Commit Graph

2250 Commits

Author SHA1 Message Date
plegall
ab46632a32 Revert "Include pwg_token in user list POST request (Fixes #748) (#866)"
This reverts commit 65ac272179.
2019-04-02 14:06:54 +02:00
plegall
940d1d2e8c issue #552
* many more admin actions are logged into activity table
* use the activity.details as an associative array (serialized in database)
2019-04-01 16:19:09 +02:00
plegall
447e7e729f remove useless package.json file for open-sans, causing irrelevant security alert 2019-03-25 17:02:17 +01:00
plegall
27a6504284 issue #552 new table activity and log add/edit/delete on albums 2019-03-25 16:50:45 +01:00
plegall
6a336ed4ec issue #987 refresh header message (for example, used to notify about upgrade_feed) 2019-03-25 16:45:36 +01:00
plegall
b20d46e3f3 fixes #992 wrong menubar alignment on Chrome 2019-03-22 17:02:12 +01:00
plegall
14eeb35c66 re-order albums: use new icon instead of old image 2019-03-22 14:59:54 +01:00
plegall
8afda448ef new icon arrow-combo to re-order albums 2019-03-22 14:49:15 +01:00
plegall
288d72846d fixes #991 better hide h2 without hiding plugin search filter 2019-03-22 12:27:25 +01:00
plegall
1eaeb8ba3c issue #987 new admin design adapted for dark theme 2019-03-22 12:13:32 +01:00
plegall
148cefb2f2 update from https://github.com/FontFaceKit/open-sans to commit 5949316 to avoid vulnerability alert by Github 2019-03-15 15:15:30 +01:00
plegall
6f1b75d135 issue #987 new header/menubar/footer for admin pages
only works fine for "day" mode, not for "night" mode yet
2019-03-15 14:10:19 +01:00
plegall
466a479be0 issue #987 add font Open Sans for admin pages 2019-03-15 12:08:53 +01:00
plegall
19cccd9053 issue #987 new icons (left and down arrows for menubar) 2019-03-15 12:07:24 +01:00
plegall
9f6e3e9080 fixes #979 derivative cache generation works even for file with representative picture
Cache medium size, instead of thumbnail.
2019-03-08 15:16:08 +01:00
Teatek
61b7974a8d ability to set album order with web API
* add method pwg.categories.setRank in Piwigo web API
2019-02-13 15:00:22 +01:00
Teatek
f308af3e46 fixes #855 trigger on group deletion
* adding trigger (admin screen)
* adding trigger (API)
* update trigger list
2019-02-11 14:02:30 +01:00
Teatek
339c54fa23 issue #273 improve labels 2019-02-04 10:46:16 +01:00
Teatek
1907e678b8 Fixes #273 (Add ui option to display or not the date of an album) 2019-02-04 10:46:16 +01:00
Teatek
743d31c9e0 Fixes #863 Allow delete representative for empty albums 2019-02-01 16:38:47 +01:00
Teatek
2cf5c63ca1 fixes #854 adding trigger on tag deletion 2019-02-01 14:07:56 +01:00
plegall
b29ab344e9 fixes #972 use an alternative algorithm to discover number of future orphans, with very large albums 2019-01-28 14:05:51 +01:00
Teatek
b8d6f01b38 fixes #966 progression bar for sync metadata
* [Batch Manager] adding progression bar for metadata sync action
* [Batch Manager] display the number of synchronized photos in the success message
2019-01-27 17:16:13 +01:00
Teatek
b05241f508 Fixes #272 missing md5sum
* dashboard: add warning if missing checksums
* add a "compute all missing md5sum" option in batch manager (inspired by delete orphans)
* progress bar when computing md5sums
2019-01-22 10:26:52 +01:00
plegall
063711240a Squashed commit of the following:
commit 7190866ccf15033f27095d635546e46dacbb755e
Author: plegall <plg@piwigo.org>
Date:   Thu Jul 12 10:52:33 2018 +0200

    Revert "Replace not maintained cssmin with fork from github https://github.com/natxet/CssMin"

    This reverts commit c8b12a2ed0.

commit 1dac11ecb6783d0d5353c3d250388f018c30fc5c
Author: plegall <plg@piwigo.org>
Date:   Thu Jul 12 10:52:24 2018 +0200

    Revert "Update Smarty to 3.1.3"

    This reverts commit db684f6151.

commit 3ac752dc93912ba5701d22dadd9bb3b81e5bb383
Merge: d1c2e71 8d58256
Author: plegall <plg@piwigo.org>
Date:   Thu Jul 12 10:50:43 2018 +0200

    Merge branch 'php72' of https://github.com/Infern1/Piwigo into Infern1-php72

commit 8d58256c45
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Wed Mar 21 23:40:36 2018 +0100

    new feedcreator version for PHP7

commit bb0fcc3a30
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Wed Mar 21 23:26:27 2018 +0100

    php72 fixes, replaces each() function

commit 3db22c0d33
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Wed Mar 21 23:02:46 2018 +0100

    More fixes for PHP7.2

commit 50d8aafc77
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Mon Mar 19 23:55:21 2018 +0100

    Some more replacements of create_function

commit 8263335c42
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Mon Mar 19 22:54:54 2018 +0100

