Commit Graph

1028 Commits

Author SHA1 Message Date
Michael Foster 8fe33d3b79 Fix some indent-formatting. Tab = 8 chars 2013-08-03 21:04:45 -04:00
Michael Foster b67fc7d54e Only use `identify` if we have to 2013-08-03 20:50:37 -04:00
Michael Foster 5300ffadf1 Better image processing. Add support for GraphicsMagick (a fork of ImageMagick) and `exiftool` (for stripping EXIF metadata quickly). 2013-08-03 20:34:59 -04:00
Michael Foster a3fbff2259 Update $config['try_smarter']. Should be working now. 2013-08-03 17:42:34 -04:00
Michael Foster f7d068536a EXPERIMENTAL: Try not to build pages when we shouldn't have to. 2013-08-03 07:50:25 -04:00
Michael Foster 2f4e2daa61 Fix redirect with board config editor (raw php) 2013-08-03 06:27:13 -04:00
Michael Foster 424de7561d Web config editor: board configs 2013-08-03 06:26:17 -04:00
Michael Foster 0d1bfa47f1 Web config editor: Write "MOD", "JANITOR", etc. to instance-config instead of just int representations 2013-08-03 05:41:01 -04:00
Michael Foster d4ad874e09 no 2013-08-03 05:25:41 -04:00
Michael Foster c9684fc000 Better/working web config editor 2013-08-03 05:21:02 -04:00
Michael Foster 3ed15565b0 Why is this escaped? 2013-08-03 03:36:20 -04:00
Michael Foster ea1fe528a4 Fix ordering of notes and bans 2013-08-03 02:06:58 -04:00
Michael Foster 056a6001ac Erorr handling update 2013-08-03 02:01:52 -04:00
Michael Foster 784c3ffadb Accidentally commit'd debug stuff/errors 2013-08-03 00:28:54 -04:00
Michael Foster 1d37e81ade Better error handling/displaying with $config['debug'] and $config['verbose_errors'] 2013-08-03 00:22:28 -04:00
Michael Foster 62f8ea4813 Better command-line ImageMagick image processing 2013-08-02 23:18:25 -04:00
Michael Foster d99eba2c18 syntax error in last commit 2013-08-02 21:37:44 -04:00
Michael Foster 1d7de12281 Fix bug 2013-08-02 21:23:18 -04:00
Michael Foster 934c00f488 $config['dir']['static'] doesn't exist. 2013-08-02 21:01:04 -04:00
Michael Foster 169dc74938 Fix last commit 2013-08-02 20:56:30 -04:00
Michael Foster 4fce9b63ae Major config.php cleanup and a few minor misc fixes. 2013-08-02 20:52:58 -04:00
Michael Foster f06978659b Installer: Nicer pre-installation test 2013-08-02 00:08:37 -04:00
Michael Foster 40ab2e0c17 Don't redraw image again after correcting image orientation; Correct image orientation with convert+gifsicle too 2013-08-01 21:28:16 -04:00
Michael Foster 5a44c50811 Simple file editor replacement for ?/config (optional). Issue #127 2013-08-01 17:18:10 -04:00
Michael Foster 157dcf9fb1 Continue upgrading Twig 2013-08-01 15:55:28 -04:00
Michael Foster 6b6f32949d Web config editor: Use a <select> for JANITOR/MOD/ADMIN permissions 2013-08-01 15:20:25 -04:00
Michael Foster 0fe5528574 Upgrade Twig library 2013-08-01 15:20:12 -04:00
Michael Foster 22f3a95e0e convert+gifscale didn't respect $config['thumb_keep_animation_frames'] 2013-08-01 04:24:34 -04:00
Michael Foster 4851d4cabe Forgot "global $config" here 2013-08-01 03:51:50 -04:00
czaks 9487eb4ac7 Compile Polish locale 2013-08-01 03:22:58 -04:00
Jakub Skrzypnik 00600f241f Correcting polish locale a bit 2013-08-01 03:22:48 -04:00
