Commit Graph

1702 Commits

Author SHA1 Message Date
8chan
7911c374e8 Public action logs commit (log.php)
Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now.

===================================
Also: backports 351375185e5 (early 404)
2016-05-06 15:44:26 +02:00
8chan
6dd1420f91 Add event to quote backlinks 2016-05-06 15:15:17 +02:00
8chan
ce3ce4f1b6 Fix *0 secure tripcodes caused by accidentally feeding + signs to crypt() 2016-05-06 15:14:55 +02:00
8chan
7831da83fc New event: rebuildpost, allows you to bind events to ?/edit 2016-05-06 15:13:27 +02:00
Fredrick Brennan
b476b66007 [BUG] Image reject repost board option now also affects YT embeds 2016-05-06 15:12:08 +02:00
czaks
126ee42b9d better rules for stripping combined chars, based on 45c0d327619 by @ctrlcctrlv 2016-05-06 14:34:42 +02:00
czaks
33ef3f9b01 synchronize catalog_link 2016-05-06 14:14:22 +02:00
8chan
7a7574bdca SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2016-05-06 12:43:25 +02:00
8chan
6da7f4d25a No more country flags in <title> 2016-05-06 12:40:37 +02:00
8chan
632d0a76d0 Display placeholder if no file in catalog/theme.php; czaks: fix the code a bit 2016-05-06 12:37:00 +02:00
8chan
6b04b3c671 Fix post deletion 2016-05-05 13:21:09 +02:00
Fredrick Brennan
8943bb0bb3 Rewrite report system due to flooding 2016-05-05 12:57:52 +02:00
czaks
cd01191072 those parts are extraneous 2016-05-05 11:45:29 +02:00
8chan
3eb755ee7e Move login check in inc/mod/auth.php to a function
This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords)
2016-05-05 11:40:52 +02:00
8chan Admin
93f748e6a8 Security: capitalization of mods username is significant 2016-05-05 11:39:12 +02:00
czaks
d310abc95c Merge branch 'master' of github.com:vichan-devel/vichan 2016-05-05 10:54:09 +02:00
czaks
abe4bdd6ae fixup 2016-05-05 10:52:58 +02:00
czaks
77176faece enable javascript in mod panel 2016-05-05 09:56:54 +02:00
czaks
a42256b296 locale cache: fix a bug when perms are done wrong 2016-05-05 08:43:34 +02:00
czaks
36b78e5f98 fix for editor highlighting 2016-05-05 08:40:13 +02:00
czaks
dcf5d699bd simplify the md5 execution logic 2016-05-05 08:22:19 +02:00
czaks
9768161327 simplify the code a bit 2016-05-05 07:51:55 +02:00
czaks
7c3126866c ease the migration process for the previous security patch (by introducing another migration); restore php 5.4 compatibility (introducing a polyfill system) 2016-05-05 06:43:22 +02:00
czaks
caaf741691 [SECURITY] keep up with modern password hashing standards 2016-04-22 05:35:43 +02:00
Michael Walker
9f00630b40 Display banned post contents if reason does not contain cp 2016-02-11 15:21:54 +00:00
Matthieu
d2de4419bd Added: config option to hide email in post. (prevent emailfag but let the possibility to sage and noko) 2016-01-26 00:50:55 +01:00
Michael Walker
d46428b5b7 Trim leading newlines and trailing whitespace from code blocks. 2016-01-03 21:05:31 +00:00
Michael Walker
692ca79d8b Don't include post messages in public banlist 2015-10-17 23:57:36 +01:00
Michael Walker
166ba2a0a2 Merge remote-tracking branch 'vichan/master' 2015-09-12 21:03:54 +01:00
czaks
6d4e756240 fix a bug for some bad database state. thanks Seisatsu for testing 2015-09-11 12:49:42 +02:00
czaks
706feeddff fix cache_config: webms were thumbnailed twice and with the latest addition, they couldn`t resize at all 2015-08-11 04:51:27 +02:00
czaks
a54488d900 Merge branch 'master' of github.com:vichan-devel/Tinyboard 2015-08-11 03:47:54 +02:00
czaks
1136cc0e44 reflect in readme, that we support .mp4 files as well now 2015-08-11 03:47:44 +02:00
czaks
ccd00c497c a stricter check for webm processing 2015-08-11 03:46:02 +02:00
Marcin Łabanowski
11d4cb0f4f Merge pull request #155 from 27chan/patch-7
