8efab06616
Upgrade to utf8mb4 charset for MySQL server versions above 5.5.3. Keep support for older versions. Fix charsets for multiple columns and tables.
2013-07-30 22:08:56 -04:00
461084d400
MySQL's utf8 charset only supports up to 3-byte symbols. Insterting four byte symbols (U+010000 to U+10FFFF) can be done maliciously to break HTML mark-up.
...
The ideal solution was to convert to MySQL's utf8mb4 charset, but then we would lose support for MySQL < 5.5.3. In this fix, incompatible characters are encoded as HTML numeric character references (eg. #65536 ) and just stripped from body_nommarkup.
2013-07-30 16:41:10 -04:00
d11e9d752e
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-07-28 20:51:43 -04:00
bd8bd3c02e
Fix for last commit
2013-07-28 20:46:00 -04:00
57c8e4ee7c
Strip combining characters from Unicode strings (eg. Zalgo)
2013-07-28 20:33:26 -04:00
805c729892
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-07-22 10:14:17 -04:00
308f557fd5
Option to automatically strip EXIF metadata from JPEGs
2013-07-21 15:50:45 -04:00
97a22e57c1
Remove imgcaptcha, this code is unused in any of our forks and needs work to get here back.
...
Revert "Merge branch 'imgcaptcha' of https://github.com/asiekierka/Tinyboard "
This reverts commit 49afb685c82451a0f29c
2013-07-20 22:47:26 -04:00
9f323ae65f
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
templates/themes/sitemap/info.php
2013-07-20 17:28:34 -04:00
30dc892786
Only store video URLs in database, instead of the generated player HTML.
2013-07-19 18:36:12 -04:00
0ba40a8fc2
I just realized that ImageMagick had a -auto-orient switch. No need for all that code.
2013-07-19 09:39:46 -04:00
fa66b96240
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
post.php
2013-07-18 15:19:03 -04:00
e4bd9a6886
Themes edit: Split "post" into two seperate actions: "post" (replies) and "post-thread". And add a $board variable.
2013-07-18 12:06:26 -04:00
7bdb96a16b
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
install.php
templates/index.html
templates/thread.html
2013-07-16 13:02:13 -04:00
c2dc25ac51
incrementSpamHash() was duplicated for some reason
2013-07-16 01:34:36 -04:00
24a520485d
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
...
Conflicts:
templates/page.html
2013-06-21 16:41:39 -04:00
c073967600
SPDY: send back updated thread/index after post
...
Sets X-Associated-Content header, which is at least recognized
by Apache mod_spdy.
2013-06-21 16:37:56 -04:00
3eda5b0543
Adds image_hard_limit and reply_hard_limit options.
...
Also reworks the numPosts() function and uses it elsewhere too.
2013-06-18 12:21:41 -05:00
fabba73ce4
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard into HEAD
...
Conflicts:
mod.php
2013-01-23 18:58:38 +01:00
a44e0571bc
Automatically rotate and mirror images based on EXIF orientation (only compatiable with "convert" option selected at the moment)
2013-01-24 03:24:38 +11:00
18ca523b18
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-01-21 13:17:13 +01:00
7a68fc9525
Copyright and license update for 2013.
2013-01-20 21:23:46 +11:00
82fb733906
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard
2013-01-19 16:23:02 +01:00
0da1c18a7f
Add field_disable_subject and field_disable_reply_subject config options.
2013-01-19 01:37:48 -06:00
accc3992f3
Merge pull request #93 from Macil/image_reject_repost_in_thread
...
Add image_reject_repost_in_thread option
2013-01-18 23:03:16 -08:00
67ab3760ba
Removed redundant code in image processing.
...
Both paths of the code here did the same thing.
2013-01-19 00:39:29 -06:00
91e8547b04
Add image_reject_repost_in_thread option
2013-01-19 00:25:24 -06:00
091216082a
fixed to actually work
2012-12-22 18:16:09 +01:00
6a705fd8c2
Merge branch 'mod-rewrite'
...
