undido
83401b3a68
update config.php config for unban limit
...
Adding config and error for unban list when a user tries to unban more users than they are allowed too.
2013-04-16 19:14:51 -03:00
undido
b4ff535128
update to pages.php minor exploit
...
A lot of bans can be removed from a tinyboard database because it isn't limited A staff member could select 100 users all at once with a simple javascript function and unban them all this needs to be limited because a staff member on an image board if they feel hostile they can just remove all bans on the tinyboard site easily without being limited to how many people they can unban at a time, this adds an option to limit it.
2013-04-16 19:09:58 -03:00
Fredrick
bb54605eb7
Fix per-board name not being used
2013-03-20 07:46:48 -04:00
Fredrick
53f710060d
Fix truncation issue by no longer using HTML entities for Unicode characters
2013-03-17 07:00:55 -04:00
Michael Save
64ae123739
Mod log in ?/IP (ie. ban history)
2013-03-16 18:27:24 +11:00
Michael Save
1816218c64
Fix: Critical security vulnerability
2013-03-15 00:40:02 +11:00
Michael Save
2051018ba1
...
2013-01-30 05:07:09 +11:00
Michael Save
5661e32b1c
Instead of showing $config['error']['malformed'] on corrupt session, just go straight to the login form
2013-01-30 04:45:38 +11:00
Michael Save
45f9b51ad8
Merge branch 'master' of github.com:savetheinternet/Tinyboard
2013-01-29 22:17:46 +11:00
Michael Save
774e27caf5
Use === operator in authentication.
2013-01-29 22:13:35 +11:00
Michael Save
e5bf2a91fc
Don't always redirect to dashboard on login
2013-01-29 22:11:33 +11:00
Michael
fd33e9eba1
Merge pull request #96 from Macil/redis
...
Add Redis caching support
2013-01-27 21:32:28 -08:00
Michael
f07e1564ae
Merge pull request #97 from Macil/indexstuff
...
index() rework to use only one cache key
2013-01-27 21:32:01 -08:00
Macil Tech
879f20ec72
Reworked index() slightly to make caching simpler and only use one key.
2013-01-27 21:32:22 -06:00
Michael Save
1ad71b33e2
More use of mod log
2013-01-27 19:02:47 +11:00
Michael Save
9a2c33736a
New debug page: ?/debug/sql
2013-01-25 23:56:55 +11:00
Michael Save
764d718f84
?/debug/recent
2013-01-25 22:23:26 +11:00
Michael Save
d5a994537b
New debug mod page: ?/debug/recent (recent posts across all boards)
2013-01-25 22:18:03 +11:00
Michael Save
060be53797
Show "most recent" in anti-spam debug page
2013-01-24 19:25:07 +11:00
Michael Save
85710249b7
Raw HTML editing
2013-01-24 19:16:25 +11:00
Michael Save
85578b7105
Bugfix: Anti-bot check not allowing posting from second page
2013-01-24 04:56:06 +11:00
Michael Save
bceb314ce6
Major fixes and clean-up for edit form
2013-01-24 04:16:09 +11:00
asiekierka
c7c5a65a1f
[EDIT] basic edit support
2013-01-24 03:53:23 +11:00
asiekierka
64e06dfcf3
[EDIT] added dummy form
2013-01-24 03:53:06 +11:00
asiekierka
684b7f8492
[EDIT] added dummy page
2013-01-24 03:52:55 +11:00
Michael Save
b086e47cfc
Em dash and en dash mix-up. Issue #88
2013-01-24 03:37:15 +11:00
Michael Save
cd81ae8ea5
No point using JSON as Cache class already supports objects
2013-01-23 13:42:14 +11:00
Macil Tech
970b6e8376
Add Redis caching support.
...
Compatible with the phpredis extension:
https://github.com/nicolasff/phpredis
2013-01-22 20:22:16 -06:00
Michael Save
edb9999a7d
I'm dumb
2013-01-23 12:48:23 +11:00
Michael Save
b693779d0d
Hopefully a final fix for caching thread previews. This feature was previous disabled because of a bug/confliction.
2013-01-23 12:43:46 +11:00
Michael Save
7a68fc9525
Copyright and license update for 2013.
2013-01-20 21:23:46 +11:00
Macil Tech
0da1c18a7f
Add field_disable_subject and field_disable_reply_subject config options.
2013-01-19 01:37:48 -06:00
Michael
accc3992f3
Merge pull request #93 from Macil/image_reject_repost_in_thread
...
