plegall
3b1f636e26
(cp ba264c5) fixes #1188 since 5b65fca3 the rank word can be surrounded by backticks
2020-05-19 16:58:33 +02:00
plegall
6db8da47ea
(cp b31d68f) fixes #1182 with inheritance_by_default, copy only permissions from parents and do not add admins
2020-05-07 12:31:18 +02:00
plegall
2f3488ef62
(cp d3879b1) issue #1114 use the new screenshot provided by @HWFord
2020-03-25 14:54:05 +01:00
plegall
b3027b1977
(cp e21ef06) fixes #1162 filter users on a specific group
2020-02-18 10:52:09 +01:00
plegall
e643740a09
(cp d365e2d) fixes #1114 the Piwigo for Android app comes back
...
Revert "issue #420 , remove Piwigo for Android, not up-to-date"
This reverts commit 069581b80d
2020-02-10 16:47:15 +01:00
plegall
4e0ab8e515
(cp 619849f) fixes #1150 prevent HTML code in group name
...
It avoids any stored XSS between administrators and it's totally useless to have HTML code in the group name.
2020-02-07 17:07:19 +01:00
plegall
a3898f9666
(cp 884c432) Quote mysql keyword groups
2019-12-16 10:55:04 +01:00
plegall
0d9bc4da7d
(cp 8573e35) include/functions_cookie: use proper brackets for offset access
...
Fixes #1134
2019-12-04 10:42:07 +01:00
plegall
20ace0e2c8
(cp 29cc543) fixes #1133 adapt the height of the scrolling menu for plugins, depending on browser available height.
...
Also, change background color of this scrollbar.
2019-12-03 12:27:08 +01:00
plegall
2042598f5b
(cp 90e4a63) fixes #1112 better management for long username + long gallery name on small screen
2019-11-26 16:34:23 +01:00
plegall
c9aa99d0cb
(cp c4142c2) fixes #1092 javascript syntax error on batch manager (Safari only)
2019-10-14 14:30:44 +02:00
plegall
0a89747afa
(cp 72094c5) fixes #1090 move warning about missing checksums from dashboard to sync page
...
* avoid scaring users for a minor issue
* convert the warning message into a simple info
* simplify algorithm for detection and only search on relevant pages (batch manager + sync page)
2019-10-14 14:18:43 +02:00
plegall
1e78225b0d
(cp e49c217) fixes #1099 avoid JS error when there is no album associated to current photo set
2019-10-14 12:28:35 +02:00
plegall
d8e2e52e88
(cp ac5d00e) fixes #1098 make checksum computation block size configurable, and smaller by default
2019-10-14 12:23:40 +02:00
plegall
b5dd0da47e
(cp 54b727a) fixes #1097 checksum compute, make the block size constant
2019-10-14 11:44:04 +02:00
plegall
8fe4305d35
during upgrade, use the new default Piwigo theme (modus) instead of hardcoded "elegant"
...
... and make sure the default Piwigo theme is active before that.
2019-10-08 12:23:54 +02:00
plegall
0e86caac30
[design] quick improve of new plugins filter
2019-10-07 12:32:32 +02:00
plegall
95a656c145
no more need of jGrowl on upload form
2019-09-26 11:15:24 +02:00
plegall
a30b1115ae
issue #1080 moves fontello animation.css at the end of the combined files list
...
It does not fixes the parsing problem, but it avoids breaking following CSS rules.
2019-09-25 16:25:20 +02:00
plegall
fa8996e10f
issue #1073 prevents from making uploaded file executable
...
* for the name of the file in buffer directory, do not use the name given by the user, but the md5 of the name without extension
* function add_uploaded_file deletes uploaded file if not expected
2019-09-20 16:26:21 +02:00
plegall
7e154ab093
issue #1075 check the url keys are expected
2019-09-20 14:02:03 +02:00
James Bercegay
1119d36c4b
XSS Fix
...
urlencode() key data as well
2019-09-20 13:55:32 +02:00
plegall
1061dd0a77
fixes #1070 use ajax queue manager to launch metadata syncs
...
