2309 Commits

Author SHA1 Message Date
plegall
3b1f636e26 (cp ba264c5) fixes #1188 since 5b65fca3 the rank word can be surrounded by backticks 2020-05-19 16:58:33 +02:00
plegall
6db8da47ea (cp b31d68f) fixes #1182 with inheritance_by_default, copy only permissions from parents and do not add admins 2020-05-07 12:31:18 +02:00
plegall
2f3488ef62 (cp d3879b1) issue #1114 use the new screenshot provided by @HWFord 2020-03-25 14:54:05 +01:00
plegall
b3027b1977 (cp e21ef06) fixes #1162 filter users on a specific group 2020-02-18 10:52:09 +01:00
plegall
e643740a09 (cp d365e2d) fixes #1114 the Piwigo for Android app comes back
Revert "issue #420, remove Piwigo for Android, not up-to-date"

This reverts commit 069581b80d
2020-02-10 16:47:15 +01:00
plegall
4e0ab8e515 (cp 619849f) fixes #1150 prevent HTML code in group name
It avoids any stored XSS between administrators and it's totally useless to have HTML code in the group name.
2020-02-07 17:07:19 +01:00
plegall
a3898f9666 (cp 884c432) Quote mysql keyword groups 2019-12-16 10:55:04 +01:00
plegall
0d9bc4da7d (cp 8573e35) include/functions_cookie: use proper brackets for offset access
Fixes #1134
2019-12-04 10:42:07 +01:00
plegall
20ace0e2c8 (cp 29cc543) fixes #1133 adapt the height of the scrolling menu for plugins, depending on browser available height.
Also, change background color of this scrollbar.
2019-12-03 12:27:08 +01:00
plegall
2042598f5b (cp 90e4a63) fixes #1112 better management for long username + long gallery name on small screen 2019-11-26 16:34:23 +01:00
plegall
c9aa99d0cb (cp c4142c2) fixes #1092 javascript syntax error on batch manager (Safari only) 2019-10-14 14:30:44 +02:00
plegall
0a89747afa (cp 72094c5) fixes #1090 move warning about missing checksums from dashboard to sync page
* avoid scaring users for a minor issue
* convert the warning message into a simple info
* simplify algorithm for detection and only search on relevant pages (batch manager + sync page)
2019-10-14 14:18:43 +02:00
plegall
1e78225b0d (cp e49c217) fixes #1099 avoid JS error when there is no album associated to current photo set 2019-10-14 12:28:35 +02:00
plegall
d8e2e52e88 (cp ac5d00e) fixes #1098 make checksum computation block size configurable, and smaller by default 2019-10-14 12:23:40 +02:00
plegall
b5dd0da47e (cp 54b727a) fixes #1097 checksum compute, make the block size constant 2019-10-14 11:44:04 +02:00
plegall
8fe4305d35 during upgrade, use the new default Piwigo theme (modus) instead of hardcoded "elegant"
... and make sure the default Piwigo theme is active before that.
2019-10-08 12:23:54 +02:00
plegall
0e86caac30 [design] quick improve of new plugins filter 2019-10-07 12:32:32 +02:00
plegall
95a656c145 no more need of jGrowl on upload form 2019-09-26 11:15:24 +02:00
plegall
a30b1115ae issue #1080 moves fontello animation.css at the end of the combined files list
It does not fixes the parsing problem, but it avoids breaking following CSS rules.
2019-09-25 16:25:20 +02:00
plegall
fa8996e10f issue #1073 prevents from making uploaded file executable
* for the name of the file in buffer directory, do not use the name given by the user, but the md5 of the name without extension
* function add_uploaded_file deletes uploaded file if not expected
2019-09-20 16:26:21 +02:00
plegall
7e154ab093 issue #1075 check the url keys are expected 2019-09-20 14:02:03 +02:00
