254 Commits

Author SHA1 Message Date
plegall
3ab004f7f6 fixes GHSA-wfmr-9hg8-jh3m protects pwg.activity.getList 2026-02-24 17:14:35 +01:00
plegall
db2a156554 fixes GHSA-5jwg-cr5q-vjq2 protect filter parameter in pwg.user.getList 2026-02-24 16:19:22 +01:00
plegall
15e451c231 fixes #2510 fallback for missing username 2026-01-15 14:19:04 +01:00
Linty
91088bbec9 fixes #2490 add merge_tags notification trigger
A trigger_notify call for 'merge_tags' was added before deleting tags in the tag merge process. This allows plugins or extensions to react to tag merges.
2025-12-22 16:22:14 +01:00
plegall
4f648db510 issue #2445 avoid null input on strip_tags (image name can be null) 2025-11-19 16:09:50 +01:00
plegall
eb37a4e5f1 fixes #2423, fixes #1949, fixes #2401 render title/description and keep HTML in descriptions
... and in several API methods add new output fields name_raw and comment_raw that are ready for edition
2025-11-10 17:00:58 +01:00
Linty
58a9447e01 fixes #2413 tag edit/duplicate now use raw_name as editable value 2025-09-26 13:39:28 +02:00
plegall
b167a327e3 issue #2409 add search engine filter : expert mode
* new access system not implemented yet
* dark mode handled but needs review
2025-09-15 15:10:17 +02:00
Linty
613dd410e5 issue #2364 fix guest author name and language key
Added support for bulk comment validation and deletion with updated confirmation messages and translations. Improved modal dialog behavior, including keyboard accessibility and button visibility. Updated CSS for consistent button styling across themes. Fixed author name display for guest comments.
2025-08-26 16:38:11 +02:00
Linty
57042cc475 fixes #2364 redesign admin comments management
Replaces legacy PHP comment management with a new interface for listing, filtering, selecting, validating, and deleting user comments. Updates templates and CSS for a modern, interactive experience, adds advanced filters, selection mode, and modal comment viewing. Removes obsolete server-side logic from comments.php and introduces new api methods for comment actions.
2025-08-26 14:35:31 +02:00
plegall
09a03d9818 issue #2386 optimize pwg.activity.getList
* fetch block of 10k rows from activity table instead of 500. It's not much slower and may avoid many loops to generate 100 lines of output aggregated lines.

* no need to perform a slow query to count the total number of filtered rows, we can just detect if there are more rows to aggregate to know if we have reached the last page.

* parse details only if we're on a new output key (which is discutable, but we use details only on new output line creation)
2025-08-12 16:03:49 +02:00
plegall
818233cd5e bug fixed: getActivityList, use the same SQL where clause to calculate max_line and fetch lines 2025-08-11 14:39:00 +02:00
Perrom
4dc2fc9f8d fixes #2386 update filters in users activity logs (#2399)
* Add an action filter and a date filter. 

* Additional filters on a specific object (photo/album/group) are available from their dedicated administration page.

* Performances of the page was improved : instead of loading 100k lines in activity table, we loop on 500 activity lines until 100 aggregated lines are found for the current page.
2025-08-08 15:17:50 +02:00
Perrom
d0ac05d951 fixes #2353 update images with upload form (#2385)
Add a mode to update photos with the upload form. Modify the upload formats form, so that it will update the photo with the same file extension.
2025-07-31 10:41:01 +02:00
Linty
eec9a919a5 issue #2355 enforce ui context for API key management
...and improve profile JS. Replaces can_manage_api_key() with connected_with_pwg_ui() to ensure API key management is only allowed from UI logins, and sets 'connected_with' in session during auto-login. Refactors profile.js to respect canUpdatePreferences and canUpdatePassword, moves user state initialization to template, and improves preference reset/default logic. Also adjusts script loading and minor UI details in profile.tpl.
2025-07-07 08:58:27 +02:00
Linty
ae740ba3af fixes #2355 implement API key management system
- Added API key get, creation, editing, and revocation methods.

- Updated the profile template to include API key management features.

- Updated the database schema to support the new API key system, including additional fields for key management.

- Added client-side JavaScript functionality to handle API key operations and display responses.

- Update tools/htm.ws with the new way to authenticate.

