Commit Graph

45 Commits

Author SHA1 Message Date
nikrou
c86ae74710 merge r3184 backport from trunk to branch 2.0
bug 933 fixed : quick fix to prevent html injection

git-svn-id: http://piwigo.org/svn/branches/2.0@3214 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-03-19 19:29:03 +00:00
plegall
aeaffa61bd Administration: happy new year 2009, all PHP headers updated.
git-svn-id: http://piwigo.org/svn/branches/2.0@3046 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-01-04 23:09:15 +00:00
rub
5436a351ef Resolved issue 0000823: Enhance upload functionalities
First commit, others will be follow.
Not hesitate to change my translations.

Add upload configuration tabsheet (move and add configuration)
Change and add define for access level
Can show upload link every time
Can restrict access upload.class.php
Can choice category on upload page
Add upload class not use for the moment
Review quickly and temporary style of upload.tpl

git-svn-id: http://piwigo.org/svn/trunk@2325 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-05-02 21:56:21 +00:00
plegall
524011bfa6 Bug fixed: as rvelices notified me by email, my header replacement script was
bugged (r2297 was repeating new and old header).

By the way, I've also removed the replacement keywords. We were using them
because it was a common usage with CVS but it is advised not to use them with
Subversion. Personnaly, it is a problem when I search differences between 2
Piwigo installations outside Subversion.


git-svn-id: http://piwigo.org/svn/trunk@2299 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-04-05 14:14:07 +00:00
plegall
3f235497f3 Modification: new header on PHP files, PhpWebGallery renamed Piwigo.
git-svn-id: http://piwigo.org/svn/trunk@2297 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-04-04 22:57:23 +00:00
rvelices
bf1f7c4aec - security fix (profile)
- les langues a la hache
- fix some copy/paste errors

git-svn-id: http://piwigo.org/svn/trunk@2268 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-03-08 12:38:09 +00:00
patdenice
07abd206ce Register goes smarty.
Correction in profile.php (forgotten assign_var)

git-svn-id: http://piwigo.org/svn/trunk@2247 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-03-03 17:49:52 +00:00
rub
89623393d4 Resolved issue 0000784: Mail notification disabled on register user
Merge branch-1_7 2176:2177 into BSF

git-svn-id: http://piwigo.org/svn/trunk@2178 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-12-11 06:10:38 +00:00
rub
75bfe8b667 Replace some $lang by l10n
git-svn-id: http://piwigo.org/svn/trunk@2014 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-05-15 20:23:09 +00:00
rub
a0295117fe Issue 0000682: Error on user registration
On register page when the 2 passwords are not the same, an error occurs but user is also created.

=> Just error must be raised.

git-svn-id: http://piwigo.org/svn/trunk@1985 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-04-27 05:22:17 +00:00
rub
6d2ea02a95 Add new translation functions.inc.php
Translate subject of information mail.
Notification mails are sent on the default language.
No mail is sent to the author witch are not done actions

git-svn-id: http://piwigo.org/svn/trunk@1908 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-03-15 23:20:41 +00:00
rub
17246da089 Add notification when a picture is loaded.
Change little translations.
Improve mail sent.

git-svn-id: http://piwigo.org/svn/trunk@1901 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-03-12 23:10:35 +00:00
rub
6f03e29735 o Proposition: improved display of 'x images in y sub-categories' or 'x images in this category' for cases when categories contain both images and sub-categories
o Good idea of this new way for way conf['guest_access'], but I kept last implementation for access methods (Could be useful on future development)

git-svn-id: http://piwigo.org/svn/trunk@1851 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-02-22 20:20:30 +00:00
rub
bb78990601 My last improvements before 1.7.0RC1.
Can include Cc & Bcc on mail.
Send mail to all administrators on new comment or new users.
Add validate link on new comment mail.
Try to detect if the NBM complementary content is HTML or plain text. With plain text, this content is convert to readable HTML.

git-svn-id: http://piwigo.org/svn/trunk@1818 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-02-14 22:53:04 +00:00
rub
9ceec74971 When not template are selected for mail, PWG uses default template..
Sent multi-part message in MIME format. (With only one part for the moment).

