Commit Graph

10214 Commits

Author SHA1 Message Date
Julien Samson
64819ae2a0 changing order in permission page for UK 2019-02-01 14:10:25 +01:00
Teatek
2cf5c63ca1 fixes #854 adding trigger on tag deletion 2019-02-01 14:07:56 +01:00
plegall
b29ab344e9 fixes #972 use an alternative algorithm to discover number of future orphans, with very large albums 2019-01-28 14:05:51 +01:00
Teatek
b8d6f01b38 fixes #966 progression bar for sync metadata
* [Batch Manager] adding progression bar for metadata sync action
* [Batch Manager] display the number of synchronized photos in the success message
2019-01-27 17:16:13 +01:00
Teatek
beec234478 fixes #958 : protect fields before copying properties from default user to new user 2019-01-27 16:52:15 +01:00
Teatek
b05241f508 Fixes #272 missing md5sum
* dashboard: add warning if missing checksums
* add a "compute all missing md5sum" option in batch manager (inspired by delete orphans)
* progress bar when computing md5sums
2019-01-22 10:26:52 +01:00
Julien Samson
29f938acba display login page if there is no images at the tag (URL) 2019-01-16 15:23:51 +01:00
modus75
35e7b79d7f fix commit from september 2017 related to issue #603 2018-07-23 20:41:56 +02:00
Tall Guys Free
5dcfbbc893 Update admin.lang.php 2018-07-21 22:34:20 +02:00
Sam Wilson
16033a4595 Increment required PHP version to 5.3, after b1cb4e48 2018-07-14 09:36:06 +02:00
modus75
e8df728125 fix create_function replacement 2018-07-12 21:14:08 +02:00
Akimitsu [Bm]
f2834925bb Fix syntax error 2018-07-12 15:01:32 +02:00
plegall
b1cb4e48c0 due to changes for compatibility with PHP 7.2, Piwigo now requires PHP 5.3 2018-07-12 11:20:53 +02:00
Rob Lensen
144a970a6b Fix for Cssmin with php7.2 and higher 2018-07-12 11:00:59 +02:00
Rob Lensen
68f83a5902 Fix for Msarty and PHP7.2 2018-07-12 10:59:32 +02:00
plegall
063711240a Squashed commit of the following:
commit 7190866ccf15033f27095d635546e46dacbb755e
Author: plegall <plg@piwigo.org>
Date:   Thu Jul 12 10:52:33 2018 +0200

    Revert "Replace not maintained cssmin with fork from github https://github.com/natxet/CssMin"

    This reverts commit c8b12a2ed0.

commit 1dac11ecb6783d0d5353c3d250388f018c30fc5c
Author: plegall <plg@piwigo.org>
Date:   Thu Jul 12 10:52:24 2018 +0200

    Revert "Update Smarty to 3.1.3"

    This reverts commit db684f6151.

commit 3ac752dc93912ba5701d22dadd9bb3b81e5bb383
Merge: d1c2e71 8d58256
Author: plegall <plg@piwigo.org>
Date:   Thu Jul 12 10:50:43 2018 +0200

    Merge branch 'php72' of https://github.com/Infern1/Piwigo into Infern1-php72

commit 8d58256c45
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Wed Mar 21 23:40:36 2018 +0100

    new feedcreator version for PHP7

commit bb0fcc3a30
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Wed Mar 21 23:26:27 2018 +0100

    php72 fixes, replaces each() function

commit 3db22c0d33
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Wed Mar 21 23:02:46 2018 +0100

    More fixes for PHP7.2

commit 50d8aafc77
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Mon Mar 19 23:55:21 2018 +0100

    Some more replacements of create_function

commit 8263335c42
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Mon Mar 19 22:54:54 2018 +0100

    Fixed indents

commit 8d58b637c6
Merge: c8b12a2 8a57d77
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Tue Feb 27 13:51:32 2018 +0100

    Merge remote-tracking branch 'upstream/master' into php72

commit c8b12a2ed0
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Thu Jan 18 00:32:46 2018 +0100

    Replace not maintained cssmin with fork from github https://github.com/natxet/CssMin

commit db684f6151
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Thu Jan 18 00:23:24 2018 +0100

    Update Smarty to 3.1.3

commit 6a3f8f3e76
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Wed Jan 17 23:40:27 2018 +0100

    Initial work to support PHP 7.2
2018-07-12 10:52:55 +02:00
plegall
d1c2e71a56 fixes #891, use HTTPS to piwigo.org in page footer 2018-07-11 15:11:14 +02:00
plegall
7bf992b3cc fixes #890, use https instead of http to load images from piwigo.org 2018-07-11 15:06:38 +02:00
plegall
86c34737ba fixes #877, avoid conflict with custom user table 2018-07-11 11:48:20 +02:00
plegall
69345c06e2 fixes #847, CVE-2018-5692 protect a few user input variables 2018-07-11 11:22:31 +02:00
plegall
23fa4c1a73 fixes #871, CVE-2018-7722 strip tags on methods pwg.categories.add, pwg.categories.setInfo, pwg.images.setInfo
Adding pwg_token would be a better solution but would break remote applications (like the iOS app)
2018-07-06 18:29:41 +02:00
plegall
bef09018fb fixes #872, CVE-2018-7724, protect photo admin page from CSRF 2018-07-06 14:38:39 +02:00
plegall
06f4252312 fixes #258, batch manager, check the session category still exists 2018-07-06 11:52:04 +02:00
Daniel Dadap
65ac272179 Include pwg_token in user list POST request (Fixes #748) (#866)
* user list: set pwg_token in POST data to user_list_backend.php

The POST data for the user data table request was empty, which could
cause user data retrieval to error out with HTTP 403 due to missing
the authentication token.

