Commit Graph

11972 Commits

Author SHA1 Message Date
Linty
af8a882db2 (cp 29c795705) fix typo causing undefined array key warning 2026-05-04 21:39:11 +02:00
plegall
bef1a4ac42 fixes #2541 (again) same problem, be less punitive 16.4.0 2026-05-03 15:44:12 +02:00
plegall
23a9d75fd2 fixes #2541 cookie.lang may have an invalid value, we need to be less punitive 2026-05-03 15:12:14 +02:00
plegall
5be809ab2a next release is 16.4.0 2026-05-03 12:48:55 +02:00
plegall
5c60f851ee copy all languages from translation@81ce7eb43 2026-05-03 12:47:55 +02:00
plegall
1ff9d04534 (cp 2cfa7a3d1) fixes GHSA-6wj3-7fhw-gfpm upgrade/install: make sure user input is sanitized 2026-05-03 12:04:17 +02:00
plegall
aaa0309494 fixes GHSA-rr39-mf4j-6594 prevent displaying RAW cookie content 2026-05-01 17:03:31 +02:00
Linty
41da78f35a (cp 33024bcc8) fixes #2555 toggle password links by user status
Show copy/send password links by default but hide them for users with status 'generic'. Adds a change handler in fill_user_edit_properties to call toggle_send_copy_password when the status select changes, and implements toggle_send_copy_password(status) to show/hide #copy_password_link and #send_password_link accordingly.
2026-04-29 16:21:37 +02:00
Linty
b8dc93f893 (cp 919673234) fixes #2478 add created_on tooltip and responsive tooltip styles
JS: add mouseenter handler to toggle a tooltip-flip class for elements with data-tooltip so tooltips flip when they would overflow the right edge; set data-tooltip on API creation timestamp. CSS: constrain tooltip max width to 250px (or viewport margin), allow multiline content (max-content/word-wrap), and position flipped tooltips from the right. These changes prevent tooltip overflow on narrow viewports and improve readability.
2026-04-29 15:17:28 +02:00
plegall
0f74587b1b (cp 54c812bf7) fixes #2553 force opcache to reload files extracted from zip during plugin update 2026-04-28 16:43:52 +02:00
plegall
ef9e65386d (cp ba1f803f8) fixes GHSA-jhp4-7f82-8f6q check image_order against allowed values 2026-04-26 15:18:54 +02:00
plegall
e4f0989d35 (cp c7e30da5c) fixes GHSA-7r67-9xhq-7p2c check get.filter inputs for dimensions and filesize 2026-04-26 13:09:04 +02:00
plegall
1e7f7262cb (cp 4a13ec9a8) fixes GHSA-7w97-5g4p-xqvv more robust check on logo file type 2026-04-26 11:43:37 +02:00
plegall
7899643580 fixes GHSA-j9q6-q52g-g8jw make sure SVG files have the appropriate file name extension 2026-04-21 14:32:43 +02:00
plegall
dc839e499d (cp d21b530cb) fixes #2369 avoid division by zero in case of STORAGE_TOTAL < 1kB 2026-04-15 16:17:27 +02:00
plegall
ed1e975b23 (cp 81f8d65a2) fixes GHSA-gphq-34pv-gvf3 sanity check for table prefix during install 2026-03-30 15:42:44 +02:00
Linty
d58ddc6b82 (cp c9af73796) fixes #2544 improve AddUser UI layout
Hide AddUser error block on close and make the AddUser popin scrollable with layout fixes. Also refine two French translations (password and login key).
2026-03-26 10:11:42 +01:00
Linty
6824480d84 (cp b19beee0a) fixes #796 handle ampersand escaping for API URLs
When generating URLs for the web service (IN_WS), ensure the argument separator is a raw '&' instead of the HTML entity '&amp;'. add_url_params now switches the separator to '&' if IN_WS is defined and '&amp;' was requested. Removed a redundant str_replace call in ws_std_get_urls since get_action_url/add_url_params now produce the correct separator. This prevents double-escaped ampersands.
2026-03-23 12:31:00 +01:00
RushLana
f4213814ec (cp 001a21056) fixes #2540 only prompt to update container on version lower than the latest version 2026-03-16 13:10:53 +01:00
Linty
9259ab692e (cp 8fe5a5779) fixes #2539 always set pwg_token for API key requests
Simplify pwg_token setup during PWG_API_KEY_REQUEST by unconditionally assigning get_pwg_token() to both $_POST['pwg_token'] and $_GET['pwg_token']. Removes prior isset() checks so the token is always present for API key requests; be aware this will overwrite any existing pwg_token values in request arrays.
2026-03-13 18:20:03 +01:00
plegall
223bfcb26e (cp 355f3d44a) fixes #2538 differentiate from and reply-to in pwg_mail 2026-03-11 12:24:13 +01:00
plegall
e65e4eb310 (cp 964a2d8ed) Fix disk storage unit conversion from kB to GB/MB
Use binary (1024-based) prefixes instead of decimal (1000-based) for
storage unit conversion. Previously dividing by 1000000 and 1000,
now correctly dividing by 1048576 (1024*1024) and 1024.

