Commit Graph

243 Commits

Author SHA1 Message Date
Michael Foster
461084d400 MySQL's utf8 charset only supports up to 3-byte symbols. Insterting four byte symbols (U+010000 to U+10FFFF) can be done maliciously to break HTML mark-up.
The ideal solution was to convert to MySQL's utf8mb4 charset, but then we would lose support for MySQL < 5.5.3. In this fix, incompatible characters are encoded as HTML numeric character references (eg. #65536) and just stripped from body_nommarkup.
2013-07-30 16:41:10 -04:00
Michael Foster
bd8bd3c02e Fix for last commit 2013-07-28 20:46:00 -04:00
Michael Foster
57c8e4ee7c Strip combining characters from Unicode strings (eg. Zalgo) 2013-07-28 20:33:26 -04:00
Michael Foster
308f557fd5 Option to automatically strip EXIF metadata from JPEGs 2013-07-21 15:50:45 -04:00
Michael Foster
30dc892786 Only store video URLs in database, instead of the generated player HTML. 2013-07-19 18:36:12 -04:00
Michael Foster
0ba40a8fc2 I just realized that ImageMagick had a -auto-orient switch. No need for all that code. 2013-07-19 09:39:46 -04:00
Michael Foster
e4bd9a6886 Themes edit: Split "post" into two seperate actions: "post" (replies) and "post-thread". And add a $board variable. 2013-07-18 12:06:26 -04:00
Michael Foster
c2dc25ac51 incrementSpamHash() was duplicated for some reason 2013-07-16 01:34:36 -04:00
Macil Tech
3eda5b0543 Adds image_hard_limit and reply_hard_limit options.
Also reworks the numPosts() function and uses it elsewhere too.
2013-06-18 12:21:41 -05:00
Michael Save
a44e0571bc Automatically rotate and mirror images based on EXIF orientation (only compatiable with "convert" option selected at the moment) 2013-01-24 03:24:38 +11:00
Michael Save
7a68fc9525 Copyright and license update for 2013. 2013-01-20 21:23:46 +11:00
Macil Tech
0da1c18a7f Add field_disable_subject and field_disable_reply_subject config options. 2013-01-19 01:37:48 -06:00
Michael
accc3992f3 Merge pull request #93 from Macil/image_reject_repost_in_thread
Add image_reject_repost_in_thread option
2013-01-18 23:03:16 -08:00
Macil Tech
67ab3760ba Removed redundant code in image processing.
Both paths of the code here did the same thing.
2013-01-19 00:39:29 -06:00
Macil Tech
91e8547b04 Add image_reject_repost_in_thread option 2013-01-19 00:25:24 -06:00
Michael Save
6a705fd8c2 Merge branch 'mod-rewrite'
Conflicts:
	inc/lib/Twig/Extensions/Extension/Tinyboard.php
	install.php
	mod.php
	stylesheets/style.css
	templates/index.html
	templates/page.html
	templates/thread.html
2012-08-27 02:28:04 +10:00
Michael Save
c919e73625 Temporary bugfix for incorrectly escaped email field 2012-08-27 02:18:31 +10:00
Michael Save
6775eebcfa $post['id'] 2012-05-27 20:55:56 +10:00
Michael Save
ad220b725d Bugfix: the number of successful passes for an anti-spam "hash" was often incorrectly incremented 2012-05-07 23:51:58 +10:00
Michael Save
9058d202ed Bugfix: the number of successful passes for an anti-spam "hash" was often incorrectly incremented 2012-05-07 23:51:15 +10:00
Michael Save
890b541191 custom capcode permissions 2012-05-07 18:22:20 +10:00
Michael Save
2082fcde24 Bugfix: with file uploading (introduced with last commit) 2012-05-05 18:12:11 +10:00
Michael Save
b5c7e30609 Bugfix: non-image file uploading 2012-05-05 18:11:45 +10:00
Michael Save
d6f5fc28ce Bugfix: with file uploading (introduced with last commit) 2012-04-20 19:48:11 +10:00
Michael Save
9286ec4928 Bugfix: with file uploading (introduced with last commit) 2012-04-20 19:47:25 +10:00
Michael Save