* user_list_backend: fix uninitialized variables

If iSortCol_0, sEcho, or sSearch are unset in the HTTP request, it
could cause variables to be uninitialized, potentially causing error
messages to be included in the HTTP response. These error messages,
if present, can prevent the JSON response from being parsed.

* user list: delete unnecessary quotes

Javascript object key names don't generally need to be quoted.
Remove some quotes that were introduced by a recent change that added
a body to the AJAX POST request to retrieve the user list.
2018-07-06 10:51:04 +02:00
Bartosz Korczak
7e41e21af4 Fix issue #844 2018-07-05 15:50:38 +02:00
plegall
75118816b5 fixes #887, $selection is never set on PHP side, no need to use it in template
... and it makes the template compatible with PHP 7.2
2018-07-04 17:10:00 +02:00
Sam Wilson
31664352f5 Add missing i18n message 2018-07-03 09:59:07 +02:00
plegall
b9336d7117 fixes #853, less strict check on user input "selectAction" for tag manager
... for compatibility with plugin Colored Tags (typetags) and maybe other in the future.
2018-03-23 10:03:47 +01:00
plegall
8a57d777aa fixes #596, compatibility with PHP 7.1 2018-02-27 12:01:45 +01:00
plegall
63932b9390 fixes #735, add API method pwg.users.getAuthKey 2018-02-22 13:26:31 +01:00
plegall
02275fe275 fixes #839, check input parameters on admin/tags.php 2018-02-21 17:34:56 +01:00
plegall
b6d61a78bb fixes #838, tells PHP how many photos were deleted in Batch Manager 2018-02-08 13:03:26 +01:00
plegall
9671454e75 fixes #826, check input parameter order_by in configuration 2017-12-18 17:06:37 +01:00
plegall
9028c75c1f fixes #825, check user input on Batch Manager, unit mode, to prevent SQL injection 2017-12-18 16:44:42 +01:00
plegall
77f02bfd76 fixes #822, add token on configuration page to prevent CSRF 2017-12-18 15:13:49 +01:00
plegall
9e29db0481 fixes #824 more generic code to get current script directory (working both on Linux and MacOSX) 2017-12-18 14:29:32 +01:00
plegall
1da9d6afc4 fixes #823 add input user check to avoid SQLi on users list 2017-12-18 14:02:52 +01:00
MaximeBOURMAUD
8d25fa6e23 Add script testing Piwigo install, add album + add picture (#820) 2017-12-15 11:21:40 +01:00
plegall
98ee7c1e5c fixes #818, add remote_sync.pl script from piwigo.org forum (script written back in 2009) 2017-12-15 10:49:46 +01:00
modus75
b9f0f22395 Merge branch 'master' of https://github.com/Piwigo/Piwigo 2017-11-12 10:31:46 +01:00
modus75
1e87cc8596 fixes #777 WS categories getImages, TotalCount for correct pagination builder (fix #2) 2017-11-12 10:30:56 +01:00
Cosmin Stroe
ee4aae7e74 Fixes #767 - Return a 500 HTTP status when a file upload error occurs. (#768)
* Return a 500 HTTP status when a file upload error occurs.
2017-10-05 15:35:24 +02:00
plegall
977588999a fixes #789, add url param hide_redirect_error 2017-10-04 10:35:33 +02:00
modus75
164b59588c fixes #777 WS categories getImages, TotalCount for correct pagination builder 2017-09-30 16:19:35 +02:00
plegall
a335d70418 fixes 787, check URL parameter "action" to avoid error messages 2017-09-28 15:02:41 +02:00
modus75
46ddfabc38 Merge branch 'master' of https://github.com/Piwigo/Piwigo 2017-09-25 21:44:13 +02:00
modus75
98a39fee72 better check on input parameters (got some odd hack attempts) 2017-09-25 21:43:31 +02:00
MaximeBOURMAUD
c4af38fe48 Fixes issue 723 now when requesting an private id, permalink isn't re… (#771)
* Fixes issue 723 now when requesting an private id, permalink isn't revealed

* remove newline at end of files and one useless line

* remove newline at end of files and one useless line

* Fixes if condition
2017-09-19 11:31:17 +02:00
MaximeBOURMAUD
943ab9d189 Issue/747 php notice when changing admin page theme (#774)
* Fixes#747 Only variables should be passed by reference

* Fixes syntax
2017-09-19 11:25:00 +02:00
MaximeBOURMAUD
c9ab538319 Fixs issue #760 date_creation not refreshed when changing it from picture_modify (#763) 2017-09-18 17:48:42 +02:00