plegall
ed487e4b24
next version is 2.10.2
2020-03-26 19:50:36 +01:00
plegall
2bedd661a1
cherry-pick 47 commits from translation
...
* 804397bfb5a89857f3f79c0ca722df53b2eb3977bd644b978297b20506a34f565d6780bcb96f82164138a233a6310e2f5b4ea7a507cda1ac3f2b3e06768242b38d2c5faaf2fefadae1bd056a3b3a13672f94e3b8c9f51d8246e305500ed20d1495d8911c121898262c1a82f123de62b54a069c7f9b6aeb7ba861120077ba4e050810e492584c01a6d3913e1c22d26ef7ef0140950dc2f12e48211446d800015386fcf2ab7
2020-03-26 19:41:35 +01:00
plegall
5f2bed13b6
(cp f9edbd3) PHP 7.4 fixes
2020-03-25 14:57:36 +01:00
plegall
6104b0ef41
(cp 8a5a2d9) Revert "Fix PHP-7.4 Issue "
...
This reverts commit ea25f5b3a4
2020-03-25 14:57:01 +01:00
plegall
2f3488ef62
(cp d3879b1) issue #1114 use the new screenshot provided by @HWFord
2020-03-25 14:54:05 +01:00
plegall
d28cc8eba2
(cp cf38caf) fixes #1119 keep the ability to reset password when there is no photo yet
2020-03-24 15:18:38 +01:00
plegall
078cd7308e
fixes #1168 prevent XSS on pwg.images.setInfo
2020-03-24 14:06:00 +01:00
plegall
b3027b1977
(cp e21ef06) fixes #1162 filter users on a specific group
2020-02-18 10:52:09 +01:00
plegall
e643740a09
(cp d365e2d) fixes #1114 the Piwigo for Android app comes back
...
Revert "issue #420 , remove Piwigo for Android, not up-to-date"
This reverts commit 069581b80d
2020-02-10 16:47:15 +01:00
plegall
cb93551d84
(cp 6ac6db0) issue #1150 also protect groupe name on API methods
2020-02-07 17:17:38 +01:00
plegall
4e0ab8e515
(cp 619849f) fixes #1150 prevent HTML code in group name
...
It avoids any stored XSS between administrators and it's totally useless to have HTML code in the group name.
2020-02-07 17:07:19 +01:00
plegall
36e860af50
(cp cade535) missing piece of code for #1098 to make the number of checksum configurable
2020-02-07 15:11:06 +01:00
plegall
f78b10d1be
(cp ea25f5b) Fix PHP-7.4 Issue
...
PHP-7.4 Issue = "Trying to access array offset on value of type null" in functions_category.inc.php
2020-02-07 15:09:17 +01:00
plegall
a3898f9666
(cp 884c432) Quote mysql keyword groups
2019-12-16 10:55:04 +01:00
plegall
6a8104b92b
(cp f62ee77) Fix count() warning
...
In PHP 7.2 and later you will get a warning if you call count() on null. So either initialize $errors to an empty array here, or use empty() to check it as I have done here.
2019-12-16 10:51:51 +01:00
plegall
0d9bc4da7d
(cp 8573e35) include/functions_cookie: use proper brackets for offset access
...
Fixes #1134
2019-12-04 10:42:07 +01:00
plegall
20ace0e2c8
(cp 29cc543) fixes #1133 adapt the height of the scrolling menu for plugins, depending on browser available height.
...
Also, change background color of this scrollbar.
2019-12-03 12:27:08 +01:00
plegall
2042598f5b
(cp 90e4a63) fixes #1112 better management for long username + long gallery name on small screen
2019-11-26 16:34:23 +01:00
plegall
6d0d335200
(cp 41b4230) fixes #1102 limit the number of tags shown in the menubar
2019-10-15 16:03:19 +02:00
plegall
181c85699c
next version is 2.10.1
2019-10-14 15:26:30 +02:00
plegall
682edac208
cherry-pick 4 commits from translation
...
* 616668e06eef2796658c7f45c6895743b8f9
2019-10-14 15:25:20 +02:00
plegall
c9aa99d0cb
(cp c4142c2) fixes #1092 javascript syntax error on batch manager (Safari only)
2019-10-14 14:30:44 +02:00
plegall
0a89747afa
(cp 72094c5) fixes #1090 move warning about missing checksums from dashboard to sync page
...
* avoid scaring users for a minor issue
* convert the warning message into a simple info
* simplify algorithm for detection and only search on relevant pages (batch manager + sync page)
2019-10-14 14:18:43 +02:00
plegall
5cbe5aadd9
(cp 9b695da)(cp 15d8a19) fixes #988 no more warning on PHP 7.3
...
