2294 Commits

Author SHA1 Message Date
plegall
8fe4305d35 during upgrade, use the new default Piwigo theme (modus) instead of hardcoded "elegant"
... and make sure the default Piwigo theme is active before that.
2019-10-08 12:23:54 +02:00
plegall
0e86caac30 [design] quick improve of new plugins filter 2019-10-07 12:32:32 +02:00
plegall
95a656c145 no more need of jGrowl on upload form 2019-09-26 11:15:24 +02:00
plegall
a30b1115ae issue #1080 moves fontello animation.css at the end of the combined files list
It does not fixes the parsing problem, but it avoids breaking following CSS rules.
2019-09-25 16:25:20 +02:00
plegall
fa8996e10f issue #1073 prevents from making uploaded file executable
* for the name of the file in buffer directory, do not use the name given by the user, but the md5 of the name without extension
* function add_uploaded_file deletes uploaded file if not expected
2019-09-20 16:26:21 +02:00
plegall
7e154ab093 issue #1075 check the url keys are expected 2019-09-20 14:02:03 +02:00
James Bercegay
1119d36c4b XSS Fix
urlencode() key data as well
2019-09-20 13:55:32 +02:00
plegall
1061dd0a77 fixes #1070 use ajax queue manager to launch metadata syncs
+ exit from event once the "metadata" is performed to avoid side effects with "delete" action.
2019-09-03 16:49:12 +02:00
plegall
3478033515 fixes #1057 use a popin instead of popup to display admin page help.
The "old way" still works with the popuphelp() javascript function.
2019-08-13 12:07:16 +02:00
plegall
b4f8d6d994 fixes #1056 use a font-icon for page help 2019-08-12 17:01:41 +02:00
plegall
7234d0108e fixes #1011 add user input checks (and pwg_token) to avoid SQL injection (and CSRF) 2019-08-12 16:45:21 +02:00
plegall
91349065ea fixes #1010 prevent from SQL injection with user input check 2019-08-12 16:24:27 +02:00
plegall
fccb6caa75 fixes #1012 prevent SQL injection with a check on user input 2019-08-12 14:52:56 +02:00
plegall
4932bc502b fixes #1009 check group_selection parameter to be only an array of ids 2019-08-12 14:25:56 +02:00
plegall
776f8fa186 fixes #1058 prevent CSRF on notification by mail, with a pwg_token
also added some checks to NBM parameters to avoid XSS (minor issue)
2019-08-12 12:31:24 +02:00
plegall
fdcb6f50f6 fixes #1055 prevents XSS on original resize fields 2019-08-09 15:52:04 +02:00
plegall
292b414d25 remove shadow on album creation button for empty gallery 2019-07-19 14:27:50 +02:00
Sam Wilson
05fb7aafd4 Order by the field(s) used to find duplicates
When searching for duplicates, also sort the results by the
fields used to find the duplicates.
2019-07-17 15:22:53 +02:00
plegall
4ae0f46bae fixes #1049 update applications, new screenshots and hide ReGalAndroid 2019-07-11 14:54:34 +02:00
plegall
c1eecab364 fixes #996 escape word "groups" in SQL queries, new reserved word with MySQL 8 2019-06-28 18:07:53 +02:00
plegall
0ef2193471 fixes #93 automatically hide the newsletter link when clicked 2019-06-28 14:45:05 +02:00
plegall
3999bff326 fixes #1042 set Modus as default theme 2019-06-28 11:21:18 +02:00
plegall
5436c48ead fixes #1041 no longer activate TakeATour by default 2019-06-28 10:35:43 +02:00
plegall
22f3e679ee fixes #1040 move check upgrade action to maintenance page 2019-06-27 19:09:40 +02:00
Sam Wilson
8e9cb6de23 Quote 'rank' field name in SQL
Add backticks to reserved word 'rank' in SQL queries.

Bug: GH #919
2019-06-27 17:50:59 +02:00
plegall
46781c191a issue #1031 no background on album path 2019-06-20 16:44:18 +02:00
plegall
9bc9bae2cc fixes #1035 translate the visit link 2019-06-20 14:55:23 +02:00
plegall
9e629a2369 issue #1031 album manager, move breadcrumbs outside page title 2019-06-11 16:38:49 +02:00
plegall
fc193f7474 issue #830 simplify PHP files header, remove copyright/license info 2019-06-04 17:13:51 +02:00
plegall
2829f1a4ea fixes #1029 only keep new logo 2019-06-04 14:51:01 +02:00
plegall
5f0c429d2b issue #987 change a:hover to new orange 2019-05-31 12:08:58 +02:00
plegall
63ca304ff4 issue #1019 missing l10n 2019-05-31 11:26:25 +02:00
plegall
b150774bc9 issue #1019 do not display album selection if coming from a "add photos to album" link 2019-05-28 16:08:11 +02:00
plegall
242b734d8f issue #1019 slightly move up welcome box 2019-05-28 16:06:57 +02:00
plegall
99351c5898 issue #987 replace H2 by H1 only if H2 is available 2019-05-28 16:06:00 +02:00
plegall
692120cd07 issue #987 set a title on pages 2019-05-28 16:05:09 +02:00
plegall
fafa0dd7ae issue #1014 no more link on album name, a big button does the same job 2019-05-28 15:58:16 +02:00
Yann Le Boudec
038a42dd46 issue #1019 photo upload redesign
* Hide album selection after creation
* Correctly center the welcome box
* Better alignment for select files info
* Remove summary for select files info, always display details
* Fix dynamic margins in album popin
* Simplify show/hide blocks when no album available
* Make file selection button secondary when files added to queue
2019-05-28 15:00:03 +02:00
Yann Le Boudec
f5f555e1f2 issue #1019 photo upload redesign, new language strings 2019-05-22 16:49:35 +02:00
Yann Le Boudec
079b6fcb9a issue #1019 photo upload redesign, minor changes 2019-05-22 16:49:35 +02:00
Yann Le Boudec
9891c79f25 issue #1019 photo upload redesign
Based on Samuel's mockup.
2019-05-22 16:49:35 +02:00
Yann Le Boudec
c9715d255d issue #1014 album manager redesign 2019-05-09 14:03:33 +02:00
Yann Le Boudec
10eacfb44d Add icons
th1 flow-tree sort-alt-up sort-alt-down
2019-05-09 14:03:33 +02:00
plegall
f3cc541208 issue #1002 dashboard redesign, colors for big icons 2019-04-12 15:31:53 +02:00
plegall
ab46632a32 Revert "Include pwg_token in user list POST request (Fixes #748) (#866)"
This reverts commit 65ac272179.
2019-04-02 14:06:54 +02:00
plegall
940d1d2e8c issue #552
* many more admin actions are logged into activity table
* use the activity.details as an associative array (serialized in database)
2019-04-01 16:19:09 +02:00
plegall
447e7e729f remove useless package.json file for open-sans, causing irrelevant security alert 2019-03-25 17:02:17 +01:00
plegall
27a6504284 issue #552 new table activity and log add/edit/delete on albums 2019-03-25 16:50:45 +01:00
plegall
6a336ed4ec issue #987 refresh header message (for example, used to notify about upgrade_feed) 2019-03-25 16:45:36 +01:00
plegall
b20d46e3f3 fixes #992 wrong menubar alignment on Chrome 2019-03-22 17:02:12 +01:00