Commit graph

83 commits

Author SHA1 Message Date
flop25
bfae35d070 bug:2221
git-svn-id: http://piwigo.org/svn/trunk@9679 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-03-14 17:14:01 +00:00
plegall
6db359c622 Happy new year 2011
Change "Piwigo - a PHP based picture gallery" into "Piwigo - a PHP based photo gallery"


git-svn-id: http://piwigo.org/svn/trunk@8728 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-01-18 00:02:52 +00:00
rvelices
8a14faf0e1 feature 2102 : rename item/image/picture to photo (public side)
git-svn-id: http://piwigo.org/svn/trunk@8711 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-01-16 20:43:56 +00:00
rvelices
d8ec9b9fdd feature 1915: add protection on user registration against robots
git-svn-id: http://piwigo.org/svn/trunk@7495 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-10-30 11:32:11 +00:00
plegall
7aae3dd985 merge r7487 from branch 2.1 to trunk
bug 1973 fixed: aboid SQL syntax error if the category id given in the URL is
unknown.



git-svn-id: http://piwigo.org/svn/trunk@7488 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-10-29 22:34:41 +00:00
plegall
9ab609438f merge r6909 from branch 2.1 to trunk
bug 1850 fixed: strong check of $_GET['cat']



git-svn-id: http://piwigo.org/svn/trunk@6910 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-09-13 21:10:51 +00:00
nikrou
fb1d1c43d6 Bug 1735 fixed : amend commit 6596
Need to add permissions filter to retrieve categories

git-svn-id: http://piwigo.org/svn/trunk@6601 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-06-24 20:22:21 +00:00
nikrou
e1ecc62b83 Bug 1735 fixed : Comment page is not PostgreSQL compatible
Fixed by adding all fields except category_id in group by clause
category_id is retrieved later in an another query.

Fixed also problem of FROM_UNIXTIME function not POstgreSQL compatible.

git-svn-id: http://piwigo.org/svn/trunk@6596 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-06-24 18:36:24 +00:00
rvelices
55e78ab8d2 fix bug (a comment could be displayed several times in the comments liat)
git-svn-id: http://piwigo.org/svn/trunk@5199 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-20 06:11:21 +00:00
plegall
86ad1d5b49 increase copyright year to 2010
git-svn-id: http://piwigo.org/svn/trunk@5196 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-19 22:37:10 +00:00
plegall
c695136e4d bug 1328: backport the pwg_token on trunk
bug 1329: backport the check_input_parameter on trunk

feature 1026: add pwg_token feature for edit/delete comment. Heavy refactoring
on this feature to make the code simpler and easier to maintain (I hope).

git-svn-id: http://piwigo.org/svn/trunk@5195 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-19 22:25:39 +00:00
nikrou
c96097529e Feature_1255 :
- single quotes in queries
- start using $conf['dblayer']

git-svn-id: http://piwigo.org/svn/trunk@4385 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-29 12:35:19 +00:00
nikrou
13ea9d50e3 Feature 1255: modification in sql queries
- manage random function
    - manage regex syntax
    - manage quote (single instead of double)
    - manage interval

git-svn-id: http://piwigo.org/svn/trunk@4367 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-25 19:02:57 +00:00
nikrou
ce3fe0d460 Feature 1255 : limit params in sql queries were in wrong order (LIMIT count OFFSET offset)
git-svn-id: http://piwigo.org/svn/trunk@4334 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-21 19:52:50 +00:00
nikrou
f0d0a0952c Feature 1255 : improve sql
Replace in queries LIMIT N,M by LIMIT N OFFSET M

git-svn-id: http://piwigo.org/svn/trunk@4331 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-21 12:15:22 +00:00
nikrou
924dd262ec Feature 1244 resolved
Replace all mysql functions in core code by ones independant of database engine

Fix small php code synxtax : hash must be accessed with [ ] and not { }.

git-svn-id: http://piwigo.org/svn/trunk@4325 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-20 14:17:04 +00:00
nikrou
9e6a254290 bug 1220 : fix regression in display when search by author or by keyword contains quote.
git-svn-id: http://piwigo.org/svn/trunk@4182 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-04 20:50:17 +00:00
nikrou
d7f6cbb5fd bug 1220 : fix XSS vulnerability.
filter on since parameter (is_numeric)
use only htmlspecialchars to filter vars to display
revert rev:3600 add left join on users table