This fix was initially only for branch 2.9, and branch master should have
received a new version of jshrink, but I forgot to do it before 2.10 and now
we have a regression in 2.10. This commit will be cherry-picked to 2.10 and
we also have it on master so that we don't have a new regression in 2.11 (in
case jshrink is not properly updated)
2019-10-14 12:35:09 +02:00
plegall
1e78225b0d
(cp e49c217) fixes #1099 avoid JS error when there is no album associated to current photo set
2019-10-14 12:28:35 +02:00
plegall
d8e2e52e88
(cp ac5d00e) fixes #1098 make checksum computation block size configurable, and smaller by default
2019-10-14 12:23:40 +02:00
plegall
b5dd0da47e
(cp 54b727a) fixes #1097 checksum compute, make the block size constant
2019-10-14 11:44:04 +02:00
plegall
7223594dbc
(cp a58d87e) change default configuration settings for a stable branch.
...
Developers who need previous configuration settings can modify them in their local configuration
2019-10-08 12:31:16 +02:00
plegall
8fe4305d35
during upgrade, use the new default Piwigo theme (modus) instead of hardcoded "elegant"
...
... and make sure the default Piwigo theme is active before that.
2019-10-08 12:23:54 +02:00
plegall
087284eafc
next version is 2.10.0
2019-10-07 16:07:57 +02:00
plegall
6a25b9efea
update language directory from the "translation" branch
...
simple copy, based on commit 28e0a2c089
2019-10-07 16:05:10 +02:00
plegall
0e86caac30
[design] quick improve of new plugins filter
2019-10-07 12:32:32 +02:00
plegall
95a656c145
no more need of jGrowl on upload form
2019-09-26 11:15:24 +02:00
plegall
a30b1115ae
issue #1080 moves fontello animation.css at the end of the combined files list
...
It does not fixes the parsing problem, but it avoids breaking following CSS rules.
2019-09-25 16:25:20 +02:00
Pierrick Le Gall
1872f75938
refresh Github readme
...
* new logo
* new screenshot
* new URLS (using https instead of http)
* link to contributing guide
2019-09-23 12:12:51 +02:00
plegall
fa8996e10f
issue #1073 prevents from making uploaded file executable
...
* for the name of the file in buffer directory, do not use the name given by the user, but the md5 of the name without extension
* function add_uploaded_file deletes uploaded file if not expected
2019-09-20 16:26:21 +02:00
plegall
7e154ab093
issue #1075 check the url keys are expected
2019-09-20 14:02:03 +02:00
plegall
dcaf31fe09
update year in API browser footer
2019-09-20 13:58:30 +02:00
James Bercegay
1119d36c4b
XSS Fix
...
urlencode() key data as well
2019-09-20 13:55:32 +02:00
plegall
1061dd0a77
fixes #1070 use ajax queue manager to launch metadata syncs
...
+ exit from event once the "metadata" is performed to avoid side effects with "delete" action.
2019-09-03 16:49:12 +02:00
plegall
5b65fca36c
fixes #1068 escape the rank new MySQL 8 reserved word
...
This time, we do it right before sending the query to MySQL, in the pwg_query
function. This is not optimal, because we add extra processing, useless most
of the time. This solution has less impact on code, and automatically work for
all core and plugins SQL queries.
2019-08-30 12:11:47 +02:00
plegall
bf39de788a
fixes #1016 API method pwg.session.login gets same behavior a web login form, regarding empty password
2019-08-26 15:55:09 +02:00
plegall
18460716e3
next release is 2.10.0RC1
2019-08-19 15:16:55 +02:00
plegall
38f4d6199d
update language directory from the "translation" branch
...
simple copy, based on commit 2d46a7599e
2019-08-19 14:58:22 +02:00
plegall
01e593fde2
fixes #1063 upgrade script to 2.10
2019-08-14 16:50:19 +02:00
Sam Wilson
7b6912ba98
Use default theme if loaded one is not found
...
When loading a user's theme, make sure it's installed. Also, when
determining the default theme, account for the situation in which
zero themes are installed (and use 'default' then).
Refs #1061
2019-08-14 12:18:45 +02:00
plegall
63bbba8e36
fixes #1060 always escape table/column names in advanced database functions
...
which are single_insert, single_update, mass_inserts and mass_updates. The new function
protect_column_name simply surrounds the name with backticks, if needed.
2019-08-13 16:44:54 +02:00
plegall
3478033515
fixes #1057 use a popin instead of popup to display admin page help.
...
The "old way" still works with the popuphelp() javascript function.
2019-08-13 12:07:16 +02:00
plegall
b4f8d6d994
fixes #1056 use a font-icon for page help
2019-08-12 17:01:41 +02:00
plegall
7234d0108e
fixes #1011 add user input checks (and pwg_token) to avoid SQL injection (and CSRF)
2019-08-12 16:45:21 +02:00
