Commit Graph

10183 Commits

Author SHA1 Message Date
Rob Lensen 6a3f8f3e76 Initial work to support PHP 7.2 2018-01-17 23:40:27 +01:00
plegall 9671454e75 fixes #826, check input parameter order_by in configuration 2017-12-18 17:06:37 +01:00
plegall 9028c75c1f fixes #825, check user input on Batch Manager, unit mode, to prevent SQL injection 2017-12-18 16:44:42 +01:00
plegall 77f02bfd76 fixes #822, add token on configuration page to prevent CSRF 2017-12-18 15:13:49 +01:00
plegall 9e29db0481 fixes #824 more generic code to get current script directory (working both on Linux and MacOSX) 2017-12-18 14:29:32 +01:00
plegall 1da9d6afc4 fixes #823 add input user check to avoid SQLi on users list 2017-12-18 14:02:52 +01:00
MaximeBOURMAUD 8d25fa6e23 Add script testing Piwigo install, add album + add picture (#820) 2017-12-15 11:21:40 +01:00
plegall 98ee7c1e5c fixes #818, add remote_sync.pl script from piwigo.org forum (script written back in 2009) 2017-12-15 10:49:46 +01:00
modus75 b9f0f22395 Merge branch 'master' of https://github.com/Piwigo/Piwigo 2017-11-12 10:31:46 +01:00
modus75 1e87cc8596 fixes #777 WS categories getImages, TotalCount for correct pagination builder (fix #2) 2017-11-12 10:30:56 +01:00
Cosmin Stroe ee4aae7e74 Fixes #767 - Return a 500 HTTP status when a file upload error occurs. (#768)
* Return a 500 HTTP status when a file upload error occurs.
2017-10-05 15:35:24 +02:00
plegall 977588999a fixes #789, add url param hide_redirect_error 2017-10-04 10:35:33 +02:00
modus75 164b59588c fixes #777 WS categories getImages, TotalCount for correct pagination builder 2017-09-30 16:19:35 +02:00
plegall a335d70418 fixes 787, check URL parameter "action" to avoid error messages 2017-09-28 15:02:41 +02:00
modus75 46ddfabc38 Merge branch 'master' of https://github.com/Piwigo/Piwigo 2017-09-25 21:44:13 +02:00
modus75 98a39fee72 better check on input parameters (got some odd hack attempts) 2017-09-25 21:43:31 +02:00
MaximeBOURMAUD c4af38fe48 Fixes issue 723 now when requesting an private id, permalink isn't re… (#771)
* Fixes issue 723 now when requesting an private id, permalink isn't revealed

* remove newline at end of files and one useless line

* remove newline at end of files and one useless line

* Fixes if condition
2017-09-19 11:31:17 +02:00
MaximeBOURMAUD 943ab9d189 Issue/747 php notice when changing admin page theme (#774)
* Fixes#747 Only variables should be passed by reference

* Fixes syntax
2017-09-19 11:25:00 +02:00
MaximeBOURMAUD c9ab538319 Fixs issue #760 date_creation not refreshed when changing it from picture_modify (#763) 2017-09-18 17:48:42 +02:00
MaximeBOURMAUD b585f5bcc3 Removing Deprecated error message for PHP 7 (#764) 2017-09-18 17:20:45 +02:00
flop25 83dac227cf cleaning code and wrong EOL
additional semicolon, uses of === instead of ==
2017-09-05 18:52:15 +02:00
flop25 a29c967d34 Merge branch 'master' of https://github.com/Piwigo/Piwigo 2017-09-05 14:47:32 +02:00
flop25 06a50ca8b0 Feature #759, choose to display all Tags and/or current ones
This commit introduces a new config var and a minor change in a tpl
(language key switch)
It also change the default behaviour; can be set back to the previous
one with $conf['menubar_tag_cloud_content'] = 'current_only'
Potential Performance issue; test needed
2017-09-05 14:47:27 +02:00
MaximeBOURMAUD a1fc05c586 Fixes #714 - doesn't exist (#758) 2017-09-05 11:20:26 +02:00
flop25 06952b2d5a Merge branch 'master' of https://github.com/Piwigo/Piwigo 2017-09-04 18:57:26 +02:00
flop25 08cce48d4b Fixes #755 Never thow '0000-00-00 00:00:00' as value but Null instead
only for exif ; iptc is ok
2017-09-04 18:57:22 +02:00
MaximeBOURMAUD 2c07301467 Fixing issue #731 (#754)
* Fixing issue #731, if NB_PHOTOS is upper than 1000 display it