Todo : use only left join on users table when a search by author is made

git-svn-id: http://piwigo.org/svn/trunk@4139 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-10-28 20:34:29 +00:00
rvelices
e618e8b944 - fix php warning from comment_list.tpl
- author name is saved always in #comments (even for registered users) so that
  - sql queries are simpler on the comments page (one less table in a big join)
  - when a user is deleted, we can keep the username in the #comments (there might be still a bug that author_id is not updated when a user is deleted)

git-svn-id: http://piwigo.org/svn/trunk@3600 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-16 05:20:34 +00:00
vdigital
b102907b51 merge r3519 from branch 2.0 to trunk
Minor: prevent for non numeric values (except all)




git-svn-id: http://piwigo.org/svn/trunk@3520 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-04 20:45:14 +00:00
rvelices
ae6ab9966b - remove unnecessary addslashes in comments.cpp
- in template use modifier |@default instead of |default (generated code is faster because we indicate that the input is scalar and not an array)

git-svn-id: http://piwigo.org/svn/trunk@3487 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-01 20:43:20 +00:00
nikrou
ed7f7a574e Fix two problem with Feature 1026 :
use of $conf['user_fields']['username'] and $conf['user_fields']['id'] instead of username and id
escape comment content before editing it.

git-svn-id: http://piwigo.org/svn/trunk@3452 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-06-24 19:00:40 +00:00
nikrou
64c872a83e Feature 1026 step 2 :
add author_id column so that guest cannot modify old users comments

git-svn-id: http://piwigo.org/svn/trunk@3450 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-06-23 21:18:16 +00:00
nikrou
9245227e70 Feature 1026 : Modify / delete comments for users
+ update config table content
 + minor modification of Sylvia theme
 + need refactoring

git-svn-id: http://piwigo.org/svn/trunk@3445 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-06-23 13:44:58 +00:00
nikrou
0ace0450a6 remove duplicate retrieved field
git-svn-id: http://piwigo.org/svn/trunk@3405 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-06-10 19:06:16 +00:00
patdenice
254aee2695 Create navigation_bar.tpl file.
Move create_navigation_bar function from functions_html.inc.php to functions.inc.php.

git-svn-id: http://piwigo.org/svn/trunk@3172 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-03-05 21:08:04 +00:00
rvelices
e8dac75c40 - removed second parameter $type from function format_date
git-svn-id: http://piwigo.org/svn/trunk@3122 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-02-04 02:41:03 +00:00
plegall
1b711ad236 Administration: happy new year 2009, all PHP headers updated.
git-svn-id: http://piwigo.org/svn/trunk@3049 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-01-04 23:28:36 +00:00
rvelices
ebc3c2e2f7 merge 2755 and 2756 from branch 2.0 to trunk
- 2755 fix vulnerability http://www.milw0rm.com/exploits/6755
- 2756 security paranoia: protect session/remember me cookies from XSS attacks (works only if php>=5.2 and with IE/FF maybe others)


git-svn-id: http://piwigo.org/svn/trunk@2757 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-16 00:38:26 +00:00
plegall
524011bfa6 Bug fixed: as rvelices notified me by email, my header replacement script was
bugged (r2297 was repeating new and old header).

By the way, I've also removed the replacement keywords. We were using them
because it was a common usage with CVS but it is advised not to use them with
Subversion. Personnaly, it is a problem when I search differences between 2
Piwigo installations outside Subversion.


git-svn-id: http://piwigo.org/svn/trunk@2299 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-04-05 14:14:07 +00:00
plegall
3f235497f3 Modification: new header on PHP files, PhpWebGallery renamed Piwigo.
git-svn-id: http://piwigo.org/svn/trunk@2297 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-04-04 22:57:23 +00:00
rvelices
bf1f7c4aec - security fix (profile)
- les langues a la hache
- fix some copy/paste errors

git-svn-id: http://piwigo.org/svn/trunk@2268 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-03-08 12:38:09 +00:00
rvelices
c739232049 - migrate many templates to smarty
git-svn-id: http://piwigo.org/svn/trunk@2223 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-02-28 02:41:48 +00:00
rvelices
36e0e6e8f1 - changed htmlentities to htmlspecialchars in comments.php (utf-8 issue)
- web service explorer in utf-8
- removed warning in function load_language
- feature: show_queries also shows number of selected rows or number of affected rows

git-svn-id: http://piwigo.org/svn/trunk@2134 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-10-11 00:10:41 +00:00
rvelices
a3b23df6ef - admin, comments and tags pages include page_header later in the code (as in picture and index) allowing plugins to change the header until the very end
- fix in admin.php : picture_modify requires cache invalidation
- fix in site_update.php : some echo func calls changed to $template->output .= ...
- upgraded prototype.js to latest version 1.5.1.1