Jakub Skrzypnik 0a026c8f3f Correcting polish locale a bit 2013-08-01 03:22:39 -04:00
czaks 6c2887ba9f Update Polish locale 2013-08-01 02:39:54 -04:00
czaks 9769e1f964 i18n even more strings in inc/display.php 2013-08-01 02:39:41 -04:00
czaks b9769d0cea i18n strings in inc/display.php 2013-08-01 01:53:13 -04:00
czaks e109d8179f the prefix work: fix it to be dependent on a board_regex config value 2013-08-01 01:53:07 -04:00
czaks bc76d934fe fix previous commit; markup is called via reference 2013-08-01 01:09:54 -04:00
czaks 05fb4cbca4 markup modifiers: there was a plan for adding markup to ban reasons, but assignment was missing; escape markup there too 2013-08-01 01:09:21 -04:00
Michael Foster a052a791b5 Add optional database table prefix (issue #118; see issue comments for details) 2013-07-31 22:14:26 -04:00
czaks 232f4ff868 markup modifiers: make it even harder to escape 2013-07-31 21:27:50 -04:00
czaks ab36452543 fix post editing for tinyboard markup 2013-07-31 21:26:55 -04:00
Michael Foster ea2b8cce07 Bugfix: HTML injection in post editing (introduces and fixes yet another bug) 2013-07-31 21:24:17 -04:00
Michael Foster a5312ebe89 Allow public ban messages on raw HTML posts 2013-07-31 21:02:26 -04:00
Michael Foster 0f9df0ac66 Newline before <tinyboard ban message> 2013-07-31 20:54:20 -04:00
Michael Foster 328484bee7 SQL cleanup 2013-07-31 20:51:43 -04:00
Michael Foster 6bbe407e18 Markup modifiers: raw HTML 2013-07-31 19:18:55 -04:00
Michael Foster 6d52c8b428 Markup modifiers. Fix issue #66 (public ban message lost when rebuilding post body) 2013-07-31 18:59:54 -04:00
Michael Foster 4891735c49 Fix issue #72 2013-07-31 18:29:09 -04:00
Michael Foster 3a8736cdc0 Fix last commit 2013-07-31 17:04:36 -04:00
Michael Foster c2a287cd14 Only run SQL query to count threads if we really need to 2013-07-31 17:02:42 -04:00
Michael Foster 6cdf603875 Fix last commit; Make Tinyboard Twig extension more mb-safe 2013-07-31 16:38:09 -04:00
Michael Foster dc1d1a3fcd Issue #125 2013-07-31 16:22:27 -04:00
Michael Foster 659310663e i18n some more strings in inc/config.php 2013-07-31 06:56:57 -04:00
Michael Foster 42e16e233a Javascript l10n: Work without $config['additional_javascript_compile'] 2013-07-31 06:54:53 -04:00
Michael Foster 439795e63b Disallow board names which are too large for the filesytem to handle 2013-07-31 06:40:57 -04:00
Michael Foster 81da2fea04 Undo 7e0cec for now. Will restore later once I resolve issues 2013-07-31 05:03:50 -04:00
czaks 67db0a878a js i18n: finish implementation with addition of the compiled locale strings file to additional javascripts 2013-07-31 04:57:50 -04:00
czaks 3f98522ff2 i18n one more string in inc/functions.php 2013-07-31 04:56:42 -04:00
czaks babeec8bb9 localise time values 2013-07-31 04:55:34 -04:00
czaks be2e7d9782 i18n some strings in inc/config.php 2013-07-31 04:54:08 -04:00
Michael Foster 123a72d7de Convert to UNIX line endings 2013-07-31 04:28:26 -04:00
Marcin Łabanowski 7e0cec3d9d Facilitate styling of subboard listings 2013-07-31 04:09:35 -04:00