Add image_reject_repost_in_thread option
2013-01-18 23:03:16 -08:00
Macil Tech
3a9ed90c58
Incorrect parameter type.
...
The parameter was bound with the wrong type. I guess the type isn't
enforced judging by how the code still seemed to work, but it probably
should be fixed.
2013-01-19 00:39:30 -06:00
Macil Tech
7eef94e04e
Fix transforming links to mod links in OP posts.
...
Similar regexes are called for threads and posts, but they differed
needlessly, and the thread regex would drop anything between the `<a`
and `href="` parts. This makes them both the same and functional.
2013-01-19 00:39:30 -06:00
Macil Tech
90ada24ddc
Insert into posts table using named columns.
...
Makes it easier to update the posts table schema.
2013-01-19 00:39:29 -06:00
Macil Tech
5628f78970
Made deleting posts by IP more efficient.
...
No longer rebuilds same thread multiple times.
2013-01-19 00:39:29 -06:00
Macil Tech
0092fc62ab
Extend timelimit when rebuilding from mod interface.
...
The rebuild_timelimit config option was not used anywhere since the mod
interface rewrite.
2013-01-19 00:39:29 -06:00
Macil Tech
322b902c8a
Fix incorrect log message when bumplocking and stickying threads.
2013-01-19 00:39:29 -06:00
Macil Tech
fda99305ae
Global missing from mod_logout
2013-01-19 00:39:29 -06:00
Macil Tech
9007640e88
Don't do anything if a mod link is middle-clicked.
...
This lets Chrome users open mod actions in a new tab by middle-clicking,
as Chrome still calls the onclick event when middle-clicking unlike
Firefox.
2013-01-19 00:38:44 -06:00
Macil Tech
91e8547b04
Add image_reject_repost_in_thread option
2013-01-19 00:25:24 -06:00
Macil Tech
00bd5e8d20
Remove buildThread() call from mod_deletefile because deleteFile()
...
already calls it.
2013-01-18 23:13:08 -06:00
Macil Tech
b63d94838d
Do truncation by actual character count.
...
Using substr can cut a multi-byte character in half.
Also, if a long post with many multi-byte characters was reported, then
the mod interface would temporarily extend the body_truncate_char
setting to be sure to cover all of the *characters* in the report, but
this function would interpret body_truncate_char as a number of *bytes*,
so sometimes the end of the report's appended html would be cut off.
2013-01-18 18:26:25 -06:00
Macil Tech
948dfe8555
Don't truncate inside an HTML comment!
2013-01-18 18:26:25 -06:00
Macil Tech
46f50248f0
Don't require closing tag for tags that don't need it.
2013-01-18 18:26:25 -06:00
Michael
df667896cd
Merge pull request #81 from Appe/patch-1
...
Updated Youtube embed code.
2012-12-01 06:40:21 -08:00
Michael Save
30ecfc76e7
Added new events: lock and load-config
2012-11-19 10:28:23 +11:00
Appe
6dd452e10c
Updated Youtube embed code.
2012-11-08 23:58:05 +02:00
Michael Save
209f061eed
Bugfix: [sticky]
2012-09-30 22:56:09 +10:00
Michael Save
23653994ac
Something is broken. Removed that for now.
2012-09-28 04:53:07 +10:00
Michael Save
696c1a05b7
Quick fix relating to last commit
2012-09-28 04:50:25 +10:00
Michael Save
6b7daacdb3
Bugfix: Caching complications with thread preview
2012-09-28 04:46:20 +10:00
Michael Save
db14f9ce15
Bugfix: [F]
2012-09-28 04:00:13 +10:00
Michael Save
ac9296169f
Bugfix: B&D "invalid security token" error
2012-09-28 03:54:32 +10:00
Michael Save
268d9d2c88
bugfix: security token forgotten for ban form in view_ip.html
2012-08-28 02:24:29 +10:00
Michael Save
a7d4a5c3c8
pagination bug for user logs
2012-08-27 22:15:58 +10:00
Michael Save
b105a17b4f
user logs
2012-08-27 22:13:47 +10:00
Michael Save
913010cff5
minor consistency cleanup
2012-08-27 21:50:15 +10:00
Michael Save
eb146d9201
properly tie auth cookies to private salt
2012-08-27 21:45:05 +10:00
Michael Save
28392a12d3
fix "unbuffered queries" bug (issue #75 )
2012-08-27 21:37:21 +10:00
Michael Save
6229b82a43
CSRF protection
2012-08-27 15:19:05 +10:00
Michael Save
a9562075f6
Merge branch 'master' of git://github.com/Yousha/Tinyboard into yousha
2012-08-27 02:40:50 +10:00
Yousha
55470a7ac8
Improved.