git-svn-id: http://piwigo.org/svn/trunk@2107 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-09-27 22:46:17 +00:00
rub
3fbc92f61e Resolved issue 0000702: Code Injection with picture comment
git-svn-id: http://piwigo.org/svn/trunk@2030 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-06-07 18:50:25 +00:00
rvelices
88d47f2332 keyword search was not working comments.php
git-svn-id: http://piwigo.org/svn/trunk@2012 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-05-15 03:38:48 +00:00
rvelices
ea56d7b2ac feature 657: permalinks for categories
git-svn-id: http://piwigo.org/svn/trunk@1866 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-02-28 03:07:12 +00:00
rvelices
47512ce6a6 - refactoring page['category'] before 1.7 release
page['category'] is not an id anymore, but an associative array of category info
all of page['cat_xxx'] or page['uppercats'] merged into one
simplifies calls to make_index_url
give plugins a clean start for page variables for version 1.7

git-svn-id: http://piwigo.org/svn/trunk@1861 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-02-27 01:56:16 +00:00
rvelices
cea58b64ee - user comments are not saved in the database with htmlspecialchars anymore
- web service: added the possibility to enter a user comment using the service...
- new comment functions from picture_comment.inc.php

git-svn-id: http://piwigo.org/svn/trunk@1849 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-02-22 01:12:32 +00:00
rvelices
711ebcbf2c - thumbnails creation for all local sites (not only site id 1)
- urls for images in notification (rss & mail) is now correct
- removed "Recent pictures" from title in when the flat view is in effect
- removed unnecessary class="" from comments.tpl
- english language correction
- removed unused web service files
- set rating star button left & right margin to 0 (javascript)
- admin menu - put site manager and synchronize together

git-svn-id: http://piwigo.org/svn/trunk@1814 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-02-14 00:36:34 +00:00
rvelices
a512c69225 plugins improvements: allow plugins to fail the installation/activation
comments.php improvements:
  - no more double sql escaping on author & keyword (once in common.inc.php and
once in comments.php)
  - now can search comment content on all special char ( ', ", <, >, & )
  - author & keyword are correctly redisplayed in browser when they are MySql
escaped


git-svn-id: http://piwigo.org/svn/trunk@1716 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-01-11 23:15:26 +00:00
rub
60bcda3564 Fixed: HTML vulnerability (Cross Site Scripting)
git-svn-id: http://piwigo.org/svn/trunk@1696 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-01-03 23:28:09 +00:00
rub
cab8f98c4a Feature Issue ID 0000601: Filter all public pages with only recent elements
It's a finalized version.
Obsolete code of draft are removed.

You can filter categories and images with recent date period on your screen selection.
In the future, filter could be easy done on other type data (plugin?)

You can flat categories and sub-categories with a recent date period of your choice.

Next, perhaps, a panel to choice recent date for the 2 features.

On draft, there have problem with MySql 5, be careful!

Css problem not resolved:
  - Menu "Categories" is bad centered
  - Icon on dark too on the top


git-svn-id: http://piwigo.org/svn/trunk@1677 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-12-21 21:38:20 +00:00
vdigital
906d9bd795 Undo 597: Unvalidated comments
git-svn-id: http://piwigo.org/svn/trunk@1647 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-12-10 11:33:54 +00:00
vdigital
51b13edc9d 0000597: Unvalidated comments are displayed on public side
Just add a comment filter to avoid showing unvalidated comment to non admin people.

git-svn-id: http://piwigo.org/svn/trunk@1646 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-12-09 08:57:43 +00:00
rvelices
5de8aeafad feature 440: send mail to admin when comment is entered
git-svn-id: http://piwigo.org/svn/trunk@1617 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-11-22 04:41:25 +00:00
rvelices
e5e776a263 - comments.php improvements:
- unvalidated comments are shown only for administrators
  - added delete/validate icons for admins
  - removed some unused code
- display of comment content performed through an event
- replace some get_thumbnail_src with get_thumbnail_url

git-svn-id: http://piwigo.org/svn/trunk@1598 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-11-08 04:28:30 +00:00
rvelices
939cfe5e4b comments.php: cleanup url (t=1 in the url for an unknown reason) and image
urls work now with all url styles

git-svn-id: http://piwigo.org/svn/trunk@1563 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-10-17 02:03:14 +00:00
nikrou
bc1f5319b1 fix bug 518: anyone can delete or validate a comment
comment_id must be int: use of intval function to use it in the query.

svn merge -r1534:1535 from branch 1.6 into trunk


git-svn-id: http://piwigo.org/svn/trunk@1536 68402e56-0260-453c-a942-63ccdbb3a9ee
2006-08-14 20:57:50 +00:00