czaks 22556f43f5 Update Polish locale 2013-07-31 04:07:15 -04:00
czaks b772be7c5b Update Polish translation 2013-07-31 04:07:03 -04:00
czaks ba27016813 locale: update polish translation 2013-07-31 04:06:57 -04:00
czaks 0ffa0b3adf Update Polish translation; javascript l10n 2013-07-31 04:06:52 -04:00
55ch dd01c8308d Brazilian Portuguese translation for Tinyboard 2013-07-31 04:05:55 -04:00
Marcin Łabanowski 5ea2f02e7d Fixed typo in Polish translation 2013-07-31 04:05:49 -04:00
Marcin Łabanowski 39cf9e7de5 Updated Polish translation (3) 2013-07-31 04:05:44 -04:00
Marcin Łabanowski 4266c412b5 Updated Polish translation (2) 2013-07-31 04:05:38 -04:00
Marcin Łabanowski cbab1f9ac2 Updated Polish translation 2013-07-31 04:05:29 -04:00
Michael Foster 64bc410484 Small comment change 2013-07-31 04:02:40 -04:00
Marcin Łabanowski 7c8bbe8527 Implement image identification buttons using regex.info/exif, google images and tineye 2013-07-31 04:00:22 -04:00
Michael Foster 18516ff828 Rename $config['url_ads'] to $config['link_prefix'] 2013-07-31 03:43:01 -04:00
szalej 51efd817c8 Update inc/config.php
hide referrer option
2013-07-31 03:39:51 -04:00
Marcin Łabanowski 3ef2c05bb2 url_ads: fix it not working 2013-07-31 03:39:20 -04:00
szalej 5bf53cb581 Update inc/functions.php
url ads
2013-07-31 03:39:15 -04:00
szalej 220609999a Update inc/functions.php
Hide Referrer (nullrefer.com)
2013-07-31 03:39:10 -04:00
asiekierka 44d3b12cef Embedding: added vocaroo support 2013-07-31 03:37:09 -04:00
Michael Foster 573f86ccae Tiny code clean-up 2013-07-31 03:35:07 -04:00
Marcin Łabanowski 73cb2bdf2c convert+gifsicle: fix previous commit 2013-07-31 03:33:12 -04:00
Marcin Łabanowski b7e725bf3e Support for resizing gifs using gifsicle with resizing the rest using ImageMagick 2013-07-31 03:33:06 -04:00
Marcin Łabanowski f9cdf31ede Fix animated .gif conversion when $config['thumb_ext'] == '' 2013-07-31 03:32:44 -04:00
Michael Foster a2d8e4cf3e Previous commit comment fix 2013-07-31 03:13:51 -04:00
Michael Foster 37d769646b Markup/quote fix for multibyte 2013-07-31 03:12:06 -04:00
Michael Foster b22bcdecf9 Fix last commit: purge() issue 2013-07-31 02:19:58 -04:00
Michael Foster 42cba53887 Allow Unicode in board URIs. 2013-07-31 02:08:55 -04:00
Michael Foster bb2868896c Ability to hide IP addresses from mod log 2013-07-31 00:04:57 -04:00
Michael Foster 343397d561 ?/IP/: Don't show posts for board user doesn't have access to 2013-07-30 23:30:49 -04:00
Michael Foster 8efab06616 Upgrade to utf8mb4 charset for MySQL server versions above 5.5.3. Keep support for older versions. Fix charsets for multiple columns and tables. 2013-07-30 22:08:56 -04:00
Michael Foster 461084d400 MySQL's utf8 charset only supports up to 3-byte symbols. Insterting four byte symbols (U+010000 to U+10FFFF) can be done maliciously to break HTML mark-up.
The ideal solution was to convert to MySQL's utf8mb4 charset, but then we would lose support for MySQL < 5.5.3. In this fix, incompatible characters are encoded as HTML numeric character references (eg. #65536) and just stripped from body_nommarkup.
