Commit Graph
100 Commits
Author SHA1 Message Date
plegall 21dc3b8490 sample perl script to use pwg.images.addSimple 2020-07-08 16:53:22 +02:00
plegall cb1d7522d8 next version is 2.11.0beta1 2020-06-12 16:12:02 +02:00
plegall ba264c5743 fixes #1188 since 5b65fca3 the rank word can be surrounded by backticks 2020-05-19 16:56:52 +02:00
plegall b31d68fbd9 fixes #1182 with inheritance_by_default, copy only permissions from parents and do not add admins 2020-05-07 12:30:47 +02:00
plegall 40182f7774 fixes #1120 check installed theme on its identifier (=directory name), not on its display name 2020-04-30 11:32:52 +02:00
Pierrick Le Gall 4a963c4335 update to 2020
(much simpler than before...)
2020-04-15 16:00:43 +02:00
Pierrick Le Gall 72ba6771b6 fix image src for issue example 2020-04-15 15:08:44 +02:00
plegall 8a5a2d9831 Revert "Fix PHP-7.4 Issue "
This reverts commit ea25f5b3a4.
2020-03-25 14:55:06 +01:00
plegall d3879b19f9 issue #1114 use the new screenshot provided by @HWFord 2020-03-25 14:53:48 +01:00
plegall cf38caff67 fixes #1119 keep the ability to reset password when there is no photo yet 2020-03-24 15:18:09 +01:00
plegall 1e23ed84d3 fixes #1168 prevent XSS on pwg.images.setInfo 2020-03-24 14:07:49 +01:00
plegall e21ef06e3d fixes #1162 filter users on a specific group 2020-02-18 10:50:36 +01:00
plegall d365e2d216 fixes #1114 the Piwigo for Android app comes back
Revert "issue #420, remove Piwigo for Android, not up-to-date"

This reverts commit 069581b80d
2020-02-10 16:41:52 +01:00
plegall 6ac6db0d2d issue #1150 also protect groupe name on API methods 2020-02-07 17:17:17 +01:00
plegall 619849ff8b fixes #1150 prevent HTML code in group name
It avoids any stored XSS between administrators and it's totally useless to have HTML code in the group name.
2020-02-07 17:05:56 +01:00
plegall cade53577c missing piece of code for #1098 to make the number of checksum configurable 2020-02-07 15:10:05 +01:00
plegall 29cc543a14 fixes #1133 adapt the height of the scrolling menu for plugins, depending on browser available height.
Also, change background color of this scrollbar.
2019-12-03 12:25:29 +01:00
plegall 90e4a63ea1 fixes #1112 better management for long username + long gallery name on small screen 2019-11-26 16:33:42 +01:00
plegall 41b4230b39 fixes #1102 limit the number of tags shown in the menubar 2019-10-15 16:02:14 +02:00
plegall c4142c2a51 fixes #1092 javascript syntax error on batch manager (Safari only) 2019-10-14 14:29:27 +02:00
plegall 72094c5f88 fixes #1090 move warning about missing checksums from dashboard to sync page
* avoid scaring users for a minor issue
* convert the warning message into a simple info
* simplify algorithm for detection and only search on relevant pages (batch manager + sync page)
2019-10-14 14:14:54 +02:00
plegall 9b695da86b (cp 15d8a19) fixes #988 no more warning on PHP 7.3
This fix was initially only for branch 2.9, and branch master should have
received a new version of jshrink, but I forgot to do it before 2.10 and now
we have a regression in 2.10. This commit will be cherry-picked to 2.10 and
we also have it on master so that we don't have a new regression in 2.11 (in
case jshrink is not properly updated)
2019-10-14 12:31:28 +02:00
plegall e49c217441 fixes #1099 avoid JS error when there is no album associated to current photo set 2019-10-14 12:27:41 +02:00
plegall ac5d00e89b fixes #1098 make checksum computation block size configurable, and smaller by default 2019-10-14 12:22:53 +02:00
plegall 54b727a22a fixes #1097 checksum compute, make the block size constant 2019-10-14 11:42:51 +02:00
plegall 8fe4305d35 during upgrade, use the new default Piwigo theme (modus) instead of hardcoded "elegant"
... and make sure the default Piwigo theme is active before that.
2019-10-08 12:23:54 +02:00
plegall 087284eafc next version is 2.10.0 2019-10-07 16:07:57 +02:00
plegall 6a25b9efea update language directory from the "translation" branch
simple copy, based on commit 28e0a2c089
2019-10-07 16:05:10 +02:00
plegall 0e86caac30 [design] quick improve of new plugins filter 2019-10-07 12:32:32 +02:00
plegall 95a656c145 no more need of jGrowl on upload form 2019-09-26 11:15:24 +02:00
plegall a30b1115ae issue #1080 moves fontello animation.css at the end of the combined files list
It does not fixes the parsing problem, but it avoids breaking following CSS rules.