Conflicts:
inc/lib/Twig/Extensions/Extension/Tinyboard.php
install.php
mod.php
stylesheets/style.css
templates/index.html
templates/page.html
templates/thread.html
2012-08-27 02:28:04 +10:00
c919e73625
Temporary bugfix for incorrectly escaped email field
2012-08-27 02:18:31 +10:00
6775eebcfa
$post['id']
2012-05-27 20:55:56 +10:00
ad220b725d
Bugfix: the number of successful passes for an anti-spam "hash" was often incorrectly incremented
2012-05-07 23:51:58 +10:00
9058d202ed
Bugfix: the number of successful passes for an anti-spam "hash" was often incorrectly incremented
2012-05-07 23:51:15 +10:00
890b541191
custom capcode permissions
2012-05-07 18:22:20 +10:00
2082fcde24
Bugfix: with file uploading (introduced with last commit)
2012-05-05 18:12:11 +10:00
b5c7e30609
Bugfix: non-image file uploading
2012-05-05 18:11:45 +10:00
d6f5fc28ce
Bugfix: with file uploading (introduced with last commit)
2012-04-20 19:48:11 +10:00
9286ec4928
Bugfix: with file uploading (introduced with last commit)
2012-04-20 19:47:25 +10:00
4c2066bc27
Bugfix: non-image file uploading
2012-04-20 19:04:53 +10:00
df97c559bd
Bugfix: non-image file uploading
2012-04-20 19:04:37 +10:00
f48bfbf299
typo
2012-04-14 03:44:00 +10:00
1437a121f7
typo
2012-04-14 03:43:04 +10:00
51675e7a9b
code cleanup
2012-04-13 00:18:19 +10:00
95709e7588
Removed `board`.`id`. Use the board URI/name at the key instead.
2012-04-12 23:23:47 +10:00
a564a95ab4
Improved Tinyboard anti-bot/spam filter. See large comment in inc/config.php for details.
2012-04-12 21:56:01 +10:00
c9423a2c34
large cleanup
2012-04-12 02:49:22 +10:00
1b5f2b08f4
moved $OP to $post['op']. post() now has one argument instead of two.
2012-04-11 02:18:06 +10:00
033491f84f
increase character limit on board URI, title and subtitle
2012-04-09 21:13:44 +10:00
8cfc5460d3
New event: post-after
2012-04-03 00:16:25 +10:00
4c6faeb7a2
Convert $post to an object before passing it to event(). This way it can be modified by event handlers before entering the database. See http://tinyboard.org/docs/events.html#examples
2012-03-24 15:31:35 +11:00
8703ea3d4a
$post['file_path']
2012-03-19 02:55:34 +11:00
7c8dc230b8
Moved rebuildThemes() in post.php back for now.
2012-03-19 02:53:33 +11:00
9d58186360
New feature: "events". Will eventually replace/extend "themes".
2012-03-19 02:41:06 +11:00
c136d44894
Better upload handling (don't move file before handling it)
2012-03-18 19:53:56 +11:00
6db45d4c3d
$config['thumb_method']
2012-03-17 11:54:48 +11:00
60aab92f47
allow quick-reply.js to work
2012-03-14 18:09:23 +11:00
c8d1f1cdd4
ability to adjust thumbnail size for OP images independently from reply images
2012-03-14 02:44:33 +11:00
de17bdb317
Remade config[redraw_image]
2012-03-10 20:53:41 +11:00
25cdd35663
bug: avoid using empty() or values such as "0" will not work as intended
2012-02-17 19:24:40 +11:00
56821eb375
allow mods to bypass forced anonymity (and other disabled fields). also fixed some small per-board permission bugs
2012-02-16 23:07:25 +11:00
a431994016
fixed bug causing "bot" errors when disabling fields on certain boards only
2012-02-14 23:18:00 +11:00
cd30f3b0b9
prohibit using same anti-bot hashes across different boards/threads
2012-01-20 02:37:53 +11:00
0dd36bda54
logical error syslog()ing reports
2011-12-22 15:46:19 +11:00
41b2990234
syslog() reports and deletions
2011-12-22 10:09:59 +11:00
be860577a9
optionally disable image requirement for new threads
2011-12-18 08:48:16 +11:00
75f7ebd49b
bugfix: PHP notices on raw posts
2011-12-13 20:15:46 +11:00
c83d192103
removed $_SESSION
2011-12-09 01:18:23 +11:00
6a02dfd5aa
use multibyte-aware mb_strlen() instead of strlen(); fixed issue #8 )
2011-12-07 17:47:36 +11:00
d454fc6423
syslog() mod actions
2011-12-06 03:00:59 +11:00
799af6907a
..
2011-12-05 16:49:24 +11:00
d4dc36cd74
..
