a30b1115ae
issue #1080 moves fontello animation.css at the end of the combined files list
...
It does not fixes the parsing problem, but it avoids breaking following CSS rules.
2019-09-25 16:25:20 +02:00
1872f75938
refresh Github readme
...
* new logo
* new screenshot
* new URLS (using https instead of http)
* link to contributing guide
2019-09-23 12:12:51 +02:00
fa8996e10f
issue #1073 prevents from making uploaded file executable
...
* for the name of the file in buffer directory, do not use the name given by the user, but the md5 of the name without extension
* function add_uploaded_file deletes uploaded file if not expected
2019-09-20 16:26:21 +02:00
7e154ab093
issue #1075 check the url keys are expected
2019-09-20 14:02:03 +02:00
dcaf31fe09
update year in API browser footer
2019-09-20 13:58:30 +02:00
1119d36c4b
XSS Fix
...
urlencode() key data as well
2019-09-20 13:55:32 +02:00
28e0a2c089
Update ru_RU, thanks to Konve
2019-09-15 22:58:33 +02:00
1061dd0a77
fixes #1070 use ajax queue manager to launch metadata syncs
...
+ exit from event once the "metadata" is performed to avoid side effects with "delete" action.
2019-09-03 16:49:12 +02:00
5b65fca36c
fixes #1068 escape the rank new MySQL 8 reserved word
...
This time, we do it right before sending the query to MySQL, in the pwg_query
function. This is not optimal, because we add extra processing, useless most
of the time. This solution has less impact on code, and automatically work for
all core and plugins SQL queries.
2019-08-30 12:11:47 +02:00
bf39de788a
fixes #1016 API method pwg.session.login gets same behavior a web login form, regarding empty password
2019-08-26 15:55:09 +02:00
18460716e3
next release is 2.10.0RC1
2019-08-19 15:16:55 +02:00
38f4d6199d
update language directory from the "translation" branch
...
simple copy, based on commit 2d46a7599e
2019-08-19 14:58:22 +02:00
2d46a7599e
Update fr_FR, thanks to plg
2019-08-14 17:29:46 +02:00
01e593fde2
fixes #1063 upgrade script to 2.10
2019-08-14 16:50:19 +02:00
7b6912ba98
Use default theme if loaded one is not found
...
When loading a user's theme, make sure it's installed. Also, when
determining the default theme, account for the situation in which
zero themes are installed (and use 'default' then).
Refs #1061
2019-08-14 12:18:45 +02:00
63bbba8e36
fixes #1060 always escape table/column names in advanced database functions
...
which are single_insert, single_update, mass_inserts and mass_updates. The new function
protect_column_name simply surrounds the name with backticks, if needed.
2019-08-13 16:44:54 +02:00
3478033515
fixes #1057 use a popin instead of popup to display admin page help.
...
The "old way" still works with the popuphelp() javascript function.
2019-08-13 12:07:16 +02:00
b4f8d6d994
fixes #1056 use a font-icon for page help
2019-08-12 17:01:41 +02:00
7234d0108e
fixes #1011 add user input checks (and pwg_token) to avoid SQL injection (and CSRF)
2019-08-12 16:45:21 +02:00
91349065ea
fixes #1010 prevent from SQL injection with user input check
2019-08-12 16:24:27 +02:00
fccb6caa75
fixes #1012 prevent SQL injection with a check on user input
2019-08-12 14:52:56 +02:00
4932bc502b
fixes #1009 check group_selection parameter to be only an array of ids
2019-08-12 14:25:56 +02:00
776f8fa186
fixes #1058 prevent CSRF on notification by mail, with a pwg_token
...
also added some checks to NBM parameters to avoid XSS (minor issue)
2019-08-12 12:31:24 +02:00
fdcb6f50f6
fixes #1055 prevents XSS on original resize fields
2019-08-09 15:52:04 +02:00
bc0b49cdad
fixes #1053 add themes {modus, elegant, smartpocket} in release build
2019-08-06 18:20:29 +02:00
54154eb834
fixes #1052 separate themes from Piwigo core repository
...
* Sylvia : https://github.com/Piwigo/piwigo-Sylvia
* elegant : https://github.com/Piwigo/piwigo-elegant
* smartpocket : https://github.com/Piwigo/piwigo-smartpocket
* dark : https://github.com/Piwigo/piwigo-dark
* clear : https://github.com/Piwigo/piwigo-clear
2019-08-06 17:52:04 +02:00
5de7839721
Update sv_SE, thanks to adrian_vg
2019-07-31 17:17:57 +02:00
85af6f44cc
Update tr_TR, thanks to katpatuka
2019-07-24 05:44:14 +02:00
22de7308a7
Update zh_CN, thanks to dennisyan
2019-07-24 05:44:02 +02:00
642ce38830
Update fr_FR, thanks to laurent.duretz
2019-07-24 05:43:48 +02:00
f1ea26032b
Update pl_PL, thanks to mjp
2019-07-24 05:43:36 +02:00
78313d337f
Update fr_CA, thanks to bgoutier
2019-07-24 05:43:22 +02:00
292b414d25
remove shadow on album creation button for empty gallery
2019-07-19 14:27:50 +02:00
e91c2b855c
Update da_DK, thanks to Kaare
2019-07-18 05:35:10 +02:00
a72f3c0560
Update et_EE, thanks to Pelagis
2019-07-18 05:34:26 +02:00
ecf1fc9ab8
Update he_IL, thanks to ymoran00
2019-07-18 05:34:13 +02:00
6fc4ef0c4e
Update nb_NO, thanks to paulen
2019-07-18 05:34:01 +02:00
43cc873562
Update nl_NL, thanks to EdwinKort
2019-07-18 05:33:48 +02:00
7c2585dd84
Update da_DK, thanks to Kaare
2019-07-18 05:33:36 +02:00
b4b00b5383
Update uk_UA, thanks to m_alien
2019-07-18 05:33:23 +02:00
2842934633
fixes #899 API methods to manage user favorite photos
...
* rename methods to pwg.users.favorites.getList + pwg.users.favorites.add + pwg.users.favorites.remove (better for alpha ordered listing)
* simplify method ws_users_favorites_getList to only work with current user
* use the new option "ignore" on single_insert
2019-07-17 15:48:06 +02:00
05fb7aafd4
Order by the field(s) used to find duplicates
...
When searching for duplicates, also sort the results by the
fields used to find the duplicates.
2019-07-17 15:22:53 +02:00
551457f2b6
fixes #1051 ability to insert ignore on single_insert
2019-07-17 11:15:59 +02:00
3cdb91df01
Update de_DE, thanks to e-dschungel
2019-07-17 06:33:36 +02:00
1459ffca79
Update da_DK, thanks to Kaare
2019-07-17 06:33:23 +02:00
0e5a79d721
Update pt_BR, thanks to flaviove
2019-07-17 06:33:10 +02:00
33054a5d2d
Update tr_TR, thanks to Nakre
2019-07-17 06:32:58 +02:00
c1e3df85aa
Update nl_NL, thanks to EdwinKort
2019-07-17 06:32:46 +02:00
d44ec22ff2
Update sr_RS, thanks to gpopac
2019-07-17 06:32:34 +02:00
48a007d5bf
Update es_ES, thanks to Tirs
2019-07-17 06:32:22 +02:00
plegall