2013-07-30 16:41:10 -04:00
Michael Foster 1759ac2ea3 Post search: Search other fields too 2013-07-29 20:20:07 -04:00
Michael Foster 58306bdc63 Search posts 2013-07-29 16:18:06 -04:00
Michael Foster 5bab041814 Make font-awesome enabled by default 2013-07-29 12:27:10 -04:00
Michael Foster bd8bd3c02e Fix for last commit 2013-07-28 20:46:00 -04:00
Michael Foster 57c8e4ee7c Strip combining characters from Unicode strings (eg. Zalgo) 2013-07-28 20:33:26 -04:00
Michael Foster 37d5846e4e Fix markup overlapping. Issue #124 2013-07-26 11:01:13 -04:00
Michael Foster 33a1c00bd5 %length% in public ban messages 2013-07-24 11:30:01 -04:00
Michael Foster 31f657e550 Long overdue: Salted password hashes 2013-07-24 11:15:55 -04:00
Michael Foster 1132a4ce79 Option to use font-awesome for sticky/lock icons, etc. 2013-07-23 09:38:42 -04:00
Michael Foster ab0c5ee481 Option to make stylesheet selections board-specific 2013-07-23 01:35:56 -04:00
Michael Foster 6ba8f3f7de Add custom links to dashboard 2013-07-22 18:30:45 -04:00
Michael Foster ed8fe6c27a Option to check public ban message by default 2013-07-22 17:51:13 -04:00
Michael Foster 308f557fd5 Option to automatically strip EXIF metadata from JPEGs 2013-07-21 15:50:45 -04:00
Michael Foster 67cbc2b1aa Fix permissions with search 2013-07-20 13:15:44 -04:00
Michael Foster b776e0a7f0 Search update 2013-07-20 12:05:42 -04:00
Michael Foster e62b83e79c Bring back search (searching posts not implemented yet) 2013-07-20 07:50:33 -04:00
Michael Foster 30dc892786 Only store video URLs in database, instead of the generated player HTML. 2013-07-19 18:36:12 -04:00
Michael Foster e4bd9a6886 Themes edit: Split "post" into two seperate actions: "post" (replies) and "post-thread". And add a $board variable. 2013-07-18 12:06:26 -04:00
Michael Foster ce9431ba34 Update filters to work with new ban table 2013-07-18 10:17:19 -04:00
Michael Foster aadb57f2a2 More ban stuff: Show whether or not user has "seen" a ban yet in the ban list and on IP address pages. Purge useless expired ban records. 2013-07-16 08:50:39 -04:00
Michael Foster c8f30550af $config['require_ban_view']: Force users to view the "You are banned" page at least once before letting a ban disappear naturally. 2013-07-16 06:33:37 -04:00
Michael Foster 29b10c88db Outputting thread subject in header/title (issue #122) 2013-07-16 02:48:20 -04:00
Michael Foster 7302fc57a8 Automatically dismiss all reports regarding a thread after it is locked. 2013-07-16 02:32:44 -04:00
Michael Foster 2144d43f2b Fix issue #24 2013-07-16 02:27:20 -04:00
Michael Foster 23b27d8057 Add clean() to mod_move function 2013-07-16 01:38:24 -04:00
Michael Foster 77e4d926d9 Add "write" (files written to) to debug section 2013-07-16 01:21:06 -04:00
Macil Tech 82e3592703 Argh, just remove all RTL and LTR control codes in bidi_cleanup.
If the name and subject fields both start with RLO characters, then the
subject would be after the name with the old bidi_cleanup.
2013-07-08 13:26:31 -05:00
Michael 9b0c31daa6 Merge pull request #116 from Macil/hardlimits
Adds image_hard_limit and reply_hard_limit options
2013-06-18 10:46:25 -07:00
Michael 0ac9dd5f25 Merge pull request #115 from Macil/miscfixes
Miscellaneous fixes
2013-06-18 10:45:13 -07:00
Michael cbc3bd0c0a Merge pull request #114 from Macil/rtlfix
Fix display issues with RTL control characters in post names, subjects, ...
2013-06-18 10:41:31 -07:00
Michael 68c6a749f2 Merge pull request #113 from Macil/tzfix
Output times in UTC
2013-06-18 10:40:56 -07:00
Macil Tech 3eda5b0543 Adds image_hard_limit and reply_hard_limit options.
Also reworks the numPosts() function and uses it elsewhere too.