Improvement pwg_mail function.

git-svn-id: http://piwigo.org/svn/trunk@1809 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-02-12 23:21:23 +00:00
rvelices
80020dd756 - user profiles available from admin page
- user creation from admin page with email (bug 514)
- some language cleanup
- small template enhancements
- php syntax corrections (my mistake)

git-svn-id: http://piwigo.org/svn/trunk@1753 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-01-25 02:18:56 +00:00
rvelices
585d7c434e - plugins with own independent scripts work now (cookie_path and url root are
correct)
- prepare a bit some url functions so that later we can fully embed pwg in
scripts located outside pwg
- remove some unnecessary language strings

git-svn-id: http://piwigo.org/svn/trunk@1750 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-01-24 05:07:08 +00:00
rvelices
74e5d80e89 - feature 599: option to forbid user registration
- 1 language cleanup
- added page_forbidden function (sends 403)

git-svn-id: http://piwigo.org/svn/trunk@1652 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-12-13 01:05:38 +00:00
rvelices
a557904d2a language cleanup (removed duplicate messages and use {lang:} instead of
template->assign_var)

git-svn-id: http://piwigo.org/svn/trunk@1615 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-11-22 02:49:58 +00:00
rvelices
2a8b727d4b feature 563: send an email to admin when new user registers (optional)
git-svn-id: http://piwigo.org/svn/trunk@1566 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-10-19 21:33:43 +00:00
rvelices
af621d40d4 feature 564: logs in the history table each user login
feature 562: possibility to log page visits for any combination of 
administrators/users/guests

git-svn-id: http://piwigo.org/svn/trunk@1565 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-10-19 00:41:07 +00:00
plegall
114ae32445 new: cleaner URL. Instead of category.php?cat=search&search=123&start=42,
you now have category.php?/search/123/start-42. Functions make_index_url and
make_picture_url build these new URLs. Functions duplicate_picture_url and
duplicate_index_url provide shortcuts to URL creation. The current main page
page is still category.php but this can be modified easily in make_index_url
function. In this first version, no backward compatibility. Calendar
definition in URL must be discussed with rvelices.

improvement: picture.php redesigned. First actions like "set as
representative" or "delete a comment" which all lead to a redirection. Then
the page (the big mess) and includes of new sub pages to manage specific
parts of the page (metadata, user comments, rates).

new: with the cleaner URL comes a new terminology. $page['cat'] doesn't
exist anymore. $page['section'] is among 'categories', 'tags' (TODO),
'list', 'most_seen'... And sub parameters are set : $page['category'] if
$page['section'] is "categories". See URL analyse in
include/section_init.inc.php for details.


git-svn-id: http://piwigo.org/svn/trunk@1082 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-03-15 22:44:35 +00:00
rvelices
1e7c9034de bug fix: call to undefined session_create in register.php (added function
log_user called from identification and register)

bug fix: empty line at the beginning of functions.php disallowed cookies 
(and hence logging in)

git-svn-id: http://piwigo.org/svn/trunk@1068 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-03-07 01:20:02 +00:00
nikrou
c3397a2c73 Improve security of sessions:
- use only cookies to store session id on client side
- use default php session system with database handler to store sessions on server side

git-svn-id: http://piwigo.org/svn/trunk@1004 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-01-15 13:45:42 +00:00
plegall
4b4e8a4663 - bug 172 fixed: crash when changing password with an external users
table. The same kind of correction was also made in picture.php and
  register.php.


git-svn-id: http://piwigo.org/svn/trunk@902 68402e56-0260-453c-a942-63ccdbb3a9ee
2005-10-18 22:29:21 +00:00
plegall
f01a9f5b7c - new : HTML BODY identifier to let CSS stylesheets manage specific
behaviour.

- deletion : admin/search useless

- improvement : in admin/user_list, special behaviour for true/false fields
  (expand, show_comments)

- new : gallery_title and gallery_description are displayed at the top of
  each page.

- improvement : simplification in HTML for categories menu.

- improvement : standardization of presentation in all public pages
  (identification, registration, search, profile, notification, comments,
  etc.)

(not in ChangeLog, below this line)

- add forgotten notification.php (should have been added in a previous
  commit)

- [template cclear] deletion of useless class .bouton

- [template cclear] for test purpose, new presentation of register page
  (using FORM.filter)

- [template cclear] adaptation of admin/group_list from template default

- [template cclear] deletion of obsolete admin/infos_images

- [template cclear] deletion of obsolete admin/search_username

- [template cclear] new icon register.png


git-svn-id: http://piwigo.org/svn/trunk@850 68402e56-0260-453c-a942-63ccdbb3a9ee
2005-08-25 22:43:47 +00:00
plegall
273884a652 - new : external authentication in another users table. Previous users table
is divided between users (common properties with any web application) and
  user_infos (phpwebgallery specific informations). External table and
  fields can be configured.

- modification : profile.php is not reachable through administration anymore
  (not useful).

- modification : in profile.php, current password is mandatory only if user
  tries to change his password. Username can't be changed.