* Fixs issue #731 now number of picture between 1000 and 1999 are displayed

* Fixs formatting
2017-09-04 14:23:50 +02:00
flop25 d4487be684 Merge branch 'master' of https://github.com/Piwigo/Piwigo 2017-09-01 17:39:32 +02:00
flop25 47164bc737 fixes #603 no more use of include in tpl for comment_list
so comment_list can be replaced via template extension or extensions
No HTML changes just tpl and php
2017-09-01 17:39:26 +02:00
flop25 011b12cfaa fixes #751, missing DROP statements at install 2017-09-01 15:29:51 +02:00
plegall 028c4ee2d5 fixes #739, make sure keys are reset in the "uniquified" array
... for a regular search, when different set of photos matches the search.
2017-07-25 18:25:36 +02:00
plegall a3cf80c77c fixes #732, avoid conflict with PHP function "transliterate" 2017-07-13 11:29:27 +02:00
plegall f520f82736 fixes #726, add trigger in create_virtual_category 2017-07-03 15:56:21 +02:00
plegall 6126a09604 fixes #725, protect pwg.images.setInfo from HTML 2017-07-03 13:56:10 +02:00
plegall b5fc14700a give error details on permalink creation 2017-07-03 13:56:10 +02:00
flop25 a4982978c0 now "Apply to sub-albums" can be applied to set all children album as public ones
https://github.com/Piwigo/Piwigo/issues/697
technically it's like going to page=cat_options&section=status but
that's more userfriendly to get that feature on permission page of an
album too
2017-07-02 23:29:07 +02:00
flop25 30e8babd6d pwg_token left for cat_options pages
solving https://github.com/Piwigo/Piwigo/issues/721
2017-06-29 16:25:26 +02:00
flop25 3dd6812412 check input parameter for cat_options pages
solving https://github.com/Piwigo/Piwigo/issues/724
2017-06-29 16:24:15 +02:00
flop25 03a8329b89 adding pwg_token on permalink & cat_options
and therefor solving issue:721
2017-06-28 23:44:26 +02:00
plegall d542de77c3 fixes #713, use the default language to send email
and not only to build the email body message
2017-06-21 11:44:12 +02:00
plegall fffd35174f fixes #710, avoid using get_gallery_home_url()
because it may be different from get_absolute_root_url() if you have a $conf['gallery_url']
2017-06-15 23:10:25 +02:00
plegall ea382e85bf fixes #708, script to extract issues from Github 2017-06-15 17:52:08 +02:00
plegall 346f5c3849 fixes #707, hide decimal for "158.0 pages seen" 2017-06-14 19:42:21 +02:00
plegall bbb9c5e6b5 issue #706, force redirection within Piwigo 2017-06-14 10:23:47 +02:00
plegall 4b9b7855f0 issue #706, check the redirect is within Piwigo 2017-06-14 10:22:30 +02:00
plegall 6ce14fc958 fixes #705, check user_list_backend.php input params 2017-06-13 12:27:37 +02:00
plegall e0b7c1d157 fixes #701, use the appropriate site_id instead of 1
When coming from the album edit page with the action link to synchronization
2017-06-12 14:30:30 +02:00
plegall 4581f3e2ba fixes #693, pclzip compatibility with PHP 7.1 2017-06-12 13:50:28 +02:00
plegall 4310fe7a55 fixes #667, check $_GET['page'] to avoid XSS
This can be an issue only on Internet Explorer
2017-06-12 11:36:28 +02:00
plegall 3ae62ce118 fixes #699, make sure $_GET['tab'] does not include unexpected chars 2017-06-02 10:10:50 +02:00