Commit Graph

1760 Commits

Author SHA1 Message Date
Benjamin Southall 9634368b71 Add missing post_control template and configuration values for thread merge functionality 2017-06-01 07:37:42 +09:00
Benjamin Southall 176b1f5494 Add merge thread functionality as a moderator feature (shadow threading and leaving OP is not yet supported) and board filter to Recent Posts iinterface. 2017-05-11 21:45:38 +09:00
Benjamin Southall 2533c309f7 Add new fields for pdf_file_thumbail and autotagging / IP note generation of deleted posts to config.php for Deleting posts as mod does not work #104 2017-05-05 05:49:14 +09:00
Kitty Cat f978c1b83e Use random_bytes() to generate IV where available (PHP 7.x) 2017-05-03 20:28:54 -04:00
Hollick 56b01ac1ef sectoor.de is dead apparently
Well not saying this is the best fix or blacklist server. but it's the only I found that worked for me. I just read about some dnsbl so I'm no expert on it. 

Sectoor.de might go back to the living though.
2017-04-28 19:18:08 +02:00
Benjamin Southall a16122329f Add ['overboard_post_form'] to allow overboard post forms. Adjustments to ukko theme to support this 2017-04-25 00:47:14 +09:00
Benjamin Southall 47a45da7a7 Fix mod_view_board for ukko / overboard theme / extension. Add support for boards_alias to mod_view_board and initial preliminary support to markup for crossboard citations 2017-04-23 20:01:34 +09:00
Benjamin Southall 06e5052a5d Add ['boards_alias'] in order to have Unicode icons in top bar that route to non unicode board names intelligently. 2017-04-19 07:09:02 +09:00
Benjamin Southall ddbabcccab Implemented mods can't access random from dashboard #88. Please note this doesn't use mod custom_pages functionality provided by vichan (because the that only works if your overboard has name that doesn't look like other boards), and requires ['overboards'] to be set as an array of board uri's which are overboards, with the correct values for type (theme type e.g. ukko, rand or semirand) title, subtitle, thread_limit and exclude in array of for each board uri 2017-04-11 03:08:20 +09:00
Benjamin Southall 1a7201eb30 Add additional valid inputs for multi-url file upload for ['spam']['valid_inputs'] 2017-04-07 19:42:39 +09:00
Benjamin Southall 5296f2a784 Make exception handler PHP5 / PHP7 agnostic. 2017-03-24 18:49:04 +09:00
Benjamin Southall 4800138b29 Add support for multiurl file upload fields to valid input whitelist for spam filter. 2017-03-20 21:04:39 +09:00
Benjamin Southall 0ba23fcf01 Deleting all posts by IP (D++) doesn't seem to work properly #87 Changing query inside the while loop to query2 in order to delete all posts, not just the first post. 2017-03-13 23:34:15 +09:00
Benjamin Southall bf1e627c59 Thumbnails for PDFs / other things #6 When locale fails to be loaded fallback on C.UTF-8 instead of C, so that boards with unicode characters in the name are not stripped by escape_shell_args 2017-03-09 13:58:41 +09:00
Benjamin Southall 139176eaed Add support to pm_snippet to maintaining spolier tags, so that spoilers are not revealed by Recent Theme on frontpage 2017-03-03 14:58:35 +09:00
Benjamin Southall f758139c87 Add mininum post length configuration value to combat spam. Note that the posts with 0 length are still allowed in order to allow image only posts for /layer/. Fix paths for spoiler and deleted images. Change flood filters so that moderators are not restricted by them. 2017-03-03 12:26:00 +09:00
Benjamin Southall 454acf0566 Add JSON interface to Recents Posts functionality, e.g. mod_recent_posts 2017-03-02 11:40:27 +09:00
Benjamin Southall 6c06045c03 #87 Attempt to change the error message associated when using deletebyip e.g D++ with autotagging of deletions enabled. 2017-03-02 11:36:29 +09:00
