Commit graph

155 commits

Author SHA1 Message Date
nikrou
6b8e08936c Bug 1760 fixed : Avoid session fixation
After connection, session id is changed using session_regenerate_id
but without removing old session. Passing param true makes the job

Merge from trunk

git-svn-id: http://piwigo.org/svn/branches/2.1@6661 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-07-05 19:35:36 +00:00
nikrou
b83df6be68 Bug 1754 fixed : The keyword AS is mandatory for alias in PostgreSQL queries
Merge from trunk

git-svn-id: http://piwigo.org/svn/branches/2.1@6653 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-07-03 12:16:12 +00:00
nikrou
a59d15b7b6 Fix bug 1722 : PosgtreSQL wants all fields in select to be in Group by clause
or agregate function
Fix issue for lambda function (incorrect number of params)

merge from trunk.

git-svn-id: http://piwigo.org/svn/branches/2.1@6511 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-06-09 20:26:47 +00:00
plegall
128e22b612 bug 1682: r6312 was producing a MySQL error (depending on the MySQL server
version) because a count() implies a group by.

This code change was checked against MySQL 5.0.75, MySQL 5.0.51 (where the
error occured) and SQLite 3.6.22.

git-svn-id: http://piwigo.org/svn/branches/2.1@6321 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-05-24 11:12:23 +00:00
plegall
b7ed5e6af4 bug 1684 fixed: the test to check availability of the user_infos line was
wrong. I had changed the old db_num_rows > 0 because it was not working with
SQLite. As suggested by nicolas, let's use a simpler trick "count(1)" in the
query itself, this way it should work with any database engine.

I've also removed the while (true) (ugly infinite loop, with a condition for
exit) that was producing an infinite loop for Piwigo installations with 2.0
database model and 2.1 code (before launching upgrade.php)

git-svn-id: http://piwigo.org/svn/branches/2.1@6312 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-05-23 23:31:58 +00:00
plegall
0786ff3b79 bug 1683 fixed: as soon as an admin modifies the admin>conf>options>guest settings, registration is broken. This is because user_infos.theme/language are emptied (while they should not).
I have also added an "automatic repair" piece of code in get_default_user_info function. This piece of code should be removed for 2.2 with the appropriate migration task.

git-svn-id: http://piwigo.org/svn/branches/2.1@6311 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-05-23 23:18:59 +00:00
plegall
48ab333212 bug 1648 fixed: add the pwg_db_check_version functions for pdo-sqlite, sqlite
and pgsql, also make the $pwg_db_link global in the install_db_connect function
so that it can be used in SQLite functions.

bug fixed: with pdo-sqlite, pwg_db_num_rows always returns 0, so when
initializing user data, it tries to insert the same row twice.

git-svn-id: http://piwigo.org/svn/trunk@6090 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-05-07 00:34:56 +00:00
plegall
73db66afa5 feature 1630: upgrade to Piwigo 2.1 :-)
bug 1604: only activate core themes not all themes.

git-svn-id: http://piwigo.org/svn/trunk@5982 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-04-28 14:28:05 +00:00
rub
a6c771547d Add function is_webmaster (like is_admin function)
Add on ignore list the directory local/personal

git-svn-id: http://piwigo.org/svn/trunk@5272 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-23 05:56:50 +00:00
plegall
c0879165c6 bug fixed: if the theme for guest is empty (I don't know how this could be,
but it has been reported), the fallback on constant PHPWG_DEFAULT_TEMPLATE
was not working.

git-svn-id: http://piwigo.org/svn/trunk@5271 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-22 22:22:59 +00:00
plegall
6b3dc4ede1 feature 1514: improvement, if a user has a theme that is (maybe temporary)
unactive, we fallback on default theme (the real default theme, the one set
for default user)

git-svn-id: http://piwigo.org/svn/trunk@5264 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-22 19:49:14 +00:00
plegall
86ad1d5b49 increase copyright year to 2010
git-svn-id: http://piwigo.org/svn/trunk@5196 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-19 22:37:10 +00:00
plegall
c695136e4d bug 1328: backport the pwg_token on trunk
bug 1329: backport the check_input_parameter on trunk

feature 1026: add pwg_token feature for edit/delete comment. Heavy refactoring
on this feature to make the code simpler and easier to maintain (I hope).

git-svn-id: http://piwigo.org/svn/trunk@5195 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-19 22:25:39 +00:00
plegall
14778ce673 feature 1502: based on Dotclear model, P@t has reorganized the way Piwigo
manages template/theme in a simpler "theme only level" architecture. It
supports multiple level inheritance.

git-svn-id: http://piwigo.org/svn/trunk@5123 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-13 00:00:52 +00:00
Eric
97a8ddcfe7 Renaming $conf['no_case_sensitive_for_login'] to $conf['insensitive_case_logon'] according with VDigital's proposal
git-svn-id: http://piwigo.org/svn/trunk@5060 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-06 15:07:08 +00:00
nikrou
2e890e9597 Feature 1451 : localization with gettext
Use php-gettext (developpement version rev43, because of php5.3) as fallback
Use native language (english) instead of key for translation
Keep directory en_UK for english customization
Need some refactoring for plurals