2013-06-18 12:21:41 -05:00
Macil Tech 765e64ee38 m and n dash fix 2013-06-18 12:07:30 -05:00
Macil Tech b078222ede Fix "Undefined index: sticky" and "locked" errors on new thread creation. 2013-06-18 12:00:26 -05:00
Macil Tech b6fc7ca89d Fix broken entity removal in post truncation. 2013-06-18 11:16:15 -05:00
Macil Tech be1e55b9d6 Fix result page after installing theme getting doubled up. 2013-06-18 11:14:02 -05:00
Macil Tech 6fd6b92fe8 Fix openBoard and boardTitle functions using same caching keys.
Added getBoardInfo function that's used by both of the above functions,
and can get a board's info without loading it.
2013-06-18 11:13:43 -05:00
Macil Tech 1d4fced75a pm_snippet() should probably use mb_substr if it's using mb_strlen. 2013-06-18 11:12:31 -05:00
Macil Tech 2fe79f6a61 Output times in UTC.
Let the client localize the times with js/local-time.js themselves. No
one cares what the server timezone is.

This fixes a bug where posts made in a different daylight savings mode
have their times displayed off by an hour. Their times would be rendered
to the server's own timezone area correctly, but then the server's
*current* utc-offset would be appended, which wouldn't match up.
2013-06-18 11:10:39 -05:00
Macil Tech a92bb182d9 Fix display issues with RTL control characters in post names, subjects, and filenames. 2013-06-18 11:07:47 -05:00
Macil Tech 3bcc87caf2 Fix PM count caching.
cache::get() returns null if the key wasn't found (at least when using
the Redis cache backend).
2013-06-18 11:02:45 -05:00
undido 83401b3a68 update config.php config for unban limit
Adding config and error for unban list when a user tries to unban more users than they are allowed too.
2013-04-16 19:14:51 -03:00
undido b4ff535128 update to pages.php minor exploit
A lot of bans can be removed from a tinyboard database because it isn't limited A staff member could select 100 users all at once with a simple javascript function and unban them all this needs to be limited because a staff member on an image board if they feel hostile they can just remove all bans on the tinyboard site easily without being limited to how many people they can unban at a time, this adds an option to limit it.
2013-04-16 19:09:58 -03:00
Fredrick bb54605eb7 Fix per-board name not being used 2013-03-20 07:46:48 -04:00
Fredrick 53f710060d Fix truncation issue by no longer using HTML entities for Unicode characters 2013-03-17 07:00:55 -04:00
Michael Save 64ae123739 Mod log in ?/IP (ie. ban history) 2013-03-16 18:27:24 +11:00
Michael Save 1816218c64 Fix: Critical security vulnerability 2013-03-15 00:40:02 +11:00
Michael Save 2051018ba1 ... 2013-01-30 05:07:09 +11:00
Michael Save 5661e32b1c Instead of showing $config['error']['malformed'] on corrupt session, just go straight to the login form 2013-01-30 04:45:38 +11:00
Michael Save 45f9b51ad8 Merge branch 'master' of github.com:savetheinternet/Tinyboard 2013-01-29 22:17:46 +11:00
Michael Save 774e27caf5 Use === operator in authentication. 2013-01-29 22:13:35 +11:00
Michael Save e5bf2a91fc Don't always redirect to dashboard on login 2013-01-29 22:11:33 +11:00
Michael fd33e9eba1 Merge pull request #96 from Macil/redis
Add Redis caching support
2013-01-27 21:32:28 -08:00
Michael f07e1564ae Merge pull request #97 from Macil/indexstuff
index() rework to use only one cache key
2013-01-27 21:32:01 -08:00
Macil Tech 879f20ec72 Reworked index() slightly to make caching simpler and only use one key. 2013-01-27 21:32:22 -06:00
Michael Save 1ad71b33e2 More use of mod log 2013-01-27 19:02:47 +11:00
Michael Save 9a2c33736a New debug page: ?/debug/sql 2013-01-25 23:56:55 +11:00
Michael Save 764d718f84 ?/debug/recent 2013-01-25 22:23:26 +11:00
Michael Save d5a994537b New debug mod page: ?/debug/recent (recent posts across all boards) 2013-01-25 22:18:03 +11:00