86efc8c0de
(cp e8df728) fix create_function replacement
2018-07-13 14:51:15 +02:00
23b23c1a59
(cp f283492) Fix syntax error
2018-07-12 15:09:01 +02:00
373bb8285d
cherry-pick 24 commits from translation
...
* 0c5c7b573f1d7785e0fa791987cb862041073a6bd7e5d91e0d175899ee6cacef357238d98898e616a302e05404506ddfdb80573e4c1f17d22358ec5a8b366e8010195fe71833b456b89bb27be0f5532ed865b1bb
2018-07-12 13:02:09 +02:00
4155f3ba96
next release is 2.9.4
2018-07-12 11:27:22 +02:00
4fad0eae98
(cp b1cb4e4) due to changes for compatibility with PHP 7.2, Piwigo now requires PHP 5.3
2018-07-12 11:24:44 +02:00
48abae9918
(cp 144a970) Fix for Cssmin with php7.2 and higher
2018-07-12 11:14:15 +02:00
1007098714
(cp 68f83a5) Fix for Msarty and PHP7.2
2018-07-12 11:13:34 +02:00
e45e726b58
(cp 0637112) Squashed commit of the following:
...
commit 7190866ccf15033f27095d635546e46dacbb755e
Author: plegall <plg@piwigo.org >
Date: Thu Jul 12 10:52:33 2018 +0200
Revert "Replace not maintained cssmin with fork from github https://github.com/natxet/CssMin "
This reverts commit c8b12a2ed0plg@piwigo.org >
Date: Thu Jul 12 10:52:24 2018 +0200
Revert "Update Smarty to 3.1.3"
This reverts commit db684f6151d1c2e718d58256plg@piwigo.org >
Date: Thu Jul 12 10:50:43 2018 +0200
Merge branch 'php72' of https://github.com/Infern1/Piwigo into Infern1-php72
commit 8d58256c45rob@bsdfreaks.nl >
Date: Wed Mar 21 23:40:36 2018 +0100
new feedcreator version for PHP7
commit bb0fcc3a30rob@bsdfreaks.nl >
Date: Wed Mar 21 23:26:27 2018 +0100
php72 fixes, replaces each() function
commit 3db22c0d33rob@bsdfreaks.nl >
Date: Wed Mar 21 23:02:46 2018 +0100
More fixes for PHP7.2
commit 50d8aafc77rob@bsdfreaks.nl >
Date: Mon Mar 19 23:55:21 2018 +0100
Some more replacements of create_function
commit 8263335c42rob@bsdfreaks.nl >
Date: Mon Mar 19 22:54:54 2018 +0100
Fixed indents
commit 8d58b637c6c8b12a28a57d77rob@bsdfreaks.nl >
Date: Tue Feb 27 13:51:32 2018 +0100
Merge remote-tracking branch 'upstream/master' into php72
commit c8b12a2ed0rob@bsdfreaks.nl >
Date: Thu Jan 18 00:32:46 2018 +0100
Replace not maintained cssmin with fork from github https://github.com/natxet/CssMin
commit db684f6151rob@bsdfreaks.nl >
Date: Thu Jan 18 00:23:24 2018 +0100
Update Smarty to 3.1.3
commit 6a3f8f3e76rob@bsdfreaks.nl >
Date: Wed Jan 17 23:40:27 2018 +0100
Initial work to support PHP 7.2
2018-07-12 10:58:26 +02:00
38f6435e37
(cp d1c2e71) fixes #891 , use HTTPS to piwigo.org in page footer
2018-07-11 15:13:28 +02:00
49a1c7fcaa
(cp 7bf992b) fixes #890 , use https instead of http to load images from piwigo.org
2018-07-11 15:08:34 +02:00
62386eef8d
(cp 86c3473) fixes #877 , avoid conflict with custom user table
2018-07-11 11:50:55 +02:00
18e4b86199
(cp 69345c0) fixes #847 , CVE-2018-5692 protect a few user input variables
2018-07-11 11:24:59 +02:00
0ec289769e
(cp 23fa4c1) fixes #871 , CVE-2018-7722 strip tags on methods pwg.categories.add, pwg.categories.setInfo, pwg.images.setInfo
...
Adding pwg_token would be a better solution but would break remote applications (like the iOS app)
2018-07-06 18:31:58 +02:00
55a9754b11
(cp bef0901) fixes #872 , CVE-2018-7724, protect photo admin page from CSRF
2018-07-06 14:39:50 +02:00
c6d6a5ec0a
(cp 06f4252) fixes #258 , batch manager, check the session category still exists
2018-07-06 11:52:52 +02:00
90243ddb0c
(cp 65ac272) Include pwg_token in user list POST request ( Fixes #748 ) ( #866 )
...
* user list: set pwg_token in POST data to user_list_backend.php
The POST data for the user data table request was empty, which could
cause user data retrieval to error out with HTTP 403 due to missing
the authentication token.
* user_list_backend: fix uninitialized variables
If iSortCol_0, sEcho, or sSearch are unset in the HTTP request, it
could cause variables to be uninitialized, potentially causing error
messages to be included in the HTTP response. These error messages,
if present, can prevent the JSON response from being parsed.
* user list: delete unnecessary quotes
Javascript object key names don't generally need to be quoted.
Remove some quotes that were introduced by a recent change that added
a body to the AJAX POST request to retrieve the user list.
2018-07-06 10:52:47 +02:00
49c1d7e004
(cp 7e41e21) Fix issue #844
2018-07-05 15:53:43 +02:00
4f42239aec
(cp 7511881) fixes #887 , $selection is never set on PHP side, no need to use it in template
...
