1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-12-11 15:26:08 +01:00
Commit Graph

6961 Commits

Author SHA1 Message Date
8chan
6052ed8d3d SECURITY: imagemagick/graphicsmagick was ignoring all errors
So, in a much older patch I had a problem where an incorrect RGB
profile would make image uploads fail. I fixed this by using strpos
against the error message...but didn't check the return value
correctly.

That means that any error from gm/im was ignored. This caused people
to upload too large images and flood /b/ with 1 x 10000 pixel images

My fault, patched now. Sorry about that.

Conflicts:
	inc/image.php
2014-10-12 10:23:03 +02:00
8chan
74801751f3 Merge https://github.com/ctrlcctrlv/8chan 2014-10-11 22:43:40 +00:00
8chan
0c570e2ca5 SECURITY: imagemagick/graphicsmagick was ignoring all errors
So, in a much older patch I had a problem where an incorrect RGB
profile would make image uploads fail. I fixed this by using strpos
against the error message...but didn't check the return value
correctly.

That means that any error from gm/im was ignored. This caused people
to upload too large images and flood /b/ with 1 x 10000 pixel images

My fault, patched now. Sorry about that.
2014-10-11 15:41:16 -07:00
czaks
c2d829a52c Merge https://github.com/vichan-devel/vichan 2014-10-11 20:42:08 +02:00
8chan
b2cbb70da3 Khorne in #8chan on irc.rizon.net contributed this thread watcher.
Can't properly attribute the code to him because he doesn't want it
connected to his Github account for some reason.

Conflicts:
	inc/instance-config.php
2014-10-11 20:41:40 +02:00
8chan
f3e2131f06 Actually fix new_post event inline.js 2014-10-11 20:39:25 +02:00
8chan
1506bcc834 Make inline work on new_post event 2014-10-11 20:38:02 +02:00
8chan
803c76a800 .x.x less confusing...will change to less_ip eventually 2014-10-11 20:37:58 +02:00
czaks
2359f82385 Merge https://github.com/vichan-devel/vichan 2014-10-11 20:13:31 +02:00
czaks
5d1b426fa3 fix bans.php on removing a ban by a semi-privileged mod 2014-10-11 20:13:05 +02:00
Fredrick Brennan
177b145213 Merge pull request #176 from VladVP/master
Added flag icon for Lojban language
2014-10-11 13:22:21 -04:00
8chan
2e694b8b1c Khorne in #8chan on irc.rizon.net contributed this thread watcher.
Can't properly attribute the code to him because he doesn't want it
connected to his Github account for some reason.
2014-10-11 10:21:00 -07:00
8chan
296c65ed2f faq update 2014-10-11 10:20:14 -07:00
8chan
2810498c19 Forgot some flags, close ctrlcctrlv#176 2014-10-11 10:19:51 -07:00
VladVP
14ea4958e5 Added flag icon for Lojban language 2014-10-11 13:18:14 +02:00
8chan
f7c1c63f78 Actually fix new_post event inline.js 2014-10-10 11:13:26 -07:00
8chan
9ddacf0ab4 settings.html i18n 2014-10-10 09:53:10 -07:00
8chan
95e99d75ba This bot check is weird and keeps breaking when locales do 2014-10-10 09:52:51 -07:00
8chan
a838e2986c Only show IPs in ?/bans if mod has show_ip 2014-10-10 09:52:23 -07:00
8chan
593c25b77b Force poster IDs in mod.php 2014-10-09 20:27:46 -07:00
8chan
f07cf32001 Don't show host on IP_less
Sometimes there isn't one so you get weird stuff like

127.0.x.x
x.x.0.1

revealing the whole IP. Oops.
2014-10-09 20:26:40 -07:00
8chan
da0ea45730 Merge branch 'master' of https://github.com/ctrlcctrlv/8chan 2014-10-09 21:40:24 -04:00
8chan
fe9297aaaa Attempt to hide IPs from board volunteers 2014-10-09 21:39:37 -04:00
8chan
d26762af15 Make inline work on new_post event 2014-10-09 17:48:23 -07:00
8chan
426f33ca3b Update FAQ 2014-10-09 17:00:06 -07:00
8chan
f95cc5d8bf .x.x less confusing...will change to less_ip eventually 2014-10-09 16:59:58 -07:00
8chan
1ebf9c4d8c Maybe fix locales? 2014-10-09 16:59:40 -07:00
8chan
de7c089d7b this download all script doesnt even work 2014-10-09 16:58:00 -07:00
8chan
6267cdcf9a Fix 2014-10-09 03:19:23 +00:00
8chan
e4a4415308 Merge https://github.com/ctrlcctrlv/8chan 2014-10-08 19:11:56 -07:00
czaks
3e88cc23fb Merge vichan 2014-10-09 04:09:44 +02:00
czaks
3a552e5b76 hopefully fix locales 2014-10-09 04:09:30 +02:00
8chan
4bd6ebd7aa Merge https://github.com/ctrlcctrlv/8chan 2014-10-08 19:00:13 -07:00
czaks
d3a52f6aed Merge vichan 2014-10-09 03:57:38 +02:00
czaks
dfd05e88f9 possible fix of themes` interactions 2014-10-09 03:57:18 +02:00
8chan
162d9e8210 Merge ../http
Conflicts:
	templates/mod/settings.html
2014-10-08 18:21:38 -07:00
8chan
f645b8a999 Fix boards index setting 2014-10-08 18:21:00 -07:00
8chan
f4b93f8b1c Enable infinite scroll by default 2014-10-08 18:20:47 -07:00
czaks
0c799e612a update install.sql boards table schema 2014-10-09 03:16:07 +02:00
czaks
79a0da5c86 Merge branch 'master' of https://github.com/ctrlcctrlv/8chan 2014-10-09 03:11:27 +02:00
czaks
3a48cbc790 8chan: allow users to opt out of public ban system 2014-10-09 03:10:47 +02:00
czaks
143db01fb9 keep stylesheets/board/ directory 2014-10-09 03:05:52 +02:00
Fredrick Brennan
510d1bcf84 Merge pull request #168 from czaks/master
New banlist & infinite scroll
2014-10-08 20:15:28 -04:00
czaks
217f25c51d fix incorrectly applied permissions 2014-10-09 02:08:15 +02:00
czaks
f3e132a429 Merge vichan 2014-10-09 02:04:54 +02:00
czaks
99374eac32 8chan new banlist customization 2014-10-09 02:04:31 +02:00
czaks
74a40b72ed ban-list.js: vstaff 2014-10-09 02:03:35 +02:00
czaks
ef3bb46876 bans.php: surpress error 2014-10-09 02:00:31 +02:00
czaks
a94f527bd3 Merge vichan 2014-10-09 01:50:32 +02:00
czaks
948695e73c lel, this one will do 2014-10-09 01:49:29 +02:00