Fixes #2502
2026-03-07 13:39:13 +01:00
HWFord
e9c58ab654 (cp 5cfabc12b) fixes #2531 remove use_standard_pages from config.php 2026-02-26 14:37:33 +01:00
plegall
69f1f76192 copy all languages from translation@e078c81df 16.3.0 2026-02-24 17:57:51 +01:00
plegall
ec591f3f5e next release is 16.3.0 2026-02-24 17:49:06 +01:00
plegall
c172d284e1 (cp 3ab004f7f) fixes GHSA-wfmr-9hg8-jh3m protects pwg.activity.getList 2026-02-24 17:16:17 +01:00
plegall
9df471f162 (cp db2a15655) fixes GHSA-5jwg-cr5q-vjq2 protect filter parameter in pwg.user.getList 2026-02-24 16:20:28 +01:00
plegall
d05c16561c (cp b2a78ded6) fixes GHSA-397m-gfhm-pmg2 pwg.history.search is only for admins 2026-02-24 16:00:08 +01:00
RushLana
8d6c47886b (cp bfbc8f68) Add docker updates support
Detect if running in a official container and replace updates buttons by links to the documentation

fixed on master with bfbc8f68
fixed on 16.x with d238c545
2026-02-24 15:30:19 +01:00
HWFord
817cabf4c6 (cp 1441831e9) fixes #2528 add icon class 2026-02-23 18:01:09 +01:00
HWFord
07173e5979 (cp b0c6da3ef) fixes #2525 add missing translation 2026-02-23 14:03:18 +01:00
plegall
0d5ed1f777 (cp 0f359f2af) fixes GHSA-mgqc-3445-qghq checks standard date fields 2026-02-17 18:55:59 +01:00
Linty
8ff31e0758 (cp b26ca3e08) fixes #2522 use privacy-preserving verification message
Replace the explicit "An email has been sent with a verification code" message with a privacy-preserving wording: "If your account exists, a verification code has been sent to your email address." This avoids account enumeration. Updated language entries in en_UK and fr_FR, the server-side message in password.php, and the password reset template.
2026-02-12 17:28:33 +01:00
plegall
4b9767ef13 (cp 74edc3999) fixes #2519 prevent CSRF on album notification form 2026-02-04 15:50:25 +01:00
HWFord
da8d897256 (cp 186378e4f) fixes #2518 add viewport meta & adjust responsive css 2026-01-29 09:22:10 +01:00
HWFord
a0fa5ad693 (cp ce3fcd61e) fixes #2517 set max height and scroll for lang switch 2026-01-28 14:41:29 +01:00
plegall
cae4b8c13b (cp 15e451c23) fixes #2510 fallback for missing username 2026-01-15 14:41:47 +01:00
HWFord
d0c820eb4f (cp c186a5f7d) fixes #2509 change button label in site_update.tpl 2026-01-15 10:11:59 +01:00
HWFord
8f0b8e7a85 (cp d9fce8a30) fixes #2508 add header.tpl to standard pages 2026-01-14 14:19:59 +01:00
RushLana
d2be1c92fe (cp 5563ea98f) Add a more granular container detection (#2501)
Add a more granular container detection

Replace is_in_container by  get_container_info
Currently detect Official container (once they update a version with a tagfile) and LinuxServer container
All other container are marked as Unknown

Report two field :
- container_type ( none | Official | LinuxServer | Unknown
- container_version ( build Version number like 16.2.0a, only reported if Official container is detected )
2026-01-14 13:03:55 +01:00
plegall
650f457615 (cp c614efd33) fixes #2507 add conditions before trying to display an image in the email 2026-01-13 15:09:14 +01:00
HWFord
a21ef7bdc6 (cp 074de993f) fixes #2503 revert moving update button 2026-01-07 16:47:04 +01:00
HWFord
d8aaf39ba2 (cp 40e6540b0) issue #2486 Fix typo in french 2026-01-07 15:04:04 +01:00
plegall
680afb9b3b (cp ea80dca42) fixes #2499 make the check_for_updates a unique_exec 2026-01-04 20:49:11 +01:00
plegall
12320defde next release is 16.2.0 16.2.0 2025-12-30 12:18:24 +01:00
plegall
a40df0f5bd copy all languages from translation@10ca45ad0 2025-12-30 12:17:19 +01:00
plegall
b3286ff4ee (cp e3c80efe6) fixes #2494 only picture_ext files can be resized after upload 2025-12-29 22:21:44 +01:00
plegall
a12db50159 (cp ff633b713) Change syntax order of all imagemagick to match IM7 syntax 2025-12-29 15:51:53 +01:00
plegall
57bb2f3bf9 (cp 2583591a6) imagick7 expects input file before options 2025-12-29 15:51:38 +01:00
Linty
a43fb864dd (cp 91088bbec) fixes #2490 add merge_tags notification trigger
A trigger_notify call for 'merge_tags' was added before deleting tags in the tag merge process. This allows plugins or extensions to react to tag merges.
2025-12-22 16:24:50 +01:00