James Bercegay
1119d36c4b XSS Fix
urlencode() key data as well
2019-09-20 13:55:32 +02:00
plegall
1061dd0a77 fixes #1070 use ajax queue manager to launch metadata syncs
+ exit from event once the "metadata" is performed to avoid side effects with "delete" action.
2019-09-03 16:49:12 +02:00
plegall
3478033515 fixes #1057 use a popin instead of popup to display admin page help.
The "old way" still works with the popuphelp() javascript function.
2019-08-13 12:07:16 +02:00
plegall
b4f8d6d994 fixes #1056 use a font-icon for page help 2019-08-12 17:01:41 +02:00
plegall
7234d0108e fixes #1011 add user input checks (and pwg_token) to avoid SQL injection (and CSRF) 2019-08-12 16:45:21 +02:00
plegall
91349065ea fixes #1010 prevent from SQL injection with user input check 2019-08-12 16:24:27 +02:00
plegall
fccb6caa75 fixes #1012 prevent SQL injection with a check on user input 2019-08-12 14:52:56 +02:00
plegall
4932bc502b fixes #1009 check group_selection parameter to be only an array of ids 2019-08-12 14:25:56 +02:00
plegall
776f8fa186 fixes #1058 prevent CSRF on notification by mail, with a pwg_token
also added some checks to NBM parameters to avoid XSS (minor issue)
2019-08-12 12:31:24 +02:00
plegall
fdcb6f50f6 fixes #1055 prevents XSS on original resize fields 2019-08-09 15:52:04 +02:00
plegall
292b414d25 remove shadow on album creation button for empty gallery 2019-07-19 14:27:50 +02:00
Sam Wilson
05fb7aafd4 Order by the field(s) used to find duplicates
When searching for duplicates, also sort the results by the
fields used to find the duplicates.
2019-07-17 15:22:53 +02:00
plegall
4ae0f46bae fixes #1049 update applications, new screenshots and hide ReGalAndroid 2019-07-11 14:54:34 +02:00
plegall
c1eecab364 fixes #996 escape word "groups" in SQL queries, new reserved word with MySQL 8 2019-06-28 18:07:53 +02:00
plegall
0ef2193471 fixes #93 automatically hide the newsletter link when clicked 2019-06-28 14:45:05 +02:00
plegall
3999bff326 fixes #1042 set Modus as default theme 2019-06-28 11:21:18 +02:00
plegall
5436c48ead fixes #1041 no longer activate TakeATour by default 2019-06-28 10:35:43 +02:00
plegall
22f3e679ee fixes #1040 move check upgrade action to maintenance page 2019-06-27 19:09:40 +02:00
Sam Wilson
8e9cb6de23 Quote 'rank' field name in SQL
Add backticks to reserved word 'rank' in SQL queries.

Bug: GH #919
2019-06-27 17:50:59 +02:00
plegall
46781c191a issue #1031 no background on album path 2019-06-20 16:44:18 +02:00
plegall
9bc9bae2cc fixes #1035 translate the visit link 2019-06-20 14:55:23 +02:00
plegall
9e629a2369 issue #1031 album manager, move breadcrumbs outside page title 2019-06-11 16:38:49 +02:00
plegall
fc193f7474 issue #830 simplify PHP files header, remove copyright/license info 2019-06-04 17:13:51 +02:00
plegall
2829f1a4ea fixes #1029 only keep new logo 2019-06-04 14:51:01 +02:00
plegall
5f0c429d2b issue #987 change a:hover to new orange 2019-05-31 12:08:58 +02:00
plegall
63ca304ff4 issue #1019 missing l10n 2019-05-31 11:26:25 +02:00
plegall
b150774bc9 issue #1019 do not display album selection if coming from a "add photos to album" link 2019-05-28 16:08:11 +02:00
plegall
242b734d8f issue #1019 slightly move up welcome box 2019-05-28 16:06:57 +02:00
plegall
99351c5898 issue #987 replace H2 by H1 only if H2 is available 2019-05-28 16:06:00 +02:00