discomrade
254ccd5f39
Fix bug in ban appeal counter
3 years ago
discomrade
1a90451ec2
Block D+ on special IP addresses
3 years ago
discomrade
60956c57ee
Fix name typo in post edit SQL
3 years ago
discomrade
9652eec774
Fix errors moving/merging with spoilers/deleted files
3 years ago
discomrade
cc55c05455
Show ban appeal count on mod dashboard
3 years ago
towards-a-new-leftypol
0ccf86215f
Fixes moving threads to a different board
- it seems that it still chokes on posts with missing files
- this seems to fix this and move the threads intact
- i didn't investigate fully what is going on here
3 years ago
towards-a-new-leftypol
43a6a67844
Improve robustness when moving / merging threads
- previously this would choke on threads where the image file is
missing
3 years ago
Dedushka
714a92af44
Revert bad change that commented this out on mod post edit page
3 years ago
Dedushka
f74d2a2fdc
Fix minor bug that disallows deletion of themes
3 years ago
nonmakina
d9c763a8a9
Optimizes board rebuilds on deletion by IP
3 years ago
nonmakina
c87cd9ab82
Removes rebuild after each deleted post when deleting by ip.
3 years ago
Dedushka
6d43a7f62b
Protect IPs in public moderation logs.
As reported, IPv6 addresses were not properly hidden in the public
facing moderation logs. This commit filters both IPv4 and IPv6
addresses.
We broke out into a separate function so that it can be tested with
the test suite.
A rudimentary test has been added to test the newly added
protect_ip($entry) function.
3 years ago
towards-a-new-leftypol
c3ec56836c
Fix ban
4 years ago
towards-a-new-leftypol
798c839681
retab pages.php
4 years ago
towards_a_new_leftypol
d34e4f6828
WIP
4 years ago
Benjamin Southall
a666b044a9
Fixes delete board regression thanks, as per 31e27a51c2
5 years ago
Benjamin Southall
391f63e31f
Rebuild themes after stickying or locking post, so that catalog gets rebuilt
5 years ago
Benjamin Southall
7aae5ed3e9
Handle mcrypt_create_iv deprectation by using randombytes in newer PHP versions
5 years ago
Benjamin Southall
67ef23d758
Only set thread if we can get thread when warning, and fix theme uninstallation
5 years ago
Benjamin Southall
6041e37216
Add warning without ban, joke capcode support, SC editor support, home link support, table for calender theme / extension, removing boardalias duplicate citations in markup and other features
7 years ago
Benjamin Southall
13f856189b
Merge pull request from vichan-devel/vichan#220 from kekukin/patch-1 Fixed uninstall error for themes.
7 years ago
Benjamin Southall
176b1f5494
Add merge thread functionality as a moderator feature (shadow threading and leaving OP is not yet supported) and board filter to Recent Posts iinterface.
7 years ago
Kitty Cat
f978c1b83e
Use random_bytes() to generate IV where available (PHP 7.x)
7 years ago
Benjamin Southall
47a45da7a7
Fix mod_view_board for ukko / overboard theme / extension. Add support for boards_alias to mod_view_board and initial preliminary support to markup for crossboard citations
7 years ago
Benjamin Southall
ddbabcccab
Implemented mods can't access random from dashboard #88 . Please note this doesn't use mod custom_pages functionality provided by vichan (because the that only works if your overboard has name that doesn't look like other boards), and requires ['overboards'] to be set as an array of board uri's which are overboards, with the correct values for type (theme type e.g. ukko, rand or semirand) title, subtitle, thread_limit and exclude in array of for each board uri
7 years ago
Benjamin Southall
0ba23fcf01
Deleting all posts by IP (D++) doesn't seem to work properly #87 Changing query inside the while loop to query2 in order to delete all posts, not just the first post.
7 years ago
Benjamin Southall
454acf0566
Add JSON interface to Recents Posts functionality, e.g. mod_recent_posts
7 years ago
Benjamin Southall
6c06045c03
#87 Attempt to change the error message associated when using deletebyip e.g D++ with autotagging of deletions enabled.
7 years ago
Benjamin Southall
9229b280c7
Added check for post time being empty string, in order to handle the case that occurs when a deleted post is deleted a second time.
8 years ago
Benjamin Southall
3b35eb46a9
Add autotagging feature for deletion. E.g. automatically generate an IP note when a post is deleted by moderator action.
8 years ago
Michael D. Reiley
8951cb74c8
Rebuild index when mod deletes a thread.
The index does not properly rebuild when a mod deletes a thread, resulting in a ghost thread remaining in the index until the next rebuild. This fix was originally contributed to Uboachan's codebase by Mannosuke.
8 years ago
jove
8e0a8b1251
Fixes two bugs preventing replies from being moved.
8 years ago
jove
272635a370
Fixes an error reporting typo.
8 years ago
Fredrick Brennan
505adffcdc
Cyclical threads ♺
9 years ago
8chan
d788131202
Allow a board called news to exist
10 years ago
Fredrick Brennan
95b1e103cb
Edit static pages commit
9 years ago
8chan
7911c374e8
Public action logs commit (log.php)
Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now.
===================================
Also: backports 351375185e5 (early 404)
9 years ago
8chan
7a7574bdca
SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']
Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.
Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
10 years ago
czaks
cd01191072
those parts are extraneous
8 years ago
8chan
3eb755ee7e
Move login check in inc/mod/auth.php to a function
This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords)
10 years ago
8chan Admin
93f748e6a8
Security: capitalization of mods username is significant
10 years ago
czaks
77176faece
enable javascript in mod panel
8 years ago
czaks
7c3126866c
ease the migration process for the previous security patch (by introducing another migration); restore php 5.4 compatibility (introducing a polyfill system)
8 years ago
czaks
caaf741691
[SECURITY] keep up with modern password hashing standards
8 years ago
Michael Walker
61d9dacdfb
When banning/deleting a post, return to the thread, not the board index (unless deleting the OP)
9 years ago
Michael Walker
649255c9b9
When deleting a post, return to the thread, not the board index (unless deleting the OP)
9 years ago
Michael Walker
4184fdec6e
Pass the thread ID when banning/deleting
9 years ago
czaks
2d9214ac63
version check should point at engine.vichan.net and not tinyboard.org actually
9 years ago
czaks
4c1d2f924c
fix error while installing themes; thanks xixi
9 years ago
czaks
b78b3db010
uncache themes on settings change
9 years ago