Commit graph

167 commits

Author SHA1 Message Date
rvelices
86bc4d1143 - simplify calculation of auto login key (no need to concatenate 2 hashes)
git-svn-id: http://piwigo.org/svn/trunk@11826 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-07-25 17:56:47 +00:00
rvelices
5869dada4c - removed admin never used function cat_admin_access
- removed obsolete known_script template block
- added a warning on usage of is_adviser function

git-svn-id: http://piwigo.org/svn/trunk@11753 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-07-15 18:56:20 +00:00
plegall
aefd941d75 merge r11736 from branch 2.2 to trunk
bug 2338 fixed: force purge on sessions table (each time a user gets connected)


git-svn-id: http://piwigo.org/svn/trunk@11737 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-07-13 20:16:50 +00:00
plegall
a9ee6d4944 merge r11355 from branch 2.2 to trunk
bug 2340 fixed: external authentication was broken, error in SQL syntax and wrong PHP variable name was used.



git-svn-id: http://piwigo.org/svn/trunk@11356 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-06-14 08:25:45 +00:00
flop25
0a0bad781b feature:1835
better managment if $conf['insensitive_case_logon'] is true, for identification

git-svn-id: http://piwigo.org/svn/trunk@10860 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-05-12 14:26:21 +00:00
mistic100
76194270be bug:2224 one parameter for change thumnails number (needs some translations)
git-svn-id: http://piwigo.org/svn/trunk@10198 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-04-09 14:52:15 +00:00
patdenice
1ab138e731 bug:2234
HTML characters are allowed in username

git-svn-id: http://piwigo.org/svn/trunk@9923 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-03-29 19:30:28 +00:00
plegall
380d9ccc21 bug 1684 fixed: the fix for bug:1683 was an "automatic repair" but it adds
useless code. We couldn't create a migration task on the stable branch, but
on trunk this is possible.


git-svn-id: http://piwigo.org/svn/trunk@9074 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-02-03 11:28:34 +00:00
rvelices
13b9118f41 - fix icon display on index page (calendar by post date)
- remove unnecessary include_once
- mysql functions simplification

git-svn-id: http://piwigo.org/svn/trunk@8844 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-01-22 21:12:48 +00:00
plegall
6db359c622 Happy new year 2011
Change "Piwigo - a PHP based picture gallery" into "Piwigo - a PHP based photo gallery"


git-svn-id: http://piwigo.org/svn/trunk@8728 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-01-18 00:02:52 +00:00
rvelices
387354816b lang remove 'Mail address' - use existing 'Email address'
lang remove unused 'return to homepage'
lang change key 'a user use already this mail address' to 'this email address is already in use'

git-svn-id: http://piwigo.org/svn/trunk@8635 68402e56-0260-453c-a942-63ccdbb3a9ee
2011-01-12 21:03:00 +00:00
patdenice
731f8888a4 feature 2060: Remove adviser mode.
First commit: only php files.

git-svn-id: http://piwigo.org/svn/trunk@8126 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-12-14 13:47:24 +00:00
nikrou
c1414297fb Bug 1760 fixed : Avoid session fixation
After connection, session id is changed using session_regenerate_id
but without removing old session. Passing param true makes the job.

git-svn-id: http://piwigo.org/svn/trunk@6660 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-07-05 19:34:15 +00:00
nikrou
dd955526ae Bug 1754 fixed : The keyword AS is mandatory for alias in PostgreSQL queries
git-svn-id: http://piwigo.org/svn/trunk@6652 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-07-03 12:12:25 +00:00
nikrou
175e9a110d Fix bug 1722 : PosgtreSQL wants all fields in select to be in Group by clause
or agregate function
Fix issue for lambda function (incorrect number of params)

git-svn-id: http://piwigo.org/svn/trunk@6510 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-06-09 20:25:03 +00:00
plegall
d3fc7fd446 merge r6321 from branch 2.1 to trunk
bug 1682: r6312 was producing a MySQL error (depending on the MySQL server
version) because a count() implies a group by.

This code change was checked against MySQL 5.0.75, MySQL 5.0.51 (where the
error occured) and SQLite 3.6.22.


git-svn-id: http://piwigo.org/svn/trunk@6322 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-05-24 11:14:54 +00:00
plegall
3181dded77 merge r6312 from branch 2.1 to trunk
bug 1684 fixed: the test to check availability of the user_infos line was
wrong. I had changed the old db_num_rows > 0 because it was not working with
SQLite. As suggested by nicolas, let's use a simpler trick "count(1)" in the
query itself, this way it should work with any database engine.