2012-08-30 20:05:27 +04:30
Macil Tech
bec9f21787
Antibot make_confusing fix
2012-08-25 07:52:37 -06:00
Michael Save
c5ec20684e
themes
2012-08-13 00:18:13 +10:00
Sebastian Stal
318a9554c2
Remove the double-quote (") from characters used for random inputs
2012-07-29 15:59:42 -07:00
thegentoo
9f4fd8e445
Changed heading markup (changed \s* to [ |\t]*) to fix an issue with it eating line breaks
2012-07-13 10:58:42 +02:00
thegentoo
bdaf619dda
Changed heading markup (changed \s* to [ |\t]*) to fix an issue with it eating line breaks
2012-07-11 17:11:08 -03:00
Sebastian Stal
8b4e097b3c
Share antibot hash across index pages
...
fixes an issue with slow boards and multi-page indexes
2012-07-04 10:17:51 -07:00
Michael Save
8d96bfc3e9
minor change
2012-05-28 17:08:29 +10:00
Michael Save
97dd6ab391
Bugfix: deleting OP image didn't rebuild
2012-05-28 17:08:09 +10:00
Michael Save
e4b6c89375
show number of reports from dashboard; translatable mod panel
2012-05-25 21:40:01 +10:00
Michael Save
0c682f5cc3
Missing buildIndex() after moving threads
2012-05-22 15:25:22 +10:00
Michael Save
bb521da32e
small code cleanup
2012-05-20 20:22:19 +10:00
Michael Save
4a48888b55
Config editor
2012-05-20 20:21:33 +10:00
Michael Save
d3739c48c2
Config editort
2012-05-20 20:20:50 +10:00
Michael Save
0f04117037
Cache unread PM notices
2012-05-20 19:06:27 +10:00
Michael Save
d2c6853ed3
small bugfixes
2012-05-19 20:52:45 +10:00
Michael Save
93c3ceb04d
tiny cleanup
2012-05-19 20:46:05 +10:00
Michael Save
970c6cd95b
[move]
2012-05-19 18:27:45 +10:00
Michael Save
750fed8a47
Custom filters: "trip" condition should be string, not regexp
2012-05-19 12:23:51 +10:00
Michael Save
1593916907
Permissions fix; missing global
2012-05-18 20:30:55 +10:00
Michael Save
ae91636d1d
Bugfix: with disabling config[markup_urls]
2012-05-08 23:59:54 +10:00
Michael Save
9eb3a17faa
Bugfix: ?/ban did the same as ?/ban&delete
2012-05-08 00:49:48 +10:00
Michael Save
2cc17f8d9b
more information in modlog for bans
2012-05-08 00:42:17 +10:00
Michael Save
ad220b725d
Bugfix: the number of successful passes for an anti-spam "hash" was often incorrectly incremented
2012-05-07 23:51:58 +10:00
Michael Save
9058d202ed
Bugfix: the number of successful passes for an anti-spam "hash" was often incorrectly incremented
2012-05-07 23:51:15 +10:00
Michael Save
cf801586f7
$config[ipv6_regex] no longer used
2012-05-07 18:29:54 +10:00
Michael Save
890b541191
custom capcode permissions
2012-05-07 18:22:20 +10:00
Michael Save
e132e4c2b3
a few permissions-related bugs
2012-05-07 14:08:40 +10:00
Michael Save
af61bcaf77
Slightly less crappy stylesheet chooser
2012-05-06 01:37:46 +10:00
Michael Save
a610458720
a lot more improvements
2012-05-06 01:33:10 +10:00
Michael Save
24cc47791c
Bugfix: with previous commit
2012-05-05 18:12:20 +10:00
Michael Save
fa13f0ef35
Bugfix: purge() while in CLI-mode
2012-05-05 18:10:45 +10:00
Michael Save
38130cd113
Bugfix: Fix transparancy with convert
2012-05-05 18:09:36 +10:00
Michael Save
c360c7f673
Fix animated thumbnails with convert
and Imagick
2012-05-05 18:08:44 +10:00
Michael Save
b0eda5dcbc
Bugfix: with previous commit
2012-05-05 18:07:28 +10:00
Michael Save
53c53c57ed
Bugfix: with third-party scripts that use create_antibot()
2012-05-05 18:07:20 +10:00
Michael Save
635ac00a0e
changed some default config values
2012-05-05 18:07:12 +10:00