Commit Graph

3740 Commits

Author SHA1 Message Date
czaks
b6f0317bde advanced build (1/2): a small refactor of index generating procedure; generation strategies 2016-05-08 10:54:30 +02:00
czaks
644f227ab3 fix "Undefined variable: pid"; thanks fpdl and MrFreeman 2016-05-08 03:09:20 +02:00
czaks
a5e22f6d63 split route and controller parts from smart build 2016-05-08 02:50:44 +02:00
czaks
deef54fe13 introduce smart_build_helper 2016-05-07 02:16:54 +02:00
czaks
ce9f9eec25 settings dialog refinements: now you can resize it 2016-05-06 17:11:12 +02:00
czaks
3f405b3484 what if IP address contained bad characters? (highly local) 2016-05-06 16:53:28 +02:00
czaks
3571670b98 fix catalog link someone? 2016-05-06 16:51:34 +02:00
czaks
a5bd39dc4a mod dashboard html: link to page editor 2016-05-06 16:49:35 +02:00
Fredrick Brennan
505adffcdc Cyclical threads ♺ 2016-05-06 16:39:20 +02:00
czaks
ab02a42725 maybe we can try to load Parsedown, after all we can silence the error 2016-05-06 16:27:43 +02:00
8chan
d788131202 Allow a board called news to exist 2016-05-06 16:26:17 +02:00
czaks
91c02c3ec4 board pages: add a migration 2016-05-06 16:21:43 +02:00
czaks
d726eaf195 we don't have a htmlpurifier yet ;_; 2016-05-06 16:07:21 +02:00
Fredrick Brennan
95b1e103cb Edit static pages commit 2016-05-06 16:03:55 +02:00
8chan
7911c374e8 Public action logs commit (log.php)
Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now.

===================================
Also: backports 351375185e5 (early 404)
2016-05-06 15:44:26 +02:00
8chan
6dd1420f91 Add event to quote backlinks 2016-05-06 15:15:17 +02:00
8chan
ce3ce4f1b6 Fix *0 secure tripcodes caused by accidentally feeding + signs to crypt() 2016-05-06 15:14:55 +02:00
8chan
7831da83fc New event: rebuildpost, allows you to bind events to ?/edit 2016-05-06 15:13:27 +02:00
Fredrick Brennan
b476b66007 [BUG] Image reject repost board option now also affects YT embeds 2016-05-06 15:12:08 +02:00
czaks
2fa37278db boardlist goes before #top 2016-05-06 15:09:25 +02:00
czaks
6e33de568d hide-threads.js: add div.file to fields to hide; thanks fpdl 2016-05-06 15:03:53 +02:00
czaks
8496b021a9 comment out global reports 2016-05-06 14:57:07 +02:00
Fredrick Brennan
65ea7b78c5 Catalog: click to scroll thread 2016-05-06 14:53:17 +02:00
sourcerect
3515fdabe7 Fix tab freeze when inlining
Fixes ctrlcctrlv/infinity#451
2016-05-06 14:49:30 +02:00
czaks
aa98ca337e i think this lump of code deserves a version bump; v5.1.0 here 2016-05-06 14:36:14 +02:00
czaks
126ee42b9d better rules for stripping combined chars, based on 45c0d327619 by @ctrlcctrlv 2016-05-06 14:34:42 +02:00
Forkless
d069a4c9fd Added option for hiding IDs. 2016-05-06 14:32:53 +02:00
czaks
33ef3f9b01 synchronize catalog_link 2016-05-06 14:14:22 +02:00
Bui
33ef1d2123 add active page classes to body; czaks: go to bottom @ thread: fixes 2016-05-06 14:05:16 +02:00
8n-tech
6644ff666a Also improved some CSS and HTML aspects of the thread layout.
Signed-off-by: 8n-tech <8n-tech@users.noreply.github.com>
2016-05-06 13:51:15 +02:00
8chan
7a7574bdca SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2016-05-06 12:43:25 +02:00
8chan
6da7f4d25a No more country flags in <title> 2016-05-06 12:40:37 +02:00
8chan
ae4eb4d3d9 RSS 2016-05-06 12:40:07 +02:00
8chan
632d0a76d0 Display placeholder if no file in catalog/theme.php; czaks: fix the code a bit 2016-05-06 12:37:00 +02:00
anonfagola
cb97029d0d Update catalog.html
Changed title from being - "Catalog /board/" to "/board/ - Catalog"
2016-05-06 12:27:21 +02:00
czaks
3f29170f1b debrand 8chan; btw. the previous commit was [SECURITY] i think? 2016-05-06 12:23:18 +02:00
8chan
ce62673a2c OpenGraph information in thread pages https://en.wikipedia.org/wiki/Facebook_Platform#Open_Graph_protocol 2016-05-06 12:18:31 +02:00
8chan
aa0d3395b1 Show first 256 chars of body in <title> 2016-05-06 12:17:51 +02:00
8chan
b6f3d44080 Go to bottom link 2016-05-06 12:16:01 +02:00
czaks
293543878a backport parts of 2d6d449bd2d72, in particular html classes 2016-05-06 12:14:28 +02:00
Bui
6c334a3b44 lol spaces 2016-05-06 11:45:52 +02:00
Bui
d46bf4e2f2 add id to thread links 2016-05-06 11:45:37 +02:00
czaks
02c3c28a16 main.js: a bit more sane code 2016-05-05 15:37:50 +02:00
czaks
6991ca270e fix bad merge 2016-05-05 13:53:52 +02:00
8chan
129eb154b3 Merge 2016-05-05 13:45:36 +02:00
Zixaphir
633c223282 Fix trailing comma 2016-05-05 13:43:32 +02:00
Zixaphir
cad8019068 Prevent images from hovering off-page
This entirely affects the "imageHoverFollowCursor" option.
2016-05-05 13:43:17 +02:00
Pashe
5f043d0a29 Have image-hover.js use data-fullimage instead of the API 2016-05-05 13:43:04 +02:00
8chan
913420e040 Image hover backported from 8chan X 2016-05-05 13:42:54 +02:00
czaks
130b32d08b remove image hover, so we can import the whole 8chan history of that file 2016-05-05 13:42:38 +02:00