2011-12-05 16:45:06 +11:00
4454904461
syslog() new posts
2011-12-05 16:44:00 +11:00
290335194a
integer overflow bug on 32-bit systems
2011-12-05 15:34:31 +11:00
b57be65c9f
track cites (remove broken links after a post 404s)
2011-12-05 13:17:34 +11:00
ee3d9359e3
v0.9.4
2011-12-04 13:52:56 +11:00
c2e1f4feac
removed useless exit;
2011-12-04 09:09:24 +11:00
c1be29ce35
ammended mod authentication system (no more $_SESSION)
2011-12-02 15:11:13 +11:00
a83d584255
Ability to disable certain superfluous fields. ("Forced anonymous")
2011-11-23 21:24:06 +11:00
0279cfd3fb
Ability to customize filenames, replacing the standard UNIX timestamp + random
2011-11-19 00:22:48 +11:00
4e3757e586
Combined SQL query for checking if locked, etc. Much more efficient.
2011-10-11 02:58:22 +11:00
ffb215eb47
added "bumplocking" feature
2011-10-10 22:37:39 +11:00
cf79aed488
removed old, now invalid installation code from post.php
2011-10-08 19:08:46 +11:00
53dce652a8
image spoilers
2011-10-04 02:46:39 +11:00
67b954924b
Referer checking; more descriptive error message
2011-10-03 18:38:19 +11:00
339853e5de
Show full filename on mouseover.
2011-10-01 22:12:31 +10:00
0bad03d3a2
Disable inline-expanding for non-images
2011-10-01 21:43:23 +10:00
20c200a7ff
Fixed bug regarding no-body posts (especially relevant to video embedding)
2011-09-29 21:17:59 +10:00
e089acd1eb
Fixed force_body and force_body_op
2011-09-25 16:34:34 +10:00
d51f6a932e
...
2011-09-18 03:25:38 +10:00
4cbf5b91bf
fixed custom filters
2011-09-18 03:17:54 +10:00
3d5c2ac5f5
Accidentally disabled spam protection in last commit...
2011-09-15 20:34:45 +10:00
4ef2caecc1
Removed $config[force_body]. Made threads without text possible.
2011-09-15 20:32:49 +10:00
aa02cffb93
increased subject max length to 100 characters
2011-08-27 12:11:34 +10:00
881ea10162
find image size before loading image into memory
2011-08-24 18:22:07 +10:00
e3f2aa8da3
...
2011-08-15 00:49:52 +10:00
4c1935a6b6
per-board bans
2011-07-27 13:40:27 +10:00
f9bcde6e3d
..
2011-07-22 18:51:59 +10:00
25cbb68ea1
fixed display of image resolution/size, which was broken after the new image class was introduced
2011-07-18 22:06:24 +10:00
97979b7999
image handling class
2011-07-12 20:29:35 +10:00
370b829460
reCAPTCHA support
2011-06-16 04:59:16 +10:00
d184b591d8
removed unnecessary whitespace
2011-06-16 03:11:52 +10:00
5333f8c9cc
bug fix
2011-06-11 16:08:29 +10:00
d9b82cfe4f
allowed enabling multiple themes simultaneously
2011-05-28 01:43:04 +10:00
2acf0233ae
embedding+file upload bug, accepting both for a single post
2011-05-25 19:11:22 +10:00
c8e778578a
typo
2011-05-25 19:08:09 +10:00
65c5e91af2
stop ignoring $config[file_page]...