Benjamin Southall 9229b280c7 Added check for post time being empty string, in order to handle the case that occurs when a deleted post is deleted a second time. 2017-01-18 12:13:11 +09:00
Benjamin Southall 3b35eb46a9 Add autotagging feature for deletion. E.g. automatically generate an IP note when a post is deleted by moderator action. 2017-01-17 22:56:46 +09:00
Benjamin Southall 302a27742a Added support for anonymous name generator to be a function in addition to being an array of names 2016-12-16 05:25:26 +09:00
Benjamin Southall c9edbdc1c8 Add support for ignoring URLs when using word filters 2016-12-14 05:47:08 +09:00
Benjamin Southall d01bcf48d7 Changing wording of post filtering when action is not set from throttled to blocked at user request. 2016-12-14 05:42:12 +09:00
Benjamin Southall eb43a310d8 Remove superflous extra error handling from merge of upstream vichan 2016-12-13 03:13:16 +09:00
Benjamin Southall ea9da7da61 Make slack report notifier, donate page, irc page and radio page use configuration variables instead of hard coding values. 2016-10-02 01:15:34 +09:00
Benjamin Southall a3b9c4405c Merged lainchan with vichan master at 25/9/2016 a4b619ae5e @czaks czaks committed on GitHub 2 days ago 2016-09-25 16:34:47 +09:00
Benjamin Southall d09953da07 ReportNotifier Slack notification support 2016-09-23 22:44:48 +09:00
Michael D. Reiley 8951cb74c8 Rebuild index when mod deletes a thread.
The index does not properly rebuild when a mod deletes a thread, resulting in a ghost thread remaining in the index until the next rebuild. This fix was originally contributed to Uboachan's codebase by Mannosuke.
2016-09-22 23:03:11 -07:00
jove bbb8075166 Overhauls error handling. 2016-09-01 20:49:22 +01:00
Michael Walker 96ed11a536 Revert "Error overhaul" 2016-09-01 18:59:01 +01:00
Michael Walker 54d37a4c0b Merge pull request #75 from 0xjove/error-overhaul
Error overhaul
2016-09-01 18:52:26 +01:00
jove f0a625b238 Adds proper fatal error handling and fixes CLI error reporting. 2016-08-31 20:51:09 +01:00
jove 77b99b2c4f Finishes error reworking. 2016-08-22 23:39:36 +01:00
ReCaffeinated d0d83ab8d7 We're reworking the error handler# 2016-08-22 22:19:48 +01:00
jove 06a6ae7bea Refactors the error handling function. 2016-08-22 22:19:48 +01:00
jove 8e0a8b1251 Fixes two bugs preventing replies from being moved. 2016-08-22 18:57:50 +01:00
jove 272635a370 Fixes an error reporting typo. 2016-08-21 16:44:57 +01:00
czaks 3f38a6db97 Merge branch 'master' of github.com:vichan-devel/Tinyboard 2016-08-19 23:15:47 +02:00
czaks a5e7b3da6f nntpchan: work around php nonsense 2016-08-19 23:15:42 +02:00
Jeff Becker 1c3e6e590a
patch for nntpchan stream 2016-08-19 16:05:50 -04:00
czaks 0b19051891 fix a notice; increase waiting time for dns 2016-08-15 04:13:26 +02:00
czaks a779b96370 second iteration of nntpchan implementation 2016-08-15 00:56:06 +02:00
czaks 5e335a8564 preliminary inbound nntpchan support 2016-08-14 16:24:17 +02:00
czaks 11cecf8452 Revert "[BUG] Image reject repost board option now also affects YT embeds"
This reverts commit b476b66007.
2016-06-21 05:03:44 +02:00
czaks d2bb4a776f fail gracefully on no thumbnail 2016-06-09 11:15:45 +02:00
czaks 8a46c7a0d5 tesseract OCR support for spamfilters 2016-06-09 11:09:10 +02:00
czaks 52fe9bc873 fix sane_strategy for advanced build. should fix the ajax.js problem. 2016-05-15 15:53:30 +02:00
czaks bb9aaad899 i forgot about a queue and a lock implementation 2016-05-08 15:37:49 +02:00
czaks f24e0f9814 optimize out openboard when we don`t need it. a big performance improvement too 🏎
also, don't call dnsbl for local ip addresses
2016-05-08 14:02:17 +02:00
czaks 12e6aba5d4 (2/2) advanced build. implement a daemon that will build static pages.
implement a queue and a lock. fix notice in bans. and it even works!