2019-09-25 16:25:20 +02:00
Pierrick Le Gall 1872f75938 refresh Github readme
* new logo
* new screenshot
* new URLS (using https instead of http)
* link to contributing guide
2019-09-23 12:12:51 +02:00
plegall fa8996e10f issue #1073 prevents from making uploaded file executable
* for the name of the file in buffer directory, do not use the name given by the user, but the md5 of the name without extension
* function add_uploaded_file deletes uploaded file if not expected
2019-09-20 16:26:21 +02:00
plegall 7e154ab093 issue #1075 check the url keys are expected 2019-09-20 14:02:03 +02:00
plegall dcaf31fe09 update year in API browser footer 2019-09-20 13:58:30 +02:00
plegall 1061dd0a77 fixes #1070 use ajax queue manager to launch metadata syncs
+ exit from event once the "metadata" is performed to avoid side effects with "delete" action.
2019-09-03 16:49:12 +02:00
plegall 5b65fca36c fixes #1068 escape the rank new MySQL 8 reserved word
This time, we do it right before sending the query to MySQL, in the pwg_query
function. This is not optimal, because we add extra processing, useless most
of the time. This solution has less impact on code, and automatically work for
all core and plugins SQL queries.
2019-08-30 12:11:47 +02:00
plegall bf39de788a fixes #1016 API method pwg.session.login gets same behavior a web login form, regarding empty password 2019-08-26 15:55:09 +02:00
plegall 18460716e3 next release is 2.10.0RC1 2019-08-19 15:16:55 +02:00
plegall 38f4d6199d update language directory from the "translation" branch
simple copy, based on commit 2d46a7599e
2019-08-19 14:58:22 +02:00
plegall 01e593fde2 fixes #1063 upgrade script to 2.10 2019-08-14 16:50:19 +02:00
plegall 63bbba8e36 fixes #1060 always escape table/column names in advanced database functions
which are single_insert, single_update, mass_inserts and mass_updates. The new function
protect_column_name simply surrounds the name with backticks, if needed.
2019-08-13 16:44:54 +02:00
plegall 3478033515 fixes #1057 use a popin instead of popup to display admin page help.
The "old way" still works with the popuphelp() javascript function.
2019-08-13 12:07:16 +02:00
plegall b4f8d6d994 fixes #1056 use a font-icon for page help 2019-08-12 17:01:41 +02:00
plegall 7234d0108e fixes #1011 add user input checks (and pwg_token) to avoid SQL injection (and CSRF) 2019-08-12 16:45:21 +02:00
plegall 91349065ea fixes #1010 prevent from SQL injection with user input check 2019-08-12 16:24:27 +02:00
plegall fccb6caa75 fixes #1012 prevent SQL injection with a check on user input 2019-08-12 14:52:56 +02:00
plegall 4932bc502b fixes #1009 check group_selection parameter to be only an array of ids 2019-08-12 14:25:56 +02:00
plegall 776f8fa186 fixes #1058 prevent CSRF on notification by mail, with a pwg_token
also added some checks to NBM parameters to avoid XSS (minor issue)
2019-08-12 12:31:24 +02:00
plegall fdcb6f50f6 fixes #1055 prevents XSS on original resize fields 2019-08-09 15:52:04 +02:00
plegall bc0b49cdad fixes #1053 add themes {modus, elegant, smartpocket} in release build 2019-08-06 18:20:29 +02:00
plegall 54154eb834 fixes #1052 separate themes from Piwigo core repository
* Sylvia : https://github.com/Piwigo/piwigo-Sylvia
* elegant : https://github.com/Piwigo/piwigo-elegant
* smartpocket : https://github.com/Piwigo/piwigo-smartpocket
* dark : https://github.com/Piwigo/piwigo-dark
* clear : https://github.com/Piwigo/piwigo-clear
2019-08-06 17:52:04 +02:00
plegall 292b414d25 remove shadow on album creation button for empty gallery 2019-07-19 14:27:50 +02:00
plegall 2842934633 fixes #899 API methods to manage user favorite photos
* rename methods to pwg.users.favorites.getList + pwg.users.favorites.add + pwg.users.favorites.remove (better for alpha ordered listing)
* simplify method ws_users_favorites_getList to only work with current user
* use the new option "ignore" on single_insert
2019-07-17 15:48:06 +02:00
plegall 551457f2b6 fixes #1051 ability to insert ignore on single_insert 2019-07-17 11:15:59 +02:00
plegall 4ae0f46bae fixes #1049 update applications, new screenshots and hide ReGalAndroid 2019-07-11 14:54:34 +02:00
plegall b101869417 update release to 2.10.0beta2 2019-07-04 11:22:09 +02:00
plegall c1eecab364 fixes #996 escape word "groups" in SQL queries, new reserved word with MySQL 8 2019-06-28 18:07:53 +02:00
plegall 0ef2193471 fixes #93 automatically hide the newsletter link when clicked 2019-06-28 14:45:05 +02:00
plegall 3999bff326 fixes #1042 set Modus as default theme 2019-06-28 11:21:18 +02:00