... and it makes the template compatible with PHP 7.2
2018-07-04 17:12:52 +02:00
ebdacd3e83
fixes #853 , less strict check on user input "selectAction" for tag manager
...
... for compatibility with plugin Colored Tags (typetags) and maybe other in the future.
2018-03-23 10:01:06 +01:00
a38ff3bac0
(cp 8a57d77) fixes #596 , compatibility with PHP 7.1
2018-02-27 12:02:45 +01:00
f4be39d658
next version is 2.9.3
2018-02-22 15:04:28 +01:00
f178869f9b
cherry-pick 27 commits from translation
...
* 2c45ca53b0f56e60b44781c02e03633cd564e65e00fc4531a31f8a126e36be5457a93d4e5ee3fc15ff12341e1b05c758f610a685c739a9209cab06190934a4b1cd6cdd4a0f4ecd3a137b44fda24991c9692f515ae211140577a25e356c3eb2c2c443
2018-02-22 14:51:45 +01:00
aee8fa1f8d
(cp 02275fe) fixes #839 , check input parameters on admin/tags.php
2018-02-22 14:18:59 +01:00
6d2f2a1d0d
(cp 63932b9) fixes #735 , add API method pwg.users.getAuthKey
2018-02-22 14:17:44 +01:00
072ae305f8
(cp b6d61a7) fixes #838 , tells PHP how many photos were deleted in Batch Manager
2018-02-08 13:05:11 +01:00
91ef7909a5
(cp 9671454) fixes #826 , check input parameter order_by in configuration
2017-12-18 17:09:56 +01:00
f7c8e0a947
(cp 9028c75) fixes #825 , check user input on Batch Manager, unit mode, to prevent SQL injection
2017-12-18 16:45:56 +01:00
c3b4c6f7f0
(cp 77f02bf) fixes #822 , add token on configuration page to prevent CSRF
2017-12-18 15:16:13 +01:00
53d62e0c14
(cp 9e29db0) fixes #824 more generic code to get current script directory (working both on Linux and MacOSX)
2017-12-18 14:30:10 +01:00
33a03e9afb
(cp 1da9d6a) fixes #823 add input user check to avoid SQLi on users list
2017-12-18 14:06:28 +01:00
045d98ab00
cherry-pick 11 commits from translation
...
* daccbf5b12c138b64c5f12e5fad86aaf8509ffefd08480afa84c9eaf00b747cafddae50cb7861167a462
2017-10-05 18:06:41 +02:00
2767587056
next version is 2.9.2
2017-10-05 16:00:42 +02:00
27de5c0345
(cp ee4aae7) Fixes #767 - Return a 500 HTTP status when a file upload error occurs. ( #768 )
2017-10-05 15:40:21 +02:00
f57c81babd
(cp 9775889) fixes #789 , add url param hide_redirect_error
2017-10-04 10:37:21 +02:00
8d6fee190d
(cp 164b595) fixes #777 WS categories getImages, TotalCount for correct pagination builder
2017-09-30 17:09:03 +02:00
9cd6b7c90d
(cp a335d70) fixes 787, check URL parameter "action" to avoid error messages
2017-09-28 15:04:02 +02:00
6530720d51
(cp 943ab9d) Issue/747 php notice when changing admin page theme ( #774 )
...
* Fixes#747 Only variables should be passed by reference
* Fixes syntax
2017-09-19 11:25:53 +02:00
e1817474ea
(cp c9ab538) Fixs issue #760 date_creation not refreshed when changing it from picture_modify ( #763 )
2017-09-18 17:50:23 +02:00
75e1be46b1
(cp b585f5b) Removing Deprecated error message for PHP 7 ( #764 )
2017-09-18 17:22:43 +02:00
410edc8de1
(cp 011b12c) fixes #751 , missing DROP statements at install
2017-09-05 13:24:49 +02:00
62afa8b1ff
(cp 08cce48) Fixes #755 Never thow '0000-00-00 00:00:00' as value but Null instead
...
only for exif ; iptc is ok
2017-09-05 13:22:01 +02:00
183de75e7e
(cp 2c07301) Fixing issue #731 ( #754 )
...
* Fixing issue #731 , if NB_PHOTOS is upper than 1000 display it
* Fixs issue #731 now number of picture between 1000 and 1999 are displayed
* Fixs formatting
2017-09-04 14:27:59 +02:00
0f2c9a805f
(cp 028c4ee) fixes #739 , make sure keys are reset in the "uniquified" array
...
... for a regular search, when different set of photos matches the search.
2017-07-25 18:28:23 +02:00
524ae64be4
(cp a3cf80c) fixes #732 , avoid conflict with PHP function "transliterate"
2017-07-13 11:30:54 +02:00
fb4006bda6
(cp f520f82) fixes #726 , add trigger in create_virtual_category
2017-07-03 15:56:54 +02:00
5c3e24c02f
(cp 30e8bab) pwg_token left for cat_options pages
...
solving https://github.com/Piwigo/Piwigo/issues/721
2017-07-03 15:12:36 +02:00
a9645181c6
(cp 3dd6812) check input parameter for cat_options pages
...
solving https://github.com/Piwigo/Piwigo/issues/724
2017-07-03 15:12:20 +02:00
7f8bff3d95
(cp 03a8329) adding pwg_token on permalink & cat_options
...
and therefor solving issue:721
2017-07-03 15:12:02 +02:00
be9ec05596
(cp 4d031c9) fixes #725 , protect pwg.images.setInfo from HTML
2017-07-03 13:55:19 +02:00
0dc3810f0d
(cp d542de7) fixes #713 , use the default language to send email
...
and not only to build the email body message
2017-06-21 11:46:07 +02:00
plegall