4c2066bc27 Bugfix: non-image file uploading 2012-04-20 19:04:53 +10:00
Michael Save
df97c559bd Bugfix: non-image file uploading 2012-04-20 19:04:37 +10:00
Michael Save
f48bfbf299 typo 2012-04-14 03:44:00 +10:00
Michael Save
1437a121f7 typo 2012-04-14 03:43:04 +10:00
Michael Save
51675e7a9b code cleanup 2012-04-13 00:18:19 +10:00
Michael Save
95709e7588 Removed board.id. Use the board URI/name at the key instead. 2012-04-12 23:23:47 +10:00
Michael Save
a564a95ab4 Improved Tinyboard anti-bot/spam filter. See large comment in inc/config.php for details. 2012-04-12 21:56:01 +10:00
Michael Save
c9423a2c34 large cleanup 2012-04-12 02:49:22 +10:00
Michael Save
1b5f2b08f4 moved $OP to $post['op']. post() now has one argument instead of two. 2012-04-11 02:18:06 +10:00
Michael Save
033491f84f increase character limit on board URI, title and subtitle 2012-04-09 21:13:44 +10:00
Michael Save
8cfc5460d3 New event: post-after 2012-04-03 00:16:25 +10:00
Michael Save
4c6faeb7a2 Convert $post to an object before passing it to event(). This way it can be modified by event handlers before entering the database. See http://tinyboard.org/docs/events.html#examples 2012-03-24 15:31:35 +11:00
Michael Save
8703ea3d4a $post['file_path'] 2012-03-19 02:55:34 +11:00
Michael Save
7c8dc230b8 Moved rebuildThemes() in post.php back for now. 2012-03-19 02:53:33 +11:00
Michael Save
9d58186360 New feature: "events". Will eventually replace/extend "themes". 2012-03-19 02:41:06 +11:00
Michael Save
c136d44894 Better upload handling (don't move file before handling it) 2012-03-18 19:53:56 +11:00
Michael Save
6db45d4c3d $config['thumb_method'] 2012-03-17 11:54:48 +11:00
Michael Save
60aab92f47 allow quick-reply.js to work 2012-03-14 18:09:23 +11:00
Michael Save
c8d1f1cdd4 ability to adjust thumbnail size for OP images independently from reply images 2012-03-14 02:44:33 +11:00
Michael Save
de17bdb317 Remade config[redraw_image] 2012-03-10 20:53:41 +11:00
Michael Save
25cdd35663 bug: avoid using empty() or values such as "0" will not work as intended 2012-02-17 19:24:40 +11:00
Michael Save
56821eb375 allow mods to bypass forced anonymity (and other disabled fields). also fixed some small per-board permission bugs 2012-02-16 23:07:25 +11:00
Michael Save
a431994016 fixed bug causing "bot" errors when disabling fields on certain boards only 2012-02-14 23:18:00 +11:00
Michael Save
cd30f3b0b9 prohibit using same anti-bot hashes across different boards/threads 2012-01-20 02:37:53 +11:00
Savetheinternet
0dd36bda54 logical error syslog()ing reports 2011-12-22 15:46:19 +11:00
Savetheinternet
41b2990234 syslog() reports and deletions 2011-12-22 10:09:59 +11:00
Savetheinternet
be860577a9 optionally disable image requirement for new threads 2011-12-18 08:48:16 +11:00
Savetheinternet
75f7ebd49b bugfix: PHP notices on raw posts 2011-12-13 20:15:46 +11:00
Savetheinternet
c83d192103 removed $_SESSION 2011-12-09 01:18:23 +11:00
Savetheinternet
6a02dfd5aa use multibyte-aware mb_strlen() instead of strlen(); fixed issue #8) 2011-12-07 17:47:36 +11:00
Savetheinternet
d454fc6423 syslog() mod actions 2011-12-06 03:00:59 +11:00
Savetheinternet
799af6907a .. 2011-12-05 16:49:24 +11:00
Savetheinternet
d4dc36cd74 .. 2011-12-05 16:45:06 +11:00
Savetheinternet
4454904461 syslog() new posts 2011-12-05 16:44:00 +11:00
Savetheinternet
290335194a integer overflow bug on 32-bit systems 2011-12-05 15:34:31 +11:00
Savetheinternet
b57be65c9f track cites (remove broken links after a post 404s) 2011-12-05 13:17:34 +11:00