Todo : managing plugins in the same way

git-svn-id: http://piwigo.org/svn/trunk@5021 68402e56-0260-453c-a942-63ccdbb3a9ee
2010-03-02 14:54:22 +00:00
Eric
1b601a37de Feature 0000796 fixed : Strengthen login handling
git-svn-id: http://piwigo.org/svn/trunk@4429 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-12-05 19:55:21 +00:00
nikrou
c96097529e Feature_1255 :
- single quotes in queries
- start using $conf['dblayer']

git-svn-id: http://piwigo.org/svn/trunk@4385 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-29 12:35:19 +00:00
nikrou
13ea9d50e3 Feature 1255: modification in sql queries
- manage random function
    - manage regex syntax
    - manage quote (single instead of double)
    - manage interval

git-svn-id: http://piwigo.org/svn/trunk@4367 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-25 19:02:57 +00:00
nikrou
924dd262ec Feature 1244 resolved
Replace all mysql functions in core code by ones independant of database engine

Fix small php code synxtax : hash must be accessed with [ ] and not { }.

git-svn-id: http://piwigo.org/svn/trunk@4325 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-20 14:17:04 +00:00
Eric
1235bab527 Escape all login and username characters in database
Display correctly usernames

(I hope not to have made mistakes)

git-svn-id: http://piwigo.org/svn/trunk@4304 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-18 20:07:20 +00:00
nikrou
1040cae210 Feature 1241 resolved. replace mysql_fetch_array by mysql_fetch_assoc for small php code improvements
git-svn-id: http://piwigo.org/svn/trunk@4265 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-15 12:26:09 +00:00
Eric
bac7567b5c PHP 5.3 compatibility - Deprecated functions were replace as follows :
ereg() -> preg_match()
ereg_replace() -> preg_replace()
eregi() -> preg_match() with the 'i' modifier
eregi_replace() -> preg_replace() with the 'i' modifier
set_magic_quotes_runtime() -> No more usefull. Fixed it by adding "@" prefix.

git-svn-id: http://piwigo.org/svn/trunk@3747 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-08-17 16:21:09 +00:00
rvelices
537b8430a2 - bug fix (use uasort for computed categories instead of usort) - I think this is an old bug and somehow it worked before)
git-svn-id: http://piwigo.org/svn/trunk@3642 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-20 05:36:15 +00:00
rvelices
a8d561b0bb correct bug in commit r3622 ( feature 1053 )
git-svn-id: http://piwigo.org/svn/trunk@3640 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-20 05:18:53 +00:00
rvelices
4cbf56f768 feature 1053: hide categories that contain no photo due to privacy level
git-svn-id: http://piwigo.org/svn/trunk@3622 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-18 10:30:42 +00:00
nikrou
64c872a83e Feature 1026 step 2 :
add author_id column so that guest cannot modify old users comments

git-svn-id: http://piwigo.org/svn/trunk@3450 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-06-23 21:18:16 +00:00
nikrou
9245227e70 Feature 1026 : Modify / delete comments for users
+ update config table content
 + minor modification of Sylvia theme
 + need refactoring

git-svn-id: http://piwigo.org/svn/trunk@3445 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-06-23 13:44:58 +00:00
rvelices
6c92ade174 Last (I hope) paranoic optims ...
- move get_uysername and get_groupname from public to admin/functions.inc.php
- optim in index.php
- tags.tpl does not need smarty modifier included
- move func get_comment_post_key from functions_comment to functions (avoid extra inclusion every time on picture page)

git-svn-id: http://piwigo.org/svn/trunk@3145 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-02-14 02:24:10 +00:00
rvelices
e34c68cb89 - embellish_url compacts now ..
- some trigger improvements (render_category_description)
- improved perf of duplicate_xxx_url ( rewrote func params_for_duplication and remove some vars from $page )

git-svn-id: http://piwigo.org/svn/trunk@3126 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-02-05 03:03:30 +00:00
plegall
1b711ad236 Administration: happy new year 2009, all PHP headers updated.
git-svn-id: http://piwigo.org/svn/trunk@3049 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-01-04 23:28:36 +00:00
rvelices
ad2941220f merge -c2823 from branch 2.0 to trunk
- removed some unused constants from constants.php
- removed some unused css rules
- removed unused code

git-svn-id: http://piwigo.org/svn/trunk@2824 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-11-04 01:47:48 +00:00
rvelices
ebc3c2e2f7 merge 2755 and 2756 from branch 2.0 to trunk
- 2755 fix vulnerability http://www.milw0rm.com/exploits/6755
- 2756 security paranoia: protect session/remember me cookies from XSS attacks (works only if php>=5.2 and with IE/FF maybe others)


git-svn-id: http://piwigo.org/svn/trunk@2757 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-16 00:38:26 +00:00
patdenice
eb667c7711 - change mysql_escape_string function (deprecated) by mysql_real_escape_string.
- Correction on install.tpl (link color).

