Commit Graph

274 Commits

Author SHA1 Message Date
towards-a-new-leftypol
be1e0bb2be Fixes moving threads to a different board
- it seems that it still chokes on posts with missing files
- this seems to fix this and move the threads intact
- i didn't investigate fully what is going on here
2021-05-03 02:21:10 -04:00
towards-a-new-leftypol
02119c5c58 Improve robustness when moving / merging threads
- previously this would choke on threads where the image file is
missing
2021-01-31 01:20:45 +00:00
nonmakina
4c7fbead86 Merge pull request #195 from dedushka1/revert-mod-edit-post-page
Revert bad change that commented this out on mod post edit page
2021-01-19 17:01:34 -06:00
Dedushka
801d5d1459 Revert bad change that commented this out on mod post edit page 2021-01-19 14:53:10 -05:00
Dedushka
5ebfb22a5e Fix minor bug that disallows deletion of themes 2021-01-18 22:32:20 -05:00
d1d0dd2f76 Optimizes board rebuilds on deletion by IP 2021-01-18 18:44:30 -06:00
40012ef81c Removes rebuild after each deleted post when deleting by ip. 2021-01-18 01:30:20 -06:00
Dedushka
a037d8b5e0 Protect IPs in public moderation logs.
As reported, IPv6 addresses were not properly hidden in the public
facing moderation logs. This commit filters both IPv4 and IPv6
addresses.

We broke out into a separate function so that it can be tested with
the test suite.

A rudimentary test has been added to test the newly added
protect_ip($entry) function.
2021-01-17 13:03:17 -05:00
towards-a-new-leftypol
98a69a3188 Fix ban 2021-01-03 21:59:29 -05:00
towards-a-new-leftypol
38f40d3d06 retab pages.php 2021-01-03 21:59:29 -05:00
towards_a_new_leftypol
f75d42d9c4 WIP 2020-12-22 01:35:50 -05:00
Benjamin Southall
c68af19e11 Fixes delete board regression thanks, as per 31e27a51c2 2019-08-31 01:51:56 +10:00
Benjamin Southall
2b741c7477 Rebuild themes after stickying or locking post, so that catalog gets rebuilt 2019-08-26 05:38:22 +10:00
Benjamin Southall
242ad5fec5 Handle mcrypt_create_iv deprectation by using randombytes in newer PHP versions 2019-02-26 10:58:36 +10:00
Benjamin Southall
dece1287c4 Only set thread if we can get thread when warning, and fix theme uninstallation 2019-02-26 10:57:12 +10:00
Benjamin Southall
d2429e05d1 Add warning without ban, joke capcode support, SC editor support, home link support, table for calender theme / extension, removing boardalias duplicate citations in markup and other features 2017-09-03 23:39:43 +09:00
Benjamin Southall
490efdc062 Merge pull request from vichan-devel/vichan#220 from kekukin/patch-1 Fixed uninstall error for themes. 2017-06-08 08:09:10 +09:00
Benjamin Southall
9e57b5c30d Add merge thread functionality as a moderator feature (shadow threading and leaving OP is not yet supported) and board filter to Recent Posts iinterface. 2017-05-11 21:45:38 +09:00
Kitty Cat
e780032e3e Use random_bytes() to generate IV where available (PHP 7.x) 2017-05-03 20:28:54 -04:00
Benjamin Southall
b68e749876 Fix mod_view_board for ukko / overboard theme / extension. Add support for boards_alias to mod_view_board and initial preliminary support to markup for crossboard citations 2017-04-23 20:01:34 +09:00
Benjamin Southall
e3302d0723 Implemented mods can't access random from dashboard #88. Please note this doesn't use mod custom_pages functionality provided by vichan (because the that only works if your overboard has name that doesn't look like other boards), and requires ['overboards'] to be set as an array of board uri's which are overboards, with the correct values for type (theme type e.g. ukko, rand or semirand) title, subtitle, thread_limit and exclude in array of for each board uri 2017-04-11 03:08:20 +09:00
Benjamin Southall
332cc15810 Deleting all posts by IP (D++) doesn't seem to work properly #87 Changing query inside the while loop to query2 in order to delete all posts, not just the first post. 2017-03-13 23:34:15 +09:00
Benjamin Southall
e01a6d19f3 Add JSON interface to Recents Posts functionality, e.g. mod_recent_posts 2017-03-02 11:40:27 +09:00
Benjamin Southall
35c0152f6d #87 Attempt to change the error message associated when using deletebyip e.g D++ with autotagging of deletions enabled. 2017-03-02 11:36:29 +09:00
Benjamin Southall
cd56fec0e8 Added check for post time being empty string, in order to handle the case that occurs when a deleted post is deleted a second time. 2017-01-18 12:13:11 +09:00
Benjamin Southall
8135c800e4 Add autotagging feature for deletion. E.g. automatically generate an IP note when a post is deleted by moderator action. 2017-01-17 22:56:46 +09:00
Benjamin Southall
c58e37ce39 Merged lainchan with vichan master at 25/9/2016 0bd63149b7 @czaks czaks committed on GitHub 2 days ago 2016-09-25 16:34:47 +09:00
Michael D. Reiley
ec5dc28d55 Rebuild index when mod deletes a thread.
The index does not properly rebuild when a mod deletes a thread, resulting in a ghost thread remaining in the index until the next rebuild. This fix was originally contributed to Uboachan's codebase by Mannosuke.
2016-09-22 23:03:11 -07:00
jove
8e0a8b1251 Fixes two bugs preventing replies from being moved. 2016-08-22 18:57:50 +01:00
jove
272635a370 Fixes an error reporting typo. 2016-08-21 16:44:57 +01:00
Fredrick Brennan
505adffcdc Cyclical threads ♺ 2016-05-06 16:39:20 +02:00
8chan
d788131202 Allow a board called news to exist 2016-05-06 16:26:17 +02:00
Fredrick Brennan
95b1e103cb Edit static pages commit 2016-05-06 16:03:55 +02:00
8chan
7911c374e8 Public action logs commit (log.php)
Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now.