I've also removed the while (true) (ugly infinite loop, with a condition for
exit) that was producing an infinite loop for Piwigo installations with 2.0
database model and 2.1 code (before launching upgrade.php)


git-svn-id: http://piwigo.org/svn/trunk@6315 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-05-23 23:43:43 +00:00
plegall
9bef83abe8 merge r6311 from branch 2.1 to trunk
bug 1683 fixed: as soon as an admin modifies the admin>conf>options>guest settings, registration is broken. This is because user_infos.theme/language are emptied (while they should not).

I have also added an "automatic repair" piece of code in get_default_user_info function. This piece of code should be removed for 2.2 with the appropriate migration task.


git-svn-id: http://piwigo.org/svn/trunk@6314 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-05-23 23:42:03 +00:00
plegall
48ab333212 bug 1648 fixed: add the pwg_db_check_version functions for pdo-sqlite, sqlite
and pgsql, also make the $pwg_db_link global in the install_db_connect function
so that it can be used in SQLite functions.

bug fixed: with pdo-sqlite, pwg_db_num_rows always returns 0, so when
initializing user data, it tries to insert the same row twice.

git-svn-id: http://piwigo.org/svn/trunk@6090 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-05-07 00:34:56 +00:00
plegall
73db66afa5 feature 1630: upgrade to Piwigo 2.1 :-)
bug 1604: only activate core themes not all themes.

git-svn-id: http://piwigo.org/svn/trunk@5982 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-04-28 14:28:05 +00:00
rub
a6c771547d Add function is_webmaster (like is_admin function)
Add on ignore list the directory local/personal

git-svn-id: http://piwigo.org/svn/trunk@5272 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-23 05:56:50 +00:00
plegall
c0879165c6 bug fixed: if the theme for guest is empty (I don't know how this could be,
but it has been reported), the fallback on constant PHPWG_DEFAULT_TEMPLATE
was not working.

git-svn-id: http://piwigo.org/svn/trunk@5271 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-22 22:22:59 +00:00
plegall
6b3dc4ede1 feature 1514: improvement, if a user has a theme that is (maybe temporary)
unactive, we fallback on default theme (the real default theme, the one set
for default user)

git-svn-id: http://piwigo.org/svn/trunk@5264 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-22 19:49:14 +00:00
plegall
86ad1d5b49 increase copyright year to 2010
git-svn-id: http://piwigo.org/svn/trunk@5196 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-19 22:37:10 +00:00
plegall
c695136e4d bug 1328: backport the pwg_token on trunk
bug 1329: backport the check_input_parameter on trunk

feature 1026: add pwg_token feature for edit/delete comment. Heavy refactoring
on this feature to make the code simpler and easier to maintain (I hope).

git-svn-id: http://piwigo.org/svn/trunk@5195 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-19 22:25:39 +00:00
plegall
14778ce673 feature 1502: based on Dotclear model, P@t has reorganized the way Piwigo
manages template/theme in a simpler "theme only level" architecture. It
supports multiple level inheritance.

git-svn-id: http://piwigo.org/svn/trunk@5123 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-13 00:00:52 +00:00
Eric
97a8ddcfe7 Renaming $conf['no_case_sensitive_for_login'] to $conf['insensitive_case_logon'] according with VDigital's proposal
git-svn-id: http://piwigo.org/svn/trunk@5060 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-06 15:07:08 +00:00
nikrou
2e890e9597 Feature 1451 : localization with gettext
Use php-gettext (developpement version rev43, because of php5.3) as fallback
Use native language (english) instead of key for translation
Keep directory en_UK for english customization
Need some refactoring for plurals

Todo : managing plugins in the same way

git-svn-id: http://piwigo.org/svn/trunk@5021 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-02 14:54:22 +00:00
Eric
1b601a37de Feature 0000796 fixed : Strengthen login handling
git-svn-id: http://piwigo.org/svn/trunk@4429 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-12-05 19:55:21 +00:00
nikrou
c96097529e Feature_1255 :
- single quotes in queries
- start using $conf['dblayer']

git-svn-id: http://piwigo.org/svn/trunk@4385 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-29 12:35:19 +00:00
nikrou
13ea9d50e3 Feature 1255: modification in sql queries
- manage random function
    - manage regex syntax
    - manage quote (single instead of double)
    - manage interval

git-svn-id: http://piwigo.org/svn/trunk@4367 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-25 19:02:57 +00:00
nikrou
924dd262ec Feature 1244 resolved
Replace all mysql functions in core code by ones independant of database engine

Fix small php code synxtax : hash must be accessed with [ ] and not { }.

git-svn-id: http://piwigo.org/svn/trunk@4325 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-20 14:17:04 +00:00
Eric
1235bab527 Escape all login and username characters in database
Display correctly usernames

