Commit Graph

1858 Commits

Author SHA1 Message Date
Fred Brennan
704af3d64d Use ENT_QUOTES when converting UTF-8 to HTML (#448)
Closes #448.
2024-01-30 10:05:43 -01:00
sshscp15
02edb9a896 Fix display warning/errors (#496)
* prevent filling debug param when debug is off

* fix php warning: "$item" must be passed by reference
2024-01-30 10:05:43 -01:00
27chan
2216a0155c Removed regex with possibiblity of XSS
An anonymous user reported the issue to me
2024-01-30 10:05:43 -01:00
Fred Brennan
2bc1a32105 Flip insane default for non-developers 2024-01-30 10:05:43 -01:00
Fred Brennan
fdc574906a Add support for APC(u) 2024-01-30 10:05:43 -01:00
C Hatfield
4026e4c448 Moved hardcoded html filepaths into config file for extensibility (#354)
Co-authored-by: chatfield <chatfield@creatuity.com>
Co-authored-by: Fred Brennan <copypaste@kittens.ph>
2024-01-30 10:05:43 -01:00
haruhianon609
139e975bfb Add yandex images as image identification option (#430)
* Add yandex images as image identification option

* Update image_identification.html

* Fix indentation

Co-authored-by: Fred Brennan <copypaste@kittens.ph>
2024-01-30 10:05:43 -01:00
Fredrick Brennan
56d67ab268 Change illogical default of $config[force_body]
Makes JS and non-JS enforcement equivalent while providing a downgrade path.

JS may not allow empty bodies even when $config[force_body] false. Don't care enough to fix. PR welcome.

Close #493.
2024-01-30 10:05:43 -01:00
bebyx
ffcc496a6f Fix editing global pages for 7.4 (#487) 2024-01-30 10:05:43 -01:00
Junicchi
2103948afe fix Undefined index ip problem, fixes #434 2024-01-30 10:05:43 -01:00
sshscp15
57ee34ad55 simple catalog support for moderators 2024-01-30 10:05:43 -01:00
837fe4d6fa Check file exists before unlinking in 'file_unlink' 2024-01-30 10:05:43 -01:00
8c9ef0d2bd Check temp file exists before unlinking when processing images 2024-01-30 10:05:43 -01:00
b80a7b00f0 Add status.php for mobile API 2024-01-30 10:05:43 -01:00
f17875da7a Enable compatibility with Twig 2.x 2024-01-30 10:05:43 -01:00
419829f8aa Check files exist before deleting when rebuilding
This is most likely an effect of the @ operator changes in PHP 8.0.0
2024-01-30 10:05:43 -01:00
e307afd09f Prevent filling debug parameter when debug is turned off in config
The debug parameter can lead to memory exhaustion errors for some errors, this prevents it happening when debug output is disabled
2024-01-30 10:05:43 -01:00
71d9463e47 Add filename as alt text to images 2024-01-30 10:05:43 -01:00
d61e98524c Update Tor blocklist 2024-01-30 10:05:42 -01:00
fc3564bc10 Change order of static page markup methods
Markdown doesn't appear to be enabled without extensions, so it's not good to have it first.
2024-01-30 10:05:42 -01:00
c1a2c9cf2f Enable configurations by default: moving, subject in title, hourly stats, anti-bump-flood 2024-01-30 10:05:42 -01:00
e8251ade6a Change dates to ISO 8601-like, fix deprecation of strfdate() in PHP 8.1, fix non-GMT dates
Unfortunately this means there are two format strings needed when using JS for local time.
2024-01-30 10:05:42 -01:00
7324135025 Add PPH and IPs stats table (doesn't require JS) 2023-01-14 05:50:41 -01:00
5b74355046 Collapse post form by default on index page.
This reduces wasted space as making threads is a relatively rare operation, and dissuades people from mistakenly making a thread instead of a reply.
2023-01-14 05:50:41 -01:00
6645a8f989 Add meaningful error codes for captchas 2023-01-14 05:50:41 -01:00
58d719c7f9 Allow local securimage captcha to be run without cURL library 2023-01-14 05:50:40 -01:00
288f09c1f9 Remove unused functions from inc/function.php
strategy_first was left in as I suspect it's a userful example.
2023-01-14 05:50:40 -01:00
8cd2ad7b10 Drop remaining MySQL <5.5.3 support (utf8 without multibyte)
It's over 10 years out-of-date and EOL and the version code isn't failsafe which causes issues with some MariaDB versions, resulting in broken multibyte character behaviors.
2023-01-14 05:50:40 -01:00
a8115d2e53 Remove wizchan remnants
Put me in the screencap
2023-01-14 05:50:40 -01:00
6fb529e745 Add option to force a subject when posting threads 2023-01-14 05:50:40 -01:00
17ed5819f6 Add maximum text length to ban appeals. 2023-01-14 05:50:40 -01:00
321c742124 Prevent raw HTML editing a post with tinyboard modifiers (e.g. user flags) from inserting them into the visible post body 2023-01-14 05:50:40 -01:00
f6b4eb9040 Fix multiple issues with anti_bump_flood
- bumplocked thread with one reply, delete the reply and no post matches the query
- saged posts aren't ignored when finding last bump
- bumplocked threads should be ignored
2023-01-14 05:50:40 -01:00
5df46e0c77 Improve page titles and social media cards 2023-01-14 05:50:40 -01:00
bd120bbda7 Clean up duplicate code for IPv6 2023-01-14 05:50:40 -01:00
d606deba0e Add IPv6 support for DNSBL
Should have used the library but didn't want to experiement and posiibly break the includes
2023-01-14 05:50:40 -01:00
f7478bc840 Remove newlines and modifiers from thread title 2023-01-14 05:50:40 -01:00
ec917def7c Block D+ and D++ on special IP addresses 2023-01-14 05:50:40 -01:00
0ac2b7ec70 Show ban appeal count on mod dashboard 2023-01-14 05:50:40 -01:00
49b5fb75a6 Fix 387ebe9c0c for reports, extract limit to variable, give more descriptive error name 2023-01-14 05:50:40 -01:00
1f155498b0 Fix combining character set, allow limit for combining characters 2023-01-14 05:50:40 -01:00
b91d8694a9 Prevent double-encoding of HTML entities in [code] 2023-01-14 05:50:40 -01:00
Pietro Carrara
43cc3fd465 Check if file fields are set on the API 2023-01-14 05:50:40 -01:00
Pietro Carrara
cb8c7ddd2e Load board config while generating json 2023-01-14 05:50:40 -01:00
Pietro Carrara
68dc6bb495 Check fields, use config paths 2023-01-14 05:50:40 -01:00
Pietro Carrara
3b9494e362 Use thumb, not thumb_path 2023-01-14 05:50:40 -01:00
Pietro Carrara
2b914f6145 Modify api image fields 2023-01-14 05:50:40 -01:00
b1629a33e9 Fix thumb_ext being ignored
When using ImageMagick's convert tool, the output defaults to the input format if no file extension or format is specified.
The temp file currently has no extension, so a $config['thumb_ext'] value has no effect on the image.
By appending the thumb_ext to the temp output file, it will convert the image to the intended format.
2023-01-14 05:50:40 -01:00
towards-a-new-leftypol
19e216b924 Display YouTube video thumbnail (with local url) in embeds 2023-01-14 05:50:40 -01:00
towards-a-new-leftypol
146f7a341a Improve robustness when moving / merging posts and threads.
Co-Authored-By: Discomrade <nice@try.fbi>
2023-01-14 05:50:40 -01:00