2011-05-20 22:44:11 +10:00
db1f0e9446
replaced tor detection with DNSBL
2011-05-19 17:37:23 +10:00
797fd8ad13
Embedding field
2011-05-18 17:05:48 +10:00
2ac8dc2c0f
cleanup
2011-04-23 00:38:25 +10:00
2234c1ecea
bug fix for recent theme
2011-04-20 01:50:35 +10:00
10a8fe28e6
non-image uploads
2011-04-13 20:57:41 +10:00
971e72000a
Custom thubmanil image type (extension)
2011-04-13 04:08:59 +10:00
4c6c5b906e
< should be <= in this case
2011-04-12 22:58:55 +10:00
5f94009fad
When a thumbnailed image is going to be the same (in dimension), just copy the entire file and use that as a thumbnail instead. (optional)
2011-04-12 22:58:01 +10:00
c596d45711
New `capcode` field for posts and custom capcodes (run install.php to upgrade tables)
2011-04-12 21:08:54 +10:00
614491880f
Rename CSS rule to "capcode"
2011-04-12 20:19:56 +10:00
c9e33953f3
Fixed minor bug causing a PHP warning sometimes
2011-04-11 03:29:39 +10:00
c544ad9bb8
Block files exploiting IE's mime-sniffing 'feature'
2011-04-10 22:31:08 +10:00
638589d254
Wordfilters
2011-04-06 19:18:36 +10:00
08bbd3f912
Post saving/cache and Google Analytics integration
2011-04-06 18:31:26 +10:00
2487a6fb7f
Time limit before you are able to delete your post
2011-04-05 15:57:01 +10:00
1a378ee6b2
Public ban messages
2011-04-03 18:20:55 +10:00
60591625a3
Case-insensitive noko
2011-03-28 15:52:02 +11:00
c1a40e9de0
Stupid bug when posting
2011-03-28 03:00:54 +11:00
e7a422ff5c
More flood filter conditions
2011-03-27 23:23:12 +11:00
3fa646868a
Added IP address to flood filter
2011-03-27 23:13:24 +11:00
187b476aae
Flood filters
2011-03-27 23:06:57 +11:00
19187b6205
Fixed dangerous XSS vulnerability
2011-03-27 22:35:42 +11:00
7c2938b542
Fixed a small bug on the flood filter
2011-03-27 20:38:11 +11:00
8ee00d344a
remove accidentally committed debug crap
2011-03-26 22:50:45 +11:00
d40c6aefc6
custom flood filters
2011-03-26 22:50:03 +11:00
14ce367b03
fix tupo
2011-03-26 18:43:19 +11:00
ea90d9bb28
Fixed a minor bug for blank posts
2011-03-14 22:30:42 +11:00
5be1a8d8ed
..
2011-02-23 02:22:07 +11:00
6f04ef7775
Fix for iPods and other devices
2011-02-23 02:21:16 +11:00
ecea978fad
Accidentally removed important line of code...
2011-02-22 11:14:07 +11:00
ba5075ebbd
Reject blank posts? (just whitespace, etc).
2011-02-22 11:09:43 +11:00
dd845f4c7e
Finalized report syste,
2011-02-20 18:28:39 +11:00
ce18d43bcd
Reports/report queue
2011-02-20 17:19:57 +11:00
edfba3b196
small mistake
2011-02-19 20:39:13 +11:00
9368638b54
fixed a bug from the last commit
2011-02-19 19:48:13 +11:00
efa06c270e
Increased `filehash` length and made the reject-post-if-image-already-exists-in-active-content thing
2011-02-19 19:45:54 +11:00
13ef38d7b7
Delete images properly on error
2011-02-19 19:28:07 +11:00
9f7af7b42d
escape html for capcodes
2011-02-18 01:27:20 +11:00
fab3618afe
Increased field limits
2011-02-17 21:20:04 +11:00
5170cd7aa8
Ability to customize default name ("Anonymous")
2011-02-17 20:12:09 +11:00
f6d0bea5f7
Allow admins to bypass flood filters
2011-02-17 17:07:22 +11:00
626179d553
Fixed the robot for the arrayed config
2011-02-16 20:37:57 +11:00
c237b016e6
Better way of loading configuration
2011-02-16 16:21:14 +11:00
3737439338
Changed config to an array
2011-02-12 17:25:15 +11:00
c34ea2e3af
a Fixed delete by IP, plus a bunch of small stuff
2011-02-11 23:02:30 +11:00
4bcd995bea
raw html
2011-02-03 20:28:14 +11:00
ec34fa8076
delete
2011-01-21 13:14:11 +11:00
4b1d5719f9
removed debug crap
2011-01-20 19:28:53 +11:00
e1e5dc713e
reply limit and mutes
2011-01-20 19:24:41 +11:00
c59f36f400
a bunch of things
2011-01-19 12:37:31 +11:00
62bd2ee348
A bunch of stuff.
2011-01-19 00:41:43 +11:00
d284b0d50d
flood prevention
2011-01-18 17:11:28 +11:00
01bbe8fca7
Optimize code when checking if locked.
2011-01-03 01:41:14 +11:00
8fe1846e56
Allow mods to post in locked threads as per the config
2011-01-03 01:33:57 +11:00
5df6f85854
Don't allow users to post in locked threads'
2011-01-03 01:23:34 +11:00
567d37c62e
Permissions on mod controls when making a new thread
2011-01-03 01:15:55 +11:00
e23aa7a736
FILE_HASH in config.php
2011-01-02 22:45:25 +11:00
0fc51119de
Fixed bug allowing lock of non-OP posts
2011-01-02 22:30:49 +11:00
d579771210
Mod stickies and redirects
2011-01-02 21:15:59 +11:00
13cd22e324
Check if mod post
2011-01-02 21:10:33 +11:00
3c24ecd412
Bans
2011-01-02 01:37:52 +11:00
574256a01a
Use PDO for databases
2010-12-18 01:18:03 +11:00
41daaa16b1
boards now have individual tables.