(I hope not to have made mistakes)

git-svn-id: http://piwigo.org/svn/trunk@4304 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-18 20:07:20 +00:00
nikrou
1040cae210 Feature 1241 resolved. replace mysql_fetch_array by mysql_fetch_assoc for small php code improvements
git-svn-id: http://piwigo.org/svn/trunk@4265 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-15 12:26:09 +00:00
Eric
bac7567b5c PHP 5.3 compatibility - Deprecated functions were replace as follows :
ereg() -> preg_match()
ereg_replace() -> preg_replace()
eregi() -> preg_match() with the 'i' modifier
eregi_replace() -> preg_replace() with the 'i' modifier
set_magic_quotes_runtime() -> No more usefull. Fixed it by adding "@" prefix.

git-svn-id: http://piwigo.org/svn/trunk@3747 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-08-17 16:21:09 +00:00
rvelices
537b8430a2 - bug fix (use uasort for computed categories instead of usort) - I think this is an old bug and somehow it worked before)
git-svn-id: http://piwigo.org/svn/trunk@3642 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-20 05:36:15 +00:00
rvelices
a8d561b0bb correct bug in commit r3622 ( feature 1053 )
git-svn-id: http://piwigo.org/svn/trunk@3640 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-20 05:18:53 +00:00
rvelices
4cbf56f768 feature 1053: hide categories that contain no photo due to privacy level
git-svn-id: http://piwigo.org/svn/trunk@3622 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-18 10:30:42 +00:00
nikrou
64c872a83e Feature 1026 step 2 :
add author_id column so that guest cannot modify old users comments

git-svn-id: http://piwigo.org/svn/trunk@3450 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-06-23 21:18:16 +00:00
nikrou
9245227e70 Feature 1026 : Modify / delete comments for users
+ update config table content
 + minor modification of Sylvia theme
 + need refactoring

git-svn-id: http://piwigo.org/svn/trunk@3445 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-06-23 13:44:58 +00:00
rvelices
6c92ade174 Last (I hope) paranoic optims ...
- move get_uysername and get_groupname from public to admin/functions.inc.php
- optim in index.php
- tags.tpl does not need smarty modifier included
- move func get_comment_post_key from functions_comment to functions (avoid extra inclusion every time on picture page)

git-svn-id: http://piwigo.org/svn/trunk@3145 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-02-14 02:24:10 +00:00
rvelices
e34c68cb89 - embellish_url compacts now ..
- some trigger improvements (render_category_description)
- improved perf of duplicate_xxx_url ( rewrote func params_for_duplication and remove some vars from $page )

git-svn-id: http://piwigo.org/svn/trunk@3126 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-02-05 03:03:30 +00:00
plegall
1b711ad236 Administration: happy new year 2009, all PHP headers updated.
git-svn-id: http://piwigo.org/svn/trunk@3049 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-01-04 23:28:36 +00:00
rvelices
ad2941220f merge -c2823 from branch 2.0 to trunk
- removed some unused constants from constants.php
- removed some unused css rules
- removed unused code

git-svn-id: http://piwigo.org/svn/trunk@2824 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-11-04 01:47:48 +00:00
rvelices
ebc3c2e2f7 merge 2755 and 2756 from branch 2.0 to trunk
- 2755 fix vulnerability http://www.milw0rm.com/exploits/6755
- 2756 security paranoia: protect session/remember me cookies from XSS attacks (works only if php>=5.2 and with IE/FF maybe others)


git-svn-id: http://piwigo.org/svn/trunk@2757 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-16 00:38:26 +00:00
patdenice
eb667c7711 - change mysql_escape_string function (deprecated) by mysql_real_escape_string.
- Correction on install.tpl (link color).

git-svn-id: http://piwigo.org/svn/trunk@2752 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-15 20:56:23 +00:00
rvelices
dda9f5db66 - removed #debug css rule (why would we need that in default-layout?)
- order by rank is not available in calendar/chronology mode
- small non-functional change in functions_search.inc.php (handy for plugin)
- unused variables/smaller code/unused params in func call

git-svn-id: http://piwigo.org/svn/trunk@2572 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-23 01:04:41 +00:00
nikrou
eef8aa8838 $_SERVER["HTTP_ACCEPT_LANGUAGE"] could be empty so test it.
git-svn-id: http://piwigo.org/svn/trunk@2537 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-14 19:40:18 +00:00
nikrou
fae1a63124 fix too strict regex for email
git-svn-id: http://piwigo.org/svn/trunk@2507 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-07 11:05:15 +00:00
rvelices
4322abb39f - add #user_cache.cache_update_time - useful for plugins or the filter when it is not possible/desirable to cache/calculate data specific to the user when pwg core does it; note that this opens the possibility to implement a data cache (file/shared mem/ etc...) for every user (for very large databases)
git-svn-id: http://piwigo.org/svn/trunk@2448 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-22 10:32:25 +00:00