95b1e103cb
Edit static pages commit
8 years ago
7911c374e8
Public action logs commit (log.php)
Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now.
===================================
Also: backports 351375185e5 (early 404)
8 years ago
7a7574bdca
SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']
Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.
Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
9 years ago
77176faece
enable javascript in mod panel
7 years ago
7c3126866c
ease the migration process for the previous security patch (by introducing another migration); restore php 5.4 compatibility (introducing a polyfill system)
7 years ago
caaf741691
[SECURITY] keep up with modern password hashing standards
7 years ago
2d9214ac63
version check should point at engine.vichan.net and not tinyboard.org actually
8 years ago
4c1d2f924c
fix error while installing themes; thanks xixi
8 years ago
b78b3db010
uncache themes on settings change
8 years ago
2f7aeec531
...
8 years ago
58b60f0aa4
...
8 years ago
bdb6001f3f
support for slugified links; may introduce a few bugs
8 years ago
9b3fa77719
new banlist implementation; also includes a public banlist
9 years ago
c4dc3f4d47
Fix spoiler image not working
9 years ago
fe60590d19
Check spoiler_image size before ussuming it is 128×128px
9 years ago
53ada6a5ff
added option for showing the mod in ban page.
also fixes issue where the Staff is not shown in ban appeals.
9 years ago
ef7556194c
Fix 55ch cancer; can now see next page of posts, ?/recent uses templating system
9 years ago
f97d2dff85
fix previous commit
9 years ago
9526f5ed1c
fix #72
9 years ago
2c883fda0a
fix ban appeals; thanks to sraczynski for reporting
9 years ago
7933abd271
Fix vichan #65
Conflicts:
inc/mod/auth.php
inc/mod/pages.php
9 years ago
23d6e82038
$_SERVER[HTTPS] isn`t being always set; fixes #65
9 years ago
4f070d16e5
Congrats, you broke the mod page on non-secured servers @jdh8
9 years ago
6716a24b68
Send cookie only via HTTPS if a mod logs in via HTTPS, which is the case on this site
9 years ago
65a14a0d39
Fix moving of deleted files
9 years ago
5039584a5e
Fix ?/recent str_replace issue
9 years ago
042e7b9c59
Deprecate postControls(), per-file deletion and spoilering
9 years ago
24753907eb
remove var_dump
9 years ago
53e33d414f
Fix mod_move for multi image
9 years ago
2b3942d19d
Fix mod_move for multi image
9 years ago
c483e1258c
multiimage posting
9 years ago
9d9d514919
we no have any modpages.html
9 years ago
fb2b66e2dd
Recent posts functionality
Conflicts:
inc/config.php
inc/mod/pages.php
mod.php
9 years ago
f5422cad65
Um. I accidentally deleted this code for some reason.
10 years ago
c8062fbf76
CSRF more mod pages
10 years ago
d234c014f0
?/debug/apc with cache prefixes
10 years ago
fcbc211314
Fixed weird bug with ?/debug/sql trying to allocate a few GB on some instances. Assuming bug with APCu.
10 years ago
39be89ba49
?/debug/apc
10 years ago
a9b7f9b1bc
begin implementation of in-built ban appealing
10 years ago
0a58973631
Make it so that users can't insert code w/syntax errors into ?/config
10 years ago
3471f7c668
Optionally show post user was banned for
10 years ago
803f0c8ce1
Fix search for new bans table
10 years ago
3e57bb04d7
Begin upgrade to much better bans table. DO NOT PULL YET; It won't work.
10 years ago
dd1bec687b
bugfix: disable javascript on mod pages
10 years ago
b038e0b244
fix last commit
10 years ago
2230f0a051
disable $config['try_smarter'] on ?/rebuild
10 years ago
5da8f28726
Improvements to ?/debug/antispam and ?/debug/recentc
10 years ago
cc37d79c0d
Fix last commit.
10 years ago
eea4e42609
Add ability to create custom user/permissions groups
10 years ago
7f0de93608
Cleaner check to make sure inc/ files aren't accessed directly.
10 years ago
Fredrick Brennan
czaks
kaf
Juan Tamad
Chen-Pang He
sinuca
Michael Foster
ctrlcctrlv