Add extension mp4
2015-08-11 03:44:51 +02:00
Marcin Łabanowski
b0eb49de82 Merge pull request #160 from 27chan/patch-10
Add extension mp4
2015-08-11 03:39:22 +02:00
27chan
219c1987a9 Add extension mp4 2015-08-10 22:25:09 -03:00
27chan
f1cbbbc15a Add extension mp4 2015-08-10 22:15:21 -03:00
27chan
601c8cebc9 Add extension mp4 2015-08-10 22:13:42 -03:00
czaks
d3d167affb SECURITY: XSS fix for youtube.js/metacafe embed 2015-07-08 16:26:58 +02:00
Matěj Grabovský
b25b443e55 Fix a few fatal errors 2015-06-13 22:34:14 +02:00
Anonke
3f29bdfac9 the poster IDs were showing in API despite being disabled 2015-05-30 20:46:43 +02:00
Simon McFarlane
4b40f69a4e Merge remote-tracking branch 'upstream/master' into vichan-merge 2015-05-29 01:34:53 -07:00
Michael Walker
61d9dacdfb When banning/deleting a post, return to the thread, not the board index (unless deleting the OP) 2015-05-10 13:22:53 +01:00
Michael Walker
649255c9b9 When deleting a post, return to the thread, not the board index (unless deleting the OP) 2015-05-10 03:01:55 +01:00
Michael Walker
4184fdec6e Pass the thread ID when banning/deleting 2015-05-10 02:56:48 +01:00
czaks
2d9214ac63 version check should point at engine.vichan.net and not tinyboard.org actually 2015-04-23 08:18:36 +02:00
czaks
4c1d2f924c fix error while installing themes; thanks xixi 2015-04-23 07:57:52 +02:00
Marcin Łabanowski
4014682882 fileboard support 2015-04-22 06:06:34 +02:00
czaks
1b16e97f67 [code] fix regexps 2015-04-12 03:08:40 +02:00
czaks
197d5f236f [code] tag support 2015-04-12 01:14:35 +02:00
8chan
f2848f2242 Update GeoIP database 2015-04-10 15:03:35 +02:00
czaks
11dfc8bbdc fs cache backend: silence the error 2015-04-06 22:51:02 +02:00
czaks
094f60d34d try_smarter: fix two bugs. 1. uncovered by the second, during a bump only the page the thread was on and first page were rebuild, despite threads rearranging their positions on the remaining pages. happening always. 2. during smart build, the page wasn`t ordered to be rebuilt 2015-04-06 18:59:33 +02:00
Marcin Łabanowski
8fcb9195c8 Merge pull request #137 from lewdchan/master
made the define_groups function play nice on hhvm
2015-04-05 20:51:51 +02:00
czaks
c50635c700 Merge branch 'master' of github.com:vichan-devel/Tinyboard 2015-04-05 20:37:40 +02:00
czaks
9831b582fa groups were not defined 2015-04-05 20:25:57 +02:00
czaks
6fd4eb2add fix a locale issue 2015-04-05 20:23:57 +02:00
czaks
f053450edf cache_config: fix debug notice 2015-04-05 20:04:27 +02:00
czaks
45f11d1d78 indent the file (inc/functions.php) after the latest changes 2015-04-05 19:12:41 +02:00
czaks
dc2928a14d cache_config preliminary release 2015-04-05 18:48:53 +02:00
czaks
1d28b4be4d cache.php: fs cache 2015-04-05 17:13:55 +02:00
czaks
b78b3db010 uncache themes on settings change 2015-04-05 16:59:04 +02:00
czaks
758cb94e01 optimization: locale caching, so we don`t have to reparse instance-config every single time 2015-04-05 16:52:35 +02:00
czaks
71ef3430fc optimization: get rid of one more sql query related to installed themes 2015-04-05 16:38:16 +02:00
czaks
34eeaccea9 optimization: we don`t need bans.php most of the time and bans.php has big dependencies 2015-04-05 16:31:20 +02:00
czaks
cbbebcd20c optimization: if gettext.so is loaded, we don`t need the fallback implementation 2015-04-05 16:26:32 +02:00
Jayme Brereton
fa2e6cfa80 made the define_groups function play nice on hhvm 2015-04-05 20:14:58 +09:30
Jason Puglisi
8cf28682e7 Removed tab at start of api.php to fix ban list and possibly other stuff 2015-04-03 08:03:15 -04:00
czaks
67db118f1e Revert "Revert "smart_build: buildThread" (for a moment, something b0rks)"
This reverts commit b246daa191.