    Fixed indents

commit 8d58b637c6
Merge: c8b12a2 8a57d77
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Tue Feb 27 13:51:32 2018 +0100

    Merge remote-tracking branch 'upstream/master' into php72

commit c8b12a2ed0
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Thu Jan 18 00:32:46 2018 +0100

    Replace not maintained cssmin with fork from github https://github.com/natxet/CssMin

commit db684f6151
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Thu Jan 18 00:23:24 2018 +0100

    Update Smarty to 3.1.3

commit 6a3f8f3e76
Author: Rob Lensen <rob@bsdfreaks.nl>
Date:   Wed Jan 17 23:40:27 2018 +0100

    Initial work to support PHP 7.2
2018-07-12 10:52:55 +02:00
plegall
7bf992b3cc fixes #890, use https instead of http to load images from piwigo.org 2018-07-11 15:06:38 +02:00
plegall
69345c06e2 fixes #847, CVE-2018-5692 protect a few user input variables 2018-07-11 11:22:31 +02:00
plegall
bef09018fb fixes #872, CVE-2018-7724, protect photo admin page from CSRF 2018-07-06 14:38:39 +02:00
plegall
06f4252312 fixes #258, batch manager, check the session category still exists 2018-07-06 11:52:04 +02:00
Daniel Dadap
65ac272179 Include pwg_token in user list POST request (Fixes #748) (#866)
* user list: set pwg_token in POST data to user_list_backend.php

The POST data for the user data table request was empty, which could
cause user data retrieval to error out with HTTP 403 due to missing
the authentication token.

* user_list_backend: fix uninitialized variables

If iSortCol_0, sEcho, or sSearch are unset in the HTTP request, it
could cause variables to be uninitialized, potentially causing error
messages to be included in the HTTP response. These error messages,
if present, can prevent the JSON response from being parsed.

* user list: delete unnecessary quotes

Javascript object key names don't generally need to be quoted.
Remove some quotes that were introduced by a recent change that added
a body to the AJAX POST request to retrieve the user list.
2018-07-06 10:51:04 +02:00
plegall
75118816b5 fixes #887, $selection is never set on PHP side, no need to use it in template
... and it makes the template compatible with PHP 7.2
2018-07-04 17:10:00 +02:00
plegall
b9336d7117 fixes #853, less strict check on user input "selectAction" for tag manager
... for compatibility with plugin Colored Tags (typetags) and maybe other in the future.
2018-03-23 10:03:47 +01:00
plegall
02275fe275 fixes #839, check input parameters on admin/tags.php 2018-02-21 17:34:56 +01:00
plegall
b6d61a78bb fixes #838, tells PHP how many photos were deleted in Batch Manager 2018-02-08 13:03:26 +01:00
plegall
9671454e75 fixes #826, check input parameter order_by in configuration 2017-12-18 17:06:37 +01:00
plegall
9028c75c1f fixes #825, check user input on Batch Manager, unit mode, to prevent SQL injection 2017-12-18 16:44:42 +01:00
plegall
77f02bfd76 fixes #822, add token on configuration page to prevent CSRF 2017-12-18 15:13:49 +01:00
plegall
1da9d6afc4 fixes #823 add input user check to avoid SQLi on users list 2017-12-18 14:02:52 +01:00
MaximeBOURMAUD
c9ab538319 Fixs issue #760 date_creation not refreshed when changing it from picture_modify (#763) 2017-09-18 17:48:42 +02:00
flop25
06952b2d5a Merge branch 'master' of https://github.com/Piwigo/Piwigo 2017-09-04 18:57:26 +02:00
flop25
08cce48d4b Fixes #755 Never thow '0000-00-00 00:00:00' as value but Null instead
only for exif ; iptc is ok
2017-09-04 18:57:22 +02:00
MaximeBOURMAUD
2c07301467 Fixing issue #731 (#754)
* Fixing issue #731, if NB_PHOTOS is upper than 1000 display it

* Fixs issue #731 now number of picture between 1000 and 1999 are displayed

* Fixs formatting
2017-09-04 14:23:50 +02:00
plegall
f520f82736 fixes #726, add trigger in create_virtual_category 2017-07-03 15:56:21 +02:00
plegall
b5fc14700a give error details on permalink creation 2017-07-03 13:56:10 +02:00
flop25
a4982978c0 now "Apply to sub-albums" can be applied to set all children album as public ones
https://github.com/Piwigo/Piwigo/issues/697
technically it's like going to page=cat_options&section=status but
that's more userfriendly to get that feature on permission page of an
album too
2017-07-02 23:29:07 +02:00
flop25
30e8babd6d pwg_token left for cat_options pages
solving https://github.com/Piwigo/Piwigo/issues/721
2017-06-29 16:25:26 +02:00
flop25
3dd6812412 check input parameter for cat_options pages
solving https://github.com/Piwigo/Piwigo/issues/724
2017-06-29 16:24:15 +02:00
flop25
03a8329b89 adding pwg_token on permalink & cat_options
and therefor solving issue:721
2017-06-28 23:44:26 +02:00
plegall
d542de77c3 fixes #713, use the default language to send email
and not only to build the email body message
2017-06-21 11:44:12 +02:00
plegall
346f5c3849 fixes #707, hide decimal for "158.0 pages seen" 2017-06-14 19:42:21 +02:00