plegall 5436c48ead fixes #1041 no longer activate TakeATour by default 2019-06-28 10:35:43 +02:00
plegall 22f3e679ee fixes #1040 move check upgrade action to maintenance page 2019-06-27 19:09:40 +02:00
plegall af85a62199 fixes #1038 deactivate user comments by default 2019-06-26 16:05:42 +02:00
plegall 4195572563 fixes #904 avoid warnings on PHP 7.2+ with PHPMailer (without updating PHPMailer) 2019-06-21 15:02:02 +02:00
plegall 46781c191a issue #1031 no background on album path 2019-06-20 16:44:18 +02:00
plegall 9bc9bae2cc fixes #1035 translate the visit link 2019-06-20 14:55:23 +02:00
plegall 9e629a2369 issue #1031 album manager, move breadcrumbs outside page title 2019-06-11 16:38:49 +02:00
plegall f21da2c947 issue #830 forgot to replace Matomo (used as template) by Piwigo 2019-06-04 17:17:30 +02:00
plegall fc193f7474 issue #830 simplify PHP files header, remove copyright/license info 2019-06-04 17:13:51 +02:00
plegall c773f655cc issue #830 add a global COPYING file with copyright/license/trademark infos 2019-06-04 16:41:33 +02:00
plegall 2829f1a4ea fixes #1029 only keep new logo 2019-06-04 14:51:01 +02:00
plegall 305e9c914a update version 2019-06-04 11:35:47 +02:00
plegall 5f0c429d2b issue #987 change a:hover to new orange 2019-05-31 12:08:58 +02:00
plegall 63ca304ff4 issue #1019 missing l10n 2019-05-31 11:26:25 +02:00
plegall b150774bc9 issue #1019 do not display album selection if coming from a "add photos to album" link 2019-05-28 16:08:11 +02:00
plegall 242b734d8f issue #1019 slightly move up welcome box 2019-05-28 16:06:57 +02:00
plegall 99351c5898 issue #987 replace H2 by H1 only if H2 is available 2019-05-28 16:06:00 +02:00
plegall 692120cd07 issue #987 set a title on pages 2019-05-28 16:05:09 +02:00
plegall fafa0dd7ae issue #1014 no more link on album name, a big button does the same job 2019-05-28 15:58:16 +02:00
plegall f3cc541208 issue #1002 dashboard redesign, colors for big icons 2019-04-12 15:31:53 +02:00
plegall c202897a72 issue #552 change activity.occured_on to TIMESTAMP instead of DATETIME to make it work on old MySQL versions 2019-04-10 16:49:03 +02:00
plegall dc40d1956e fixes #945 pwg_log automatically creates a new history.section in the enum, when needed 2019-04-02 16:04:01 +02:00
plegall ab46632a32 Revert "Include pwg_token in user list POST request (Fixes #748) (#866)"
This reverts commit 65ac272179.
2019-04-02 14:06:54 +02:00
plegall 1646f5e631 fixes #998 temporary fix for Piwigo Remote Sync compatibility 2019-04-02 11:33:27 +02:00
plegall 940d1d2e8c issue #552
* many more admin actions are logged into activity table
* use the activity.details as an associative array (serialized in database)
2019-04-01 16:19:09 +02:00
plegall 447e7e729f remove useless package.json file for open-sans, causing irrelevant security alert 2019-03-25 17:02:17 +01:00
plegall 27a6504284 issue #552 new table activity and log add/edit/delete on albums 2019-03-25 16:50:45 +01:00
plegall 6a336ed4ec issue #987 refresh header message (for example, used to notify about upgrade_feed) 2019-03-25 16:45:36 +01:00
plegall b20d46e3f3 fixes #992 wrong menubar alignment on Chrome 2019-03-22 17:02:12 +01:00
plegall 14eeb35c66 re-order albums: use new icon instead of old image 2019-03-22 14:59:54 +01:00
plegall 8afda448ef new icon arrow-combo to re-order albums 2019-03-22 14:49:15 +01:00
plegall 288d72846d fixes #991 better hide h2 without hiding plugin search filter 2019-03-22 12:27:25 +01:00
plegall 1eaeb8ba3c issue #987 new admin design adapted for dark theme 2019-03-22 12:13:32 +01:00
plegall 148cefb2f2 update from https://github.com/FontFaceKit/open-sans to commit 5949316 to avoid vulnerability alert by Github 2019-03-15 15:15:30 +01:00
plegall 6f1b75d135 issue #987 new header/menubar/footer for admin pages
only works fine for "day" mode, not for "night" mode yet
2019-03-15 14:10:19 +01:00
plegall 466a479be0 issue #987 add font Open Sans for admin pages 2019-03-15 12:08:53 +01:00
plegall 19cccd9053 issue #987 new icons (left and down arrows for menubar) 2019-03-15 12:07:24 +01:00
plegall 9f6e3e9080 fixes #979 derivative cache generation works even for file with representative picture
Cache medium size, instead of thumbnail.
2019-03-08 15:16:08 +01:00
plegall b29ab344e9 fixes #972 use an alternative algorithm to discover number of future orphans, with very large albums 2019-01-28 14:05:51 +01:00
plegall b1cb4e48c0 due to changes for compatibility with PHP 7.2, Piwigo now requires PHP 5.3 2018-07-12 11:20:53 +02:00