git-svn-id: http://piwigo.org/svn/trunk@2752 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-15 20:56:23 +00:00
rvelices
dda9f5db66 - removed #debug css rule (why would we need that in default-layout?)
- order by rank is not available in calendar/chronology mode
- small non-functional change in functions_search.inc.php (handy for plugin)
- unused variables/smaller code/unused params in func call

git-svn-id: http://piwigo.org/svn/trunk@2572 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-23 01:04:41 +00:00
nikrou
eef8aa8838 $_SERVER["HTTP_ACCEPT_LANGUAGE"] could be empty so test it.
git-svn-id: http://piwigo.org/svn/trunk@2537 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-14 19:40:18 +00:00
nikrou
fae1a63124 fix too strict regex for email
git-svn-id: http://piwigo.org/svn/trunk@2507 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-07 11:05:15 +00:00
rvelices
4322abb39f - add #user_cache.cache_update_time - useful for plugins or the filter when it is not possible/desirable to cache/calculate data specific to the user when pwg core does it; note that this opens the possibility to implement a data cache (file/shared mem/ etc...) for every user (for very large databases)
git-svn-id: http://piwigo.org/svn/trunk@2448 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-22 10:32:25 +00:00
rvelices
03c2f3c8db - fix some side effects with browser language (wrong display/user creation in admin and mails to admin in user browser language)
git-svn-id: http://piwigo.org/svn/trunk@2425 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-05 22:36:39 +00:00
rvelices
bc601ec586 - put back browser language (deleted by error during my last commit - was working on an old version)
git-svn-id: http://piwigo.org/svn/trunk@2411 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-01 10:08:27 +00:00
rvelices
d91d0ac444 - remember me cookie security improvement (the time when the cookie was generated is saved and checked in range [now-remember_me_length; now]
- tags improvements
 * pass to templates all fields in table #tags (handy for plugins such as type tags)
 * fix issue with tag letter when first letter is accentuated (utf-8)
 * tags are sorted on url_name instead of name (accentuated first letter chars are the same as without accent)
 * better use of columns in by letter display mode

git-svn-id: http://piwigo.org/svn/trunk@2409 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-01 02:09:21 +00:00
vdigital
6d8c172ee2 Feature 0000080: Browser language detection (Use first active browser language as language for guest, generic members, registering process). If the language is not available PHPWG_DEFAULT_LANGUAGE is used as previously.
git-svn-id: http://piwigo.org/svn/trunk@2371 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-05-31 11:43:13 +00:00
rub
5436a351ef Resolved issue 0000823: Enhance upload functionalities
First commit, others will be follow.
Not hesitate to change my translations.

Add upload configuration tabsheet (move and add configuration)
Change and add define for access level
Can show upload link every time
Can restrict access upload.class.php
Can choice category on upload page
Add upload class not use for the moment
Review quickly and temporary style of upload.tpl

git-svn-id: http://piwigo.org/svn/trunk@2325 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-05-02 21:56:21 +00:00
rvelices
7942dccf9b - move #categories.date_last and nb_images to #user_cache_categories
git-svn-id: http://piwigo.org/svn/trunk@2324 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-05-01 01:12:34 +00:00
vdigital
87a6b63d6f New: jQuery and Accordion Admin menus
git-svn-id: http://piwigo.org/svn/trunk@2313 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-04-26 13:19:24 +00:00
plegall
524011bfa6 Bug fixed: as rvelices notified me by email, my header replacement script was
bugged (r2297 was repeating new and old header).

By the way, I've also removed the replacement keywords. We were using them
because it was a common usage with CVS but it is advised not to use them with
Subversion. Personnaly, it is a problem when I search differences between 2
Piwigo installations outside Subversion.


git-svn-id: http://piwigo.org/svn/trunk@2299 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-04-05 14:14:07 +00:00
plegall
3f235497f3 Modification: new header on PHP files, PhpWebGallery renamed Piwigo.
git-svn-id: http://piwigo.org/svn/trunk@2297 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-04-04 22:57:23 +00:00
rvelices
bf1f7c4aec - security fix (profile)
- les langues a la hache
- fix some copy/paste errors

git-svn-id: http://piwigo.org/svn/trunk@2268 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-03-08 12:38:09 +00:00
patdenice
7bff25884c Merge from revision 2236.
801: add trigger in register_user function.
805: add 2 triggers in profile.php.
769: correct get_email_address_as_display_text function.

git-svn-id: http://piwigo.org/svn/trunk@2237 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-03-01 15:29:29 +00:00
patdenice
c38328da6b Merge from revision 2228.
Resolved bugs:
741 and 793: Added user does not appear in listing.
769: show email address in adviser mode when editing user profil.
800: get_absolute_root_url does not work with https protocol.

git-svn-id: http://piwigo.org/svn/trunk@2229 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-02-29 13:10:58 +00:00