+ exit from event once the "metadata" is performed to avoid side effects with "delete" action.
2019-09-03 16:49:12 +02:00
plegall
3478033515
fixes #1057 use a popin instead of popup to display admin page help.
...
The "old way" still works with the popuphelp() javascript function.
2019-08-13 12:07:16 +02:00
plegall
b4f8d6d994
fixes #1056 use a font-icon for page help
2019-08-12 17:01:41 +02:00
plegall
7234d0108e
fixes #1011 add user input checks (and pwg_token) to avoid SQL injection (and CSRF)
2019-08-12 16:45:21 +02:00
plegall
91349065ea
fixes #1010 prevent from SQL injection with user input check
2019-08-12 16:24:27 +02:00
plegall
fccb6caa75
fixes #1012 prevent SQL injection with a check on user input
2019-08-12 14:52:56 +02:00
plegall
4932bc502b
fixes #1009 check group_selection parameter to be only an array of ids
2019-08-12 14:25:56 +02:00
plegall
776f8fa186
fixes #1058 prevent CSRF on notification by mail, with a pwg_token
...
also added some checks to NBM parameters to avoid XSS (minor issue)
2019-08-12 12:31:24 +02:00
plegall
fdcb6f50f6
fixes #1055 prevents XSS on original resize fields
2019-08-09 15:52:04 +02:00
plegall
292b414d25
remove shadow on album creation button for empty gallery
2019-07-19 14:27:50 +02:00
Sam Wilson
05fb7aafd4
Order by the field(s) used to find duplicates
...
When searching for duplicates, also sort the results by the
fields used to find the duplicates.
2019-07-17 15:22:53 +02:00
plegall
4ae0f46bae
fixes #1049 update applications, new screenshots and hide ReGalAndroid
2019-07-11 14:54:34 +02:00
plegall
c1eecab364
fixes #996 escape word "groups" in SQL queries, new reserved word with MySQL 8
2019-06-28 18:07:53 +02:00
plegall
0ef2193471
fixes #93 automatically hide the newsletter link when clicked
2019-06-28 14:45:05 +02:00
plegall
3999bff326
fixes #1042 set Modus as default theme
2019-06-28 11:21:18 +02:00
plegall
5436c48ead
fixes #1041 no longer activate TakeATour by default
2019-06-28 10:35:43 +02:00
plegall
22f3e679ee
fixes #1040 move check upgrade action to maintenance page
2019-06-27 19:09:40 +02:00
Sam Wilson
8e9cb6de23
Quote 'rank' field name in SQL
...
Add backticks to reserved word 'rank' in SQL queries.
Bug: GH #919
2019-06-27 17:50:59 +02:00
plegall
46781c191a
issue #1031 no background on album path
2019-06-20 16:44:18 +02:00
plegall
9bc9bae2cc
fixes #1035 translate the visit link
2019-06-20 14:55:23 +02:00
plegall
9e629a2369
issue #1031 album manager, move breadcrumbs outside page title
2019-06-11 16:38:49 +02:00
plegall
fc193f7474
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
plegall
2829f1a4ea
fixes #1029 only keep new logo
2019-06-04 14:51:01 +02:00
plegall
5f0c429d2b
issue #987 change a:hover to new orange
2019-05-31 12:08:58 +02:00
plegall
63ca304ff4
issue #1019 missing l10n
2019-05-31 11:26:25 +02:00
plegall
b150774bc9
issue #1019 do not display album selection if coming from a "add photos to album" link
2019-05-28 16:08:11 +02:00
plegall
242b734d8f
issue #1019 slightly move up welcome box
2019-05-28 16:06:57 +02:00
plegall
99351c5898
issue #987 replace H2 by H1 only if H2 is available
2019-05-28 16:06:00 +02:00