Commit graph

1815 commits

Author SHA1 Message Date
Shish
61f13c6794 [core] have User::by_session() check session ID on the PHP side
Generating the token on the PHP side is more consistent than getting the databases to do it
2024-06-20 01:13:10 +01:00
Shish
8a3d5b5b11 [core] move get_session_id and set_login_cookie into User class 2024-06-20 01:07:11 +01:00
Shish
a59b9f706c [core] use || for SQL concatenation
MySQL supports this now?
2024-06-19 23:57:41 +01:00
Shish
069fb92f54 [core] test for bool_escape(null) == false 2024-06-19 15:24:05 +01:00
Shish
63c6f9d2ac [core] config->save() is implicit in set_XXX(), no need to call it from outside of there 2024-06-19 15:23:42 +01:00
discomrade
60f96fa128 [blur] blur thumbs with explicit rating 2024-06-10 14:16:30 +01:00
discomrade
6ad54565c5 [core] allow relative url in contact link 2024-06-09 17:01:37 +01:00
Shish
2f07d4c71c [core] make request cookies configurable 2024-06-07 14:47:30 +01:00
Shish
d04407d3bc bump
`main` branch is working towards 2.12, not 2.11
2024-06-05 14:06:10 +01:00
Shish
db148da479 [core] add shm_make_link JS function, to generate links from JS which work both with and without niceurls, fixes #1160, fixes #1151 2024-06-05 14:01:40 +01:00
discomrade
baf55a26fa [terms] add terms and conditions gate 2024-06-04 20:04:38 +01:00
Shish
5cbbe5e1b3 [core] remove is_logged_in
This was only used in a couple of places, and user classes are more useful
2024-05-04 16:06:08 +01:00
Shish
f6973fd01f [core] make PageRequest->page_starts_with be less weird 2024-04-27 01:12:39 +01:00
Shish
b59fe4c694 Have a common PartListBuildingEvent, fixes #1124 2024-03-28 16:17:18 +00:00
Shish
517f8c0019 [core] differentiate permission denied due to missing permission vs error, see #1103 2024-03-12 13:13:02 +00:00
Shish
b6cca42f73 [core/polyfills] remove mb_ functions - there are standard polyfills for that 2024-02-27 13:05:22 +00:00
Shish
b9c7d632fd [graphql] custom field resolver, fixes #1089 2024-02-25 19:32:05 +00:00
Shish
2be141327a [graphql] fix graphql field access, fixes #1089 2024-02-25 16:54:13 +00:00
Shish
2f4d8572b7 [core] don't limit searchable tag length, only writable length, fixes #1087 2024-02-24 17:47:22 +00:00
Shish
ac14d1e4c6 [core] search code docs and test function 2024-02-24 14:44:17 +00:00
Shish
4cc9b2f5d3 [core] don't crash when REMOTE_ADDR is 'unix:', fixes #1076 2024-02-22 23:18:38 +00:00
Shish
ae92e42300 [core] Utils tests 2024-02-21 23:51:10 +00:00
Shish
dd6c47484d [core] UserClass tests 2024-02-21 23:38:52 +00:00
Shish
0890de35c1 [core] don't crash if TRUSTED_PROXIES isn't defined, fixes #1061 2024-02-21 14:59:19 +00:00
Shish
b407bad7c5 [core] give admin all permissions 2024-02-21 12:55:39 +00:00
discomrade
aff227ac31 [core] fix permissions in forum and notes
This includes preventing silent failures when permission is denied, preventing unauthorized users from being shown the note edit form, patching typos, and extracting NOTES_REQUEST to its own permission
2024-02-21 11:27:19 +00:00
discomrade
ac86cb1302 [core] rename FORUM_CREATE permission
This permission is for more than creating threads, making the previous name misleading
2024-02-21 11:27:19 +00:00
Noz
100d86dfbd fix installer
form POSTs to the wrong location if the booru is in a sub directory
2024-02-21 10:15:18 +00:00
Noz
343a858898 fix static file paths 2024-02-21 10:15:18 +00:00
Shish
db0e788a67 [core] Deduplicate ImageAdditionEvent & ImageInfoSetEvent
Rather than ImageAddition triggering TagsSet/SourceSet/LockSet etc in one way, and ImageInfoSet triggering TagsSet/SourceSet/LockSet in a different way, why not have ImageAddition *just* deal with image addition, and then send a separate ImageInfoSet to deal with all of the metadata setting?
2024-02-20 22:15:24 +00:00
Shish
2136be80ab [core] test truncate() properly, and then fix it, and then use it 2024-02-20 15:04:38 +00:00
Shish
e80d235fe9 [core] use Safe library, reduce StdLibEx 2024-02-20 10:38:20 +00:00
Shish
06db4a12e0 [core] test for order=random_1234 2024-02-17 12:38:16 +00:00
Marcos Del Sol Vives
08b01502a5 Do not cast hard drive size to integer - fixes #1037 2024-02-17 12:32:47 +00:00
Marcos Del Sol Vives
b3eb5e7b03 Fix order:random not working on SQlite 2024-02-16 20:14:34 +00:00
Shish
260d38c7f8 fix version 2024-02-16 11:20:51 +00:00
Shish
4e362d816f [core] named constant for nice urls 2024-02-14 12:35:58 +00:00
Shish
937cef38db [db] show original client IP in postgres status 2024-02-14 07:28:56 +00:00
Shish
ebeb3b6c60 [core] don't specify ORDER BY when counting total number of results, which allows the DB to be much faster 2024-02-13 17:46:16 +00:00
Shish
28a3aad887 [core] stop logging curl debug info to stdout 2024-02-13 01:05:35 +00:00
Shish
3d905b1055 [core] load null-strings as null, fixes #1023 2024-02-12 16:03:37 +00:00
Shish
9998b3501d bump 2024-02-12 11:16:28 +00:00
Shish
f9d06d5e7e [core] fix nicedebug 2024-02-11 23:30:39 +00:00
Shish
62ece58403 [core] fix uglyurl thumbs 2024-02-11 21:37:00 +00:00
Shish
3843930874 [core] guess at query encoding, hackily fixes #1026 2024-02-11 20:04:37 +00:00
Shish
7a91833d22 [core] show known properties when one is missing 2024-02-11 18:36:47 +00:00
Shish
7ee4152942 [core] organise exceptions a bit 2024-02-11 16:03:23 +00:00
Shish
278286da9f more tests 2024-02-11 14:51:55 +00:00
Shish
8c22cb1fb6 [core] exact and named page args 2024-02-11 11:34:17 +00:00
Shish
78aaff5c8f [misc] permission updates 2024-02-10 23:32:50 +00:00