1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2025-01-24 15:12:18 +01:00

3500 Commits

Author SHA1 Message Date
unknown
9920a51ff5 - Resolved board creation script throwing SQL error for mismatched column count.
- Resolved warnings would be thrown if inc/dnsbls.php did not exist.
- Resolved problem where shell_exec_error was incorrectly reporting a success in instances where 'md5sum' was not supported, resulting in "'md5sum'" literally being recorded as the file hash. This then lead to hex2bin throwing an error on page load, preventing access to threads (among other problems).
2014-10-17 02:32:39 -05:00
8chan
d50b86a7c2 underline 2014-10-16 18:53:59 -07:00
8chan
33371bee9f Allow IP less to show more posts 2014-10-16 18:53:52 -07:00
clsr
7e3fd0dcc5 Fix expanded tabs 2014-10-16 17:26:58 +02:00
clsr
6073c9e73a Fix API: Swap image width/height, make replies an integer, fix original filename 2014-10-16 17:08:39 +02:00
8chan
9bf6ebec43 SECURITY: IPs were still being shown on IP_less in a few places 2014-10-12 16:34:34 -07:00
8chan
6052ed8d3d SECURITY: imagemagick/graphicsmagick was ignoring all errors
So, in a much older patch I had a problem where an incorrect RGB
profile would make image uploads fail. I fixed this by using strpos
against the error message...but didn't check the return value
correctly.

That means that any error from gm/im was ignored. This caused people
to upload too large images and flood /b/ with 1 x 10000 pixel images

My fault, patched now. Sorry about that.

Conflicts:
	inc/image.php
2014-10-12 10:23:03 +02:00
8chan
0c570e2ca5 SECURITY: imagemagick/graphicsmagick was ignoring all errors
So, in a much older patch I had a problem where an incorrect RGB
profile would make image uploads fail. I fixed this by using strpos
against the error message...but didn't check the return value
correctly.

That means that any error from gm/im was ignored. This caused people
to upload too large images and flood /b/ with 1 x 10000 pixel images

My fault, patched now. Sorry about that.
2014-10-11 15:41:16 -07:00
8chan
803c76a800 .x.x less confusing...will change to less_ip eventually 2014-10-11 20:37:58 +02:00
czaks
2359f82385 Merge https://github.com/vichan-devel/vichan 2014-10-11 20:13:31 +02:00
czaks
5d1b426fa3 fix bans.php on removing a ban by a semi-privileged mod 2014-10-11 20:13:05 +02:00
8chan
2e694b8b1c Khorne in #8chan on irc.rizon.net contributed this thread watcher.
Can't properly attribute the code to him because he doesn't want it
connected to his Github account for some reason.
2014-10-11 10:21:00 -07:00
8chan
a838e2986c Only show IPs in ?/bans if mod has show_ip 2014-10-10 09:52:23 -07:00
8chan
f07cf32001 Don't show host on IP_less
Sometimes there isn't one so you get weird stuff like