2010-12-02 19:08:29 +11:00
b2bd3303f9
REDIRECT_HTTP directive
2010-12-02 18:07:24 +11:00
8a387bff1e
Removed unused varaible
2010-12-01 18:21:09 +11:00
aefa20a3a4
Get board information earlier so errors can be properly displayed with a link back to the index.
2010-11-30 23:17:26 +11:00
b41a4a6ac7
Check if thread exists before posting.
2010-11-30 23:12:54 +11:00
fc00840004
Supress PHP errors when moving upload files.
2010-11-30 20:47:36 +11:00
38ac7187fd
Bug fix. Multiple boards now work.
2010-11-30 20:44:53 +11:00
58b25f319c
Multi-board support.
2010-11-30 20:40:37 +11:00
4f6160f242
Multi-board support.
2010-11-30 19:57:42 +11:00
60886aa0d3
minor bug
2010-11-30 19:26:31 +11:00
f4ccafe1db
Minor bug with posts not containing files
2010-11-30 19:25:50 +11:00
4dc13a3a92
Fixed bug causing templates to fail after a chdir()
2010-11-30 19:21:06 +11:00
27cc4af33a
boards
2010-11-30 19:12:35 +11:00
5fd0d21d56
Comment fail.
2010-11-26 01:21:00 -08:00
e4683b93e1
Typo in "development"
2010-11-26 01:20:04 -08:00
4de3a3eca4
post.php => Unix line endings
2010-11-05 09:46:20 -07:00
43b62acb44
Stopped storing the full path name of the images in the database. Should make it easier/possible to move the imageboard later.
2010-11-05 20:51:39 +11:00
247772323e
Allowed change of root directory for systems where it is not the current directory.
2010-11-05 20:43:18 +11:00
f6abfa61c6
Added a check to verify if .ZIP files are infact archives.
2010-11-05 20:32:40 +11:00
6c20b0ab03
Remove excess
2010-11-05 02:20:19 +11:00
599530e935
Merge branch 'master' of github.com:savetheinternet/Tinyboard
...
Conflicts:
inc/config.php
inc/functions.php
post.php
2010-11-05 01:35:53 +11:00
7b43892527
Support for site-instance specific configuration in instance-config.php
2010-11-04 06:35:59 -07:00
4f8bd4da1f
Merge branch 'sti'
...
Conflicts:
inc/config.php
inc/functions.php
post.php
2010-11-04 05:16:13 -07:00
f9357612af
Zip support
2010-11-04 23:09:01 +11:00
cdf1603c3a
Fixed minor bug in config.php
...
Added ZIP support.
Cleaned functions.
2010-11-04 22:58:51 +11:00
455f0c2602
Improved large file size error message.
2010-11-04 04:30:23 -07:00
1e20121224
Issue #9
2010-11-04 01:55:52 +11:00
bb1abb85e1
Ability to strip excess data (commonly ZIP archives) from images.
2010-11-03 23:37:28 +11:00
f864d5df16
Fixed small issue with UTF-8 characters decreasing the maximum length of inputs.
2010-11-03 23:02:15 +11:00
16b6548b4a
Increased subject length
2010-11-03 22:58:33 +11:00
44f3e91602
Added a file hash in the database. Will be implemented later.
2010-11-03 20:16:08 +11:00
8849f5a2db
Maximum image dimensions
2010-11-03 20:07:32 +11:00
690f206a63
Added a maximum filesize for image uploads
2010-11-03 19:44:24 +11:00
7d280345db
Changed file include order.
2010-11-03 17:31:15 +11:00
e1f36dfe9a
Fix again for magic quotes.
2010-11-03 16:32:23 +11:00
7181634dcb
Fix for magic quotes
2010-11-03 16:05:24 +11:00
1f1417373f
Handle uppercase file extensions.
2010-11-02 08:59:25 -07:00
71dbf05c16
Moved index.php to post.php
2010-11-02 06:34:28 -07:00
Michael Foster
czaks
Macil Tech
asiekierka
Michael
Savetheinternet
savetheinternet@n0v4.com
Paul Merrill