===================================
Also: backports 351375185e5 (early 404)
2016-05-06 15:44:26 +02:00
8chan
7a7574bdca SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2016-05-06 12:43:25 +02:00
czaks
cd01191072 those parts are extraneous 2016-05-05 11:45:29 +02:00
8chan
3eb755ee7e Move login check in inc/mod/auth.php to a function
This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords)
2016-05-05 11:40:52 +02:00
8chan Admin
93f748e6a8 Security: capitalization of mods username is significant 2016-05-05 11:39:12 +02:00
czaks
77176faece enable javascript in mod panel 2016-05-05 09:56:54 +02:00
czaks
7c3126866c ease the migration process for the previous security patch (by introducing another migration); restore php 5.4 compatibility (introducing a polyfill system) 2016-05-05 06:43:22 +02:00
czaks
caaf741691 [SECURITY] keep up with modern password hashing standards 2016-04-22 05:35:43 +02:00
Simon McFarlane
4b40f69a4e Merge remote-tracking branch 'upstream/master' into vichan-merge 2015-05-29 01:34:53 -07:00
Michael Walker
61d9dacdfb When banning/deleting a post, return to the thread, not the board index (unless deleting the OP) 2015-05-10 13:22:53 +01:00
Michael Walker
649255c9b9 When deleting a post, return to the thread, not the board index (unless deleting the OP) 2015-05-10 03:01:55 +01:00
Michael Walker
4184fdec6e Pass the thread ID when banning/deleting 2015-05-10 02:56:48 +01:00
czaks
2d9214ac63 version check should point at engine.vichan.net and not tinyboard.org actually 2015-04-23 08:18:36 +02:00
czaks
4c1d2f924c fix error while installing themes; thanks xixi 2015-04-23 07:57:52 +02:00
czaks
b78b3db010 uncache themes on settings change 2015-04-05 16:59:04 +02:00
czaks
2f7aeec531 ... 2015-03-10 13:48:33 +01:00
czaks
58b60f0aa4 ... 2015-03-10 13:46:34 +01:00