04:00
Michael Save
41b3638fbf
Mod log in ?/IP (ie. ban history)
2013-03-16 18:27:24 +11:00
Michael Save
642fbb6b78
Fix: Critical security vulnerability
2013-03-15 00:40:02 +11:00
Michael Save
3ae53c0b78
...
2013-01-30 05:07:09 +11:00
Michael Save
6ff062be0e
Instead of showing $config['error']['malformed'] on corrupt session, just go straight to the login form
2013-01-30 04:45:38 +11:00
Marcin Łabanowski
6c431d2dae
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-01-29 14:31:35 +01:00
Michael Save
6b7be343d3
Merge branch 'master' of github.com:savetheinternet/Tinyboard
2013-01-29 22:17:46 +11:00
Michael Save
43fd36dd05
Use === operator in authentication.
2013-01-29 22:13:35 +11:00
Michael Save
242841122b
Don't always redirect to dashboard on login
2013-01-29 22:11:33 +11:00
Marcin Łabanowski
cf49306488
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-01-28 13:29:21 +01:00