- Restriction of certain api methods when used with an api key

- Backward compatibility with older apps
2025-06-09 20:35:57 +02:00
Linty
7f850c2938 issue #2354 update pwg.users.setInfo
and add pwg.users.setMyInfo method
2025-05-05 20:24:05 +02:00
Linty
a0ea91695b fixes #2323 switch language before generating the link 2025-02-14 12:07:11 +01:00
Linty
bb8f3d5715 fixes #2287 switch language before sending the email 2024-12-04 15:07:06 +01:00
Linty
6e45a8f426 fixes #2281 use template for reset/activation mail
and change is_first_connection to has_already_logged_in for better naming
2024-11-20 21:06:02 +01:00
Linty
f6a3d0749f fixes #2281 rename function for better clarity
first_connexion to is_first_connection
2024-11-20 18:09:02 +01:00
Linty
34296598d4 fixes #2281 add two default conf for reset and activation link
When a password activation or reset link is generated, the link expiry time is now defined in two conf: $conf[’password_reset_duration‘] with a default time of one hour and $conf[’password_activation_duration‘] with a default time of 72 hours.
2024-11-20 17:09:26 +01:00
plegall
7bb3994fc6 issue #2237 clean user input on custom tag_list 2024-11-11 12:37:24 +01:00
Linty
bc0a4bb107 fixes #2237 added a temporary parameter to pwg.images.setInfo
it's also adapted in the batch manager unit js file
2024-11-05 18:20:42 +01:00
Linty
99a3592eae fixes #2258 add invalidate_user_cache in ws_images_deleteOrphans method 2024-10-30 10:27:11 +01:00
plegall
724a40f316 fixes #2197 pwg.users.getList check user input min_register/max_register 2024-10-28 18:45:04 +01:00
Linty
480522cca1 fixes #2244 add ignore to prevent errors from duplicate 2024-10-15 11:26:18 +02:00
plegall
a3e9ed23ce issue #2227 like for date_posted, display all presets for date_created 2024-09-20 14:21:28 +02:00
HWFord
2d2baa7052 fixes #2227 add creation date filter
Same logic as date posted
2024-09-17 16:50:38 +02:00
HWFord
921f679bca fixes ##2195 if conf['rate'] show rating filter
only allow rating filter if gallery uses rating
update api, mcs.js and tpl to check if rating
search_filters.inc.php update indentation due to extra if
2024-09-16 10:21:49 +02:00
Linty
2905623027 fixes #2214 initialize total_count before using it 2024-09-10 14:55:28 +02:00
HWFord
b3151e0129 fixes #2211 integrate new redesign for date posted filter
filter on date_posted custom values (specific years, months or days) along side last 7, 30 days, 3 and 6 months
following redesign by alice
2024-09-04 11:30:44 +02:00
Linty
40ca83d382 fixes #2221 use backticks instead of quotes
...because that's what backticks are for.
2024-09-03 16:19:06 +02:00
Linty
1de27871b3 fixes #2221 encase rank in quotes 2024-09-03 16:02:16 +02:00
mistic100
ce3214df1d Fix check "activate_comments" config in WS 2024-08-30 21:55:46 +02:00
mistic100
3f07808d7f Fix "total_count" type on some WS methods 2024-08-30 20:24:42 +02:00
plegall
8fc3c9cd0e issue #2114 calculate missing md5sum only once 2024-08-29 10:44:41 +02:00
marsooooo
12ca607727 issue #2164 updated & fixed bugs on batch manager
Added dark mode for unit mode
Templatized filter block for both unit and global mode
Optimized JS functions and added extensibility for unit mode
Modified images.setInfo method so unit mode could save orphan images
Fixed a bug where php would break if filter selection was empty in unit mode
2024-08-26 14:14:57 +02:00
plegall
08ae0304bb (cp 545e81e) Fix for #2114: Check for photos missing md5sum before trying to update md5sums 2024-08-21 15:20:05 +02:00
Linty
3826f355ae issue #2132 update ws_categories_getAdminList
add new params: cat_id and recursive
2024-07-31 11:36:43 +02:00
HWFord
6fe1d7db65 fixes #2193 [search] add 5 new widgets
add ratings, ratios, filesize, width and height widgets
- in functions_search add clauses according to each new filter
- in ws_functions add new api parameters
- in index.php add queries to get data for filters
- in admin.lang add missing translations for filters
- in css add basic style to work for modus newspaper
- in js add script for new filters
- in tpl combine script + CSS for double slider & jquery Ui. Add slider conf, template for new widgets

TODO
- adapt css to different themes and skins
2024-07-25 16:11:07 +02:00
plegall
6e6a74c348 fixes #2173 allow comma separated list for image_id in pwg.images.syncMetadata 2024-07-09 15:42:31 +02:00
Linty
c8d7503d4e related to #2165 new add user popin
- add field for add user
- in the `pwg.users.add` method, the params `send_password_by_mail` does nothing anymore. Because we no longer want to send passwords in clear text.
- in the `pwg.users.add` add a new `auto_password` parameter to generate a random password when a user is created
- use this parameter (`auto_password`) in user_list.js
- change mail content et password page on first login
2024-06-28 18:56:28 +02:00
Linty
27cd5cde9e related to #2158 update user and guest pop in
- Implementation of a new modal for modifying a user or guest
- Addition of a function to allow plugins to add a tab to the new user modal
- Fix bug: "badger-number" is updated when a user is added or deleted
- Fix bug: When the user who is editing has permissions to delete the user he is modifying, the delete icon is now displayed correctly
- Added a new api method for modifying the main user and generating a link to reset a password
- Passed $conf[‘webmaster_id’] in database configuration
2024-05-31 18:12:52 +02:00
Linty
4d26c62470 issue #2132 album selector hierarchy added to search page 2024-03-08 15:55:43 +01:00
Linty
4adf36f2e5 fixes #2120 add new return value to 'pwg.categories.move' method API
Added a new return value for API method 'pwg.categories.move': updated_cats . This value returns an array of albums whose values have been modified after an album has been moved (for the moment, the data is the id and the number of photos in its sub-albums).
2024-02-19 17:06:59 +01:00
Linty
1629cd9386 issue #2106 added details to search history
API method modification `ws_history_search`: Added a new property in API return `SEARCH_DETAILS` only for searches.
These details are displayed on the `History` page in the `Search` section.
2024-02-02 11:50:56 +01:00
plegall
08124d10f7 fixes #2100 do not send save_visits to PiwigoRemoteSync 2024-01-31 11:14:27 +01:00
Willy "Linty
fbae0b735c fixes #2071 sorts users by date and username 2023-12-18 18:05:09 +01:00
plegall
09d30129cd fixes #2050 provide a default user_name for pwg.history.search 2023-11-27 16:02:01 +01:00