127.0.x.x
x.x.0.1

revealing the whole IP. Oops.
2014-10-09 20:26:40 -07:00
8chan
da0ea45730 Merge branch 'master' of https://github.com/ctrlcctrlv/8chan 2014-10-09 21:40:24 -04:00
8chan
fe9297aaaa Attempt to hide IPs from board volunteers 2014-10-09 21:39:37 -04:00
8chan
f95cc5d8bf .x.x less confusing...will change to less_ip eventually 2014-10-09 16:59:58 -07:00
8chan
de7c089d7b this download all script doesnt even work 2014-10-09 16:58:00 -07:00
8chan
e4a4415308 Merge https://github.com/ctrlcctrlv/8chan 2014-10-08 19:11:56 -07:00
czaks
3e88cc23fb Merge vichan 2014-10-09 04:09:44 +02:00
czaks
3a552e5b76 hopefully fix locales 2014-10-09 04:09:30 +02:00
8chan
4bd6ebd7aa Merge https://github.com/ctrlcctrlv/8chan 2014-10-08 19:00:13 -07:00
czaks
d3a52f6aed Merge vichan 2014-10-09 03:57:38 +02:00
czaks
dfd05e88f9 possible fix of themes` interactions 2014-10-09 03:57:18 +02:00
8chan
162d9e8210 Merge ../http
Conflicts:
	templates/mod/settings.html
2014-10-08 18:21:38 -07:00
8chan
f4b93f8b1c Enable infinite scroll by default 2014-10-08 18:20:47 -07:00
czaks
3a48cbc790 8chan: allow users to opt out of public ban system 2014-10-09 03:10:47 +02:00
czaks
217f25c51d fix incorrectly applied permissions 2014-10-09 02:08:15 +02:00
czaks
99374eac32 8chan new banlist customization 2014-10-09 02:04:31 +02:00
czaks
ef3bb46876 bans.php: surpress error 2014-10-09 02:00:31 +02:00
czaks
b1c76ba120 fix a bad merge 2014-10-09 01:14:14 +02:00
czaks
e678c178ac display capcode, if you can`t show username 2014-10-08 23:42:24 +02:00
czaks
643de18d64 Merge with a private vichan branch
Conflicts:
	inc/bans.php
	inc/mod/pages.php
2014-10-08 23:32:01 +02:00
czaks
9b3fa77719 new banlist implementation; also includes a public banlist 2014-10-08 23:23:59 +02:00
8chan
3928a3212a Merge branch 'master' of https://github.com/ctrlcctrlv/8chan 2014-10-08 20:11:36 +00:00
8chan
bf644d1a22 This threadscroll script is glitchy as fuck 2014-10-08 11:35:56 -07:00
8chan
d58adad48d SECURITY: Move indexed option to table...fixes unindexed boards appearing in search/random 2014-10-07 20:54:00 -07:00
Marcin Łabanowski
6a6250eb77 Merge pull request #155 from hugofragata/master
Added download-all feature
2014-10-08 05:53:33 +02:00
8chan
ba88035109 Edited at feature...add edited_at DATETIME NULL to all tables to use it. 2014-10-07 17:35:50 -07:00
8chan
69ad4f26db config update 2014-10-07 17:33:32 -07:00
Fredrick Brennan
52a662a395 Merge pull request #160 from wopot/patch-2
lineup 4 if´s with || (OR)
2014-10-07 11:24:56 -04:00
8chan
3da946268a SECURITY: Poster IDs could reveal IPs across boards
Imagine the following scenario:

Alice has permission to view IPs on board A, and Bob has permissions to view IPs on board B.

If the post number was to match, and the same IP made both posts, A and B could trade user IPs which they wouldn't normally have permission to do so. This weird bug has already creeped up on 8chan.co and is now patched.
2014-10-07 08:16:21 -07:00
wopot
9c47ebed03 lineup 4 if´s with || (OR) 2014-10-07 16:33:27 +02:00
hugofragata
acf4c3bb8b Modified inc/instance-config.php
Modified inc/instance-config.php to include js/download-all.js and
js/jszip.min.js
2014-10-07 15:00:40 +01:00
hugofragata
7239350e69 Revert "Added download-all feature"
This reverts commit 12a8f1a672f8c6ce8f46b6267e5d836d379d9514.
2014-10-07 14:46:50 +01:00
8chan
c4dc3f4d47 Fix spoiler image not working 2014-10-07 04:33:57 +02:00
8chan
db55a3040f Make inline.js work in mod panel 2014-10-06 18:36:19 -07:00
8chan
ed94a1671d Merge https://github.com/ctrlcctrlv/8chan
Conflicts:
	post.php
2014-10-06 18:12:50 -07:00
8chan
47e81b7e9b Fix spoiler image not working 2014-10-06 18:02:50 -07:00
8chan
345e5aa3a4 Featured boards now based on uniques 2014-10-06 18:01:01 -07:00