2015-04-02 20:30:57 +02:00
czaks
99706835c2 Revert "Revert "smart_build for buildIndex""
This reverts commit cfb2f55b7a.
2015-04-02 20:29:43 +02:00
czaks
cfb2f55b7a Revert "smart_build for buildIndex"
This reverts commit 55277ce383.
2015-04-02 19:36:55 +02:00
czaks
b246daa191 Revert "smart_build: buildThread" (for a moment, something b0rks)
This reverts commit f2a74812f0.
2015-04-01 18:44:01 +02:00
czaks
f2a74812f0 smart_build: buildThread 2015-04-01 18:43:48 +02:00
czaks
14671e0535 functions.php fix: after_open_board support; so that we may disable smart_build immediately after open_board 2015-04-01 18:13:32 +02:00
czaks
55277ce383 smart_build for buildIndex 2015-04-01 18:11:08 +02:00
czaks
d4892aca12 fix one of the previous commits: fix api_global 2015-04-01 17:30:06 +02:00
czaks
e4e01e4573 smart build: define configuration variables 2015-04-01 17:16:30 +02:00
czaks
4030c42bb4 add a global_api variable for buildIndex 2015-04-01 17:07:24 +02:00
czaks
deefe8299b unlink a .gz version of a file if it exists 2015-04-01 16:56:17 +02:00
czaks
7fd8c75450 dont rebuild a page, when not needed, even if it doesnt exist 2015-04-01 16:53:28 +02:00
czaks
5a9af83ba6 better slugify support for api 2015-03-31 05:50:52 +02:00
czaks
e35d261ff4 enable embed field for api 2015-03-31 05:32:38 +02:00
8chan
4a22ee9245 Extra files and IDs in API
Conflicts:
	inc/api.php
2015-03-31 05:28:08 +02:00
czaks
300e9e7e71 fix some png images being discarded 2015-03-31 05:20:00 +02:00
czaks
5d8e023fc4 remove tinyboard special markup from slugs; thanks stigma for reporting 2015-03-30 06:26:53 +02:00
Matěj Grabovský
6b21689dcd Fix errors about uninitialized config during install 2015-03-27 14:30:43 +01:00
czaks
10f93d0d43 implement a protection against transparent proxies 2015-03-24 05:19:25 +01:00
czaks
3851087dce slug size should be configurable 2015-03-12 00:03:22 +01:00
Marcin Łabanowski
10a8219965 enable a basic cache by default; notify me if it breaks your chan 2015-03-12 00:00:59 +01:00
czaks
bf1b6103cf Merge branch 'master' of github.com:vichan-devel/Tinyboard 2015-03-10 14:22:47 +01:00
czaks
6c4d3941fa api fix 2015-03-10 14:22:29 +01:00
czaks
4bf525599e ... 2015-03-10 14:19:36 +01:00
czaks
a2544bc596 ... (cites) 2015-03-10 14:16:27 +01:00
czaks
50b80e9e24 ... (slug api) 2015-03-10 14:06:44 +01:00
czaks
9f34d334d3 .. 2015-03-10 13:52:31 +01:00
czaks
2f7aeec531 ... 2015-03-10 13:48:33 +01:00
czaks
58b60f0aa4 ... 2015-03-10 13:46:34 +01:00
czaks
7623de9e2f ... (cache) 2015-03-10 13:42:10 +01:00
czaks
d690567b44 ... (minor fix for locales) 2015-03-10 13:16:16 +01:00