- deletion : of obsolete functions get_user_restrictions,
  update_user_restrictions, get_user_all_restrictions, is_user_allowed,
  update_user

- modification : $user['forbidden_categories'] equals at least "-1" so that
  category_id NOT IN ($user['forbidden_categories']) can always be used.

- modification : user_forbidden table becomes user_cache so that not only
  restriction informations can be stored in this table.


git-svn-id: http://piwigo.org/svn/trunk@808 68402e56-0260-453c-a942-63ccdbb3a9ee
2005-08-08 20:52:19 +00:00
plegall
72b4671ba9 - bug fixed : when a error occured during registration, the mail address
submitted was not displayed on correction form


git-svn-id: http://piwigo.org/svn/trunk@740 68402e56-0260-453c-a942-63ccdbb3a9ee
2005-02-13 18:26:01 +00:00
plegall
0737f91b19 - use template->parse instead of pparse. (exceptions for install.php and
upgrade.php)

- bug fixed : queries time and count were not displayed on a redirection


git-svn-id: http://piwigo.org/svn/trunk@688 68402e56-0260-453c-a942-63ccdbb3a9ee
2005-01-13 10:18:49 +00:00
plegall
6244654872 all headers adapted to new year 2005, happy new year
git-svn-id: http://piwigo.org/svn/trunk@675 68402e56-0260-453c-a942-63ccdbb3a9ee
2005-01-07 23:10:51 +00:00
plegall
738d4cc7f4 - register process partly rewritten
git-svn-id: http://piwigo.org/svn/trunk@661 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-12-28 17:56:33 +00:00
gweltas
6fa03e0cca - User control panel update (user side)
- User control panel update (admin side)
- Add of registration link on the main page
- Minor bug correction for group management


git-svn-id: http://piwigo.org/svn/trunk@631 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-12-03 16:30:12 +00:00
z0rglub
a8b1a03018 update headers to comply with GPL
git-svn-id: http://piwigo.org/svn/trunk@593 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-11-06 21:12:59 +00:00
z0rglub
a0033b8b56 redirections modification : use of a HTML refresh page instead of header PHP
function. The purpose is to avoid redirections failure when extra characters
are found in included PHP files.


git-svn-id: http://piwigo.org/svn/trunk@405 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-03-31 20:43:09 +00:00
gweltas
4128835db8 - Template migration
- Admin Control Panel migration
- Language migration


git-svn-id: http://piwigo.org/svn/trunk@393 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-03-20 00:52:37 +00:00
gweltas
60b84a9db5 Template migration
git-svn-id: http://piwigo.org/svn/trunk@369 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-02-22 02:43:13 +00:00
gweltas
8d4e9c5d0f Template migration
git-svn-id: http://piwigo.org/svn/trunk@365 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-02-19 20:21:56 +00:00
gweltas
78df1f97d3 Split of langage files
git-svn-id: http://piwigo.org/svn/trunk@364 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-02-19 00:31:09 +00:00
z0rglub
6f4e7d6bc0 header global refactoring
git-svn-id: http://piwigo.org/svn/trunk@362 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-02-11 23:20:38 +00:00
gweltas
e712c4aef8 Migration of common.php in the include directory to fit the new coding rules
git-svn-id: http://piwigo.org/svn/trunk@354 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-02-07 19:36:44 +00:00
gweltas
bef4b3e3aa Merge of the 1.3.1 release
Creation of an unique include file (common.php)
Creation of an unique define file (include/constants.php)
Modification of the installation procedure


git-svn-id: http://piwigo.org/svn/trunk@345 68402e56-0260-453c-a942-63ccdbb3a9ee
2004-02-02 00:55:18 +00:00
z0rglub
058c5e2b76 Using template_initialize
git-svn-id: http://piwigo.org/svn/trunk@105 68402e56-0260-453c-a942-63ccdbb3a9ee
2003-09-14 16:21:02 +00:00
z0rglub
6cbffaa646 improve the header of each file
git-svn-id: http://piwigo.org/svn/trunk@57 68402e56-0260-453c-a942-63ccdbb3a9ee
2003-08-24 07:40:56 +00:00
z0rglub
0ec91d8b48 *** empty log message ***
git-svn-id: http://piwigo.org/svn/trunk@21 68402e56-0260-453c-a942-63ccdbb3a9ee
2003-07-01 09:27:20 +00:00
z0rglub
867c2379ff Initial revision
git-svn-id: http://piwigo.org/svn/trunk@2 68402e56-0260-453c-a942-63ccdbb3a9ee
2003-05-09 12:42:42 +00:00