the daemon is basic right now, it could work in a mode that it will defer building certain
pages until a certain time.
2016-05-08 13:23:41 +02:00
czaks e265375475 fixup 2016-05-08 10:59:36 +02:00
czaks b6f0317bde advanced build (1/2): a small refactor of index generating procedure; generation strategies 2016-05-08 10:54:30 +02:00
czaks a5e22f6d63 split route and controller parts from smart build 2016-05-08 02:50:44 +02:00
Fredrick Brennan 505adffcdc Cyclical threads ♺ 2016-05-06 16:39:20 +02:00
czaks ab02a42725 maybe we can try to load Parsedown, after all we can silence the error 2016-05-06 16:27:43 +02:00
8chan d788131202 Allow a board called news to exist 2016-05-06 16:26:17 +02:00
czaks d726eaf195 we don't have a htmlpurifier yet ;_; 2016-05-06 16:07:21 +02:00
Fredrick Brennan 95b1e103cb Edit static pages commit 2016-05-06 16:03:55 +02:00
8chan 7911c374e8 Public action logs commit (log.php)
Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now.

===================================
Also: backports 351375185e5 (early 404)
2016-05-06 15:44:26 +02:00
8chan 6dd1420f91 Add event to quote backlinks 2016-05-06 15:15:17 +02:00
8chan ce3ce4f1b6 Fix *0 secure tripcodes caused by accidentally feeding + signs to crypt() 2016-05-06 15:14:55 +02:00
8chan 7831da83fc New event: rebuildpost, allows you to bind events to ?/edit 2016-05-06 15:13:27 +02:00
Fredrick Brennan b476b66007 [BUG] Image reject repost board option now also affects YT embeds 2016-05-06 15:12:08 +02:00
czaks 126ee42b9d better rules for stripping combined chars, based on 45c0d327619 by @ctrlcctrlv 2016-05-06 14:34:42 +02:00
czaks 33ef3f9b01 synchronize catalog_link 2016-05-06 14:14:22 +02:00
8chan 7a7574bdca SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2016-05-06 12:43:25 +02:00
8chan 6da7f4d25a No more country flags in <title> 2016-05-06 12:40:37 +02:00
8chan 632d0a76d0 Display placeholder if no file in catalog/theme.php; czaks: fix the code a bit 2016-05-06 12:37:00 +02:00
8chan 6b04b3c671 Fix post deletion 2016-05-05 13:21:09 +02:00
Fredrick Brennan 8943bb0bb3 Rewrite report system due to flooding 2016-05-05 12:57:52 +02:00
czaks cd01191072 those parts are extraneous 2016-05-05 11:45:29 +02:00
8chan 3eb755ee7e Move login check in inc/mod/auth.php to a function
This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords)
2016-05-05 11:40:52 +02:00
8chan Admin 93f748e6a8 Security: capitalization of mods username is significant 2016-05-05 11:39:12 +02:00
czaks d310abc95c Merge branch 'master' of github.com:vichan-devel/vichan 2016-05-05 10:54:09 +02:00
czaks abe4bdd6ae fixup 2016-05-05 10:52:58 +02:00
czaks 77176faece enable javascript in mod panel 2016-05-05 09:56:54 +02:00
czaks a42256b296 locale cache: fix a bug when perms are done wrong 2016-05-05 08:43:34 +02:00
czaks 36b78e5f98 fix for editor highlighting 2016-05-05 08:40:13 +02:00
czaks dcf5d699bd simplify the md5 execution logic 2016-05-05 08:22:19 +02:00
czaks 9768161327 simplify the code a bit 2016-05-05 07:51:55 +02:00
czaks 7c3126866c ease the migration process for the previous security patch (by introducing another migration); restore php 5.4 compatibility (introducing a polyfill system) 2016-05-05 06:43:22 +02:00
czaks caaf741691 [SECURITY] keep up with modern password hashing standards 2016-04-22 05:35:43 +02:00
Michael Walker 9f00630b40 Display banned post contents if reason does not contain cp 2016-02-11 15:21:54 +00:00
Matthieu d2de4419bd Added: config option to hide email in post. (prevent emailfag but let the possibility to sage and noko) 2016-01-26 00:50:55 +01:00
Michael Walker d46428b5b7 Trim leading newlines and trailing whitespace from code blocks. 2016-01-03 21:05:31 +00:00
Michael Walker 692ca79d8b Don't include post messages in public banlist 2015-10-17 23:57:36 +01:00
Michael Walker 166ba2a0a2 Merge remote-tracking branch 'vichan/master' 2015-09-12 21:03:54 +01:00
czaks 6d4e756240 fix a bug for some bad database state. thanks Seisatsu for testing 2015-09-11 12:49:42 +02:00
czaks 706feeddff fix cache_config: webms were thumbnailed twice and with the latest addition, they couldn`t resize at all 2015-08-11 04:51:27 +02:00
czaks a54488d900 Merge branch 'master' of github.com:vichan-devel/Tinyboard 2015-08-11 03:47:54 +02:00
czaks 1136cc0e44 reflect in readme, that we support .mp4 files as well now 2015-08-11 03:47:44 +02:00
czaks ccd00c497c a stricter check for webm processing 2015-08-11 03:46:02 +02:00
Marcin Łabanowski 11d4cb0f4f Merge pull request #155 from 27chan/patch-7
Add extension mp4
2015-08-11 03:44:51 +02:00
Marcin Łabanowski b0eb49de82 Merge pull request #160 from 27chan/patch-10
Add extension mp4
2015-08-11 03:39:22 +02:00
27chan 219c1987a9 Add extension mp4 2015-08-10 22:25:09 -03:00
27chan f1cbbbc15a Add extension mp4 2015-08-10 22:15:21 -03:00
27chan 601c8cebc9 Add extension mp4 2015-08-10 22:13:42 -03:00
czaks d3d167affb SECURITY: XSS fix for youtube.js/metacafe embed 2015-07-08 16:26:58 +02:00
Matěj Grabovský b25b443e55 Fix a few fatal errors 2015-06-13 22:34:14 +02:00
Anonke 3f29bdfac9 the poster IDs were showing in API despite being disabled 2015-05-30 20:46:43 +02:00