Savetheinternet
ee3d9359e3 v0.9.4 2011-12-04 13:52:56 +11:00
Savetheinternet
c2e1f4feac removed useless exit; 2011-12-04 09:09:24 +11:00
Savetheinternet
c1be29ce35 ammended mod authentication system (no more $_SESSION) 2011-12-02 15:11:13 +11:00
Savetheinternet
a83d584255 Ability to disable certain superfluous fields. ("Forced anonymous") 2011-11-23 21:24:06 +11:00
Savetheinternet
0279cfd3fb Ability to customize filenames, replacing the standard UNIX timestamp + random 2011-11-19 00:22:48 +11:00
Savetheinternet
4e3757e586 Combined SQL query for checking if locked, etc. Much more efficient. 2011-10-11 02:58:22 +11:00
Savetheinternet
ffb215eb47 added "bumplocking" feature 2011-10-10 22:37:39 +11:00
Savetheinternet
cf79aed488 removed old, now invalid installation code from post.php 2011-10-08 19:08:46 +11:00
Savetheinternet
53dce652a8 image spoilers 2011-10-04 02:46:39 +11:00
Savetheinternet
67b954924b Referer checking; more descriptive error message 2011-10-03 18:38:19 +11:00
Savetheinternet
339853e5de Show full filename on mouseover. 2011-10-01 22:12:31 +10:00
Savetheinternet
0bad03d3a2 Disable inline-expanding for non-images 2011-10-01 21:43:23 +10:00
Savetheinternet
20c200a7ff Fixed bug regarding no-body posts (especially relevant to video embedding) 2011-09-29 21:17:59 +10:00
Savetheinternet
e089acd1eb Fixed force_body and force_body_op 2011-09-25 16:34:34 +10:00
Savetheinternet
d51f6a932e ... 2011-09-18 03:25:38 +10:00
Savetheinternet
4cbf5b91bf fixed custom filters 2011-09-18 03:17:54 +10:00
Savetheinternet
3d5c2ac5f5 Accidentally disabled spam protection in last commit... 2011-09-15 20:34:45 +10:00
Savetheinternet
4ef2caecc1 Removed $config[force_body]. Made threads without text possible. 2011-09-15 20:32:49 +10:00
Savetheinternet
aa02cffb93 increased subject max length to 100 characters 2011-08-27 12:11:34 +10:00
Savetheinternet
881ea10162 find image size before loading image into memory 2011-08-24 18:22:07 +10:00
Savetheinternet
e3f2aa8da3 ... 2011-08-15 00:49:52 +10:00
Savetheinternet
4c1935a6b6 per-board bans 2011-07-27 13:40:27 +10:00
Savetheinternet
f9bcde6e3d .. 2011-07-22 18:51:59 +10:00
Savetheinternet
25cbb68ea1 fixed display of image resolution/size, which was broken after the new image class was introduced 2011-07-18 22:06:24 +10:00
Savetheinternet
97979b7999 image handling class 2011-07-12 20:29:35 +10:00
Savetheinternet
370b829460 reCAPTCHA support 2011-06-16 04:59:16 +10:00
Savetheinternet
d184b591d8 removed unnecessary whitespace 2011-06-16 03:11:52 +10:00
Michael
5333f8c9cc bug fix 2011-06-11 16:08:29 +10:00
Savetheinternet
d9b82cfe4f allowed enabling multiple themes simultaneously 2011-05-28 01:43:04 +10:00
Savetheinternet
2acf0233ae embedding+file upload bug, accepting both for a single post 2011-05-25 19:11:22 +10:00
Savetheinternet
c8e778578a typo 2011-05-25 19:08:09 +10:00
Savetheinternet
65c5e91af2 stop ignoring $config[file_page]... 2011-05-20 22:44:11 +10:00
Savetheinternet
db1f0e9446 replaced tor detection with DNSBL 2011-05-19 17:37:23 +10:00
Savetheinternet
797fd8ad13 Embedding field 2011-05-18 17:05:48 +10:00
Savetheinternet
2ac8dc2c0f cleanup 2011-04-23 00:38:25 +10:00
Savetheinternet
2234c1ecea bug fix for recent theme 2011-04-20 01:50:35 +10:00
Savetheinternet
10a8fe28e6 non-image uploads 2011-04-13 20:57:41 +10:00
Savetheinternet
971e72000a Custom thubmanil image type (extension) 2011-04-13 04:08:59 +10:00
Savetheinternet
4c6c5b906e < should be <= in this case 2011-04-12 22:58:55 +10:00