Commit Graph

251 Commits (08ff629af500f4c1e3c60384132fcc4299d24c6b)

Author SHA1 Message Date
Andrew Dolgov 70adfd4a74 * sanitize: never rewrite relative links to our own prefix
* use Config::get_self_url() instead of get_self_url_prefix() in a bunch
of places
4 years ago
Andrew Dolgov f96abd2b52 generate_syndicated_feed: timestamp is a strtotime() expression, not an integer 4 years ago
Andrew Dolgov 320503dd39 move version-related stuff to Config; fix conditional feed requests 4 years ago
Andrew Dolgov 34c74400a4 enforce some stricter type checking for loggers 4 years ago
Andrew Dolgov dcf0135285 logger: shorter syntax 4 years ago
Andrew Dolgov 59c14e9c00 api: remove base64 encoded passwords (wtf), log all authentication failures in userhelper 4 years ago
Andrew Dolgov efd196839a stop caching schema version entirely, fix some session_start() related warnings 4 years ago
Andrew Dolgov c96172fa04 use constants in get_pref()/set_pref() 4 years ago
Andrew Dolgov 988eb3ac91 initial (wip) for new prefs 4 years ago
Andrew Dolgov 8d2e3c2528 drop errors.php and simplify error handling 4 years ago
Andrew Dolgov e4107ac952 wip: initial for config object 4 years ago
Andrew Dolgov be4e7b1340 fix several issues reported by phpstan 4 years ago
Andrew Dolgov d1328321be move published OPML endpoint to public.php 4 years ago
Andrew Dolgov 053b262aa7 rename public.php/cached_url to cached 4 years ago
Andrew Dolgov fc0ebf0891 move bookmarklet-related methods out of public.php into the plugin 4 years ago
Andrew Dolgov c088e9d9d8 get rid of a few more prototype-isms 4 years ago
Andrew Dolgov 70fa423026 initial for RIP prototype/scriptaculous 4 years ago
Andrew Dolgov 273ada7353 * implement shortcut syntax for exposed plugin methods
* move shared article rendering code to share plugin
4 years ago
Andrew Dolgov 26d6b84a57 add namespaced controls with unified naming; deprecated old-style control shortcuts 4 years ago
Andrew Dolgov 39604bedef move reset_password to UserHelper 4 years ago
Andrew Dolgov 6426ae559a dbupdater: unify naming 4 years ago
Andrew Dolgov 166f2d4666 diskcache: unify naming 4 years ago
Andrew Dolgov 8e79f1717d prefs: unify naming 4 years ago
Andrew Dolgov 257efb43c6 article: unify naming 4 years ago
Andrew Dolgov 020f062a76 feeds: unify naming 4 years ago
Andrew Dolgov 82adb01307 render enclosures on the client 4 years ago
Andrew Dolgov a8cc43a0ff move logout_user() to UserHelper 4 years ago
Andrew Dolgov 15fd23c374 use shortcut echo syntax for php templates 4 years ago
Andrew Dolgov d3940b6259 fix a bunch of warnings related to generated feeds 4 years ago
Andrew Dolgov 71dfc83466 force _ENABLED_PLUGINS to string when passed to pluginhost 4 years ago
Andrew Dolgov 74986d1ac6 shorten pref tab names; make log-alert clickable 4 years ago
Andrew Dolgov 09e9f34bb4 add UserHelper::find_user_by_login() and rewrite some user checks to invoke it instead of going through PDO 4 years ago
Andrew Dolgov 7af8744c85 authentication: make logins case-insensitive (force lowercase) 4 years ago
Andrew Dolgov 9f3de2d24c login: fix profile warning 4 years ago
Andrew Dolgov 7eb860af61 even more hooks 4 years ago
Andrew Dolgov 1eb1629d9e pluginhost: rework run_hooks() to be shorter, add callback variant; implement exception handling for both 4 years ago
Andrew Dolgov 3f972f8fed public/subscribe: fix warnings 4 years ago
Andrew Dolgov 6e774a58fe more php8 fixes mostly related to login 4 years ago
Andrew Dolgov 403dca154c initial WIP for php8; bump php version requirement to 7.0 4 years ago
Andrew Dolgov da0ad82c24 Archive cleanup:
- remove code to manually archive/unarchive articles
- remove ttrss_archived_feeds/orig_feed_id handling - the whole thing was implemented for
this data to be kept indefinitely; it doesn't make a lot of sense to deal with this stuff
now that it is expired after one month anyway (same reasons as feed browser being removed - privacy)
- remove "originally from"-related stuff because of the above
- also remove unused remaining frontend/backend code related to feed browser (rip)
4 years ago
Andrew Dolgov 40f38fc87f pluginhost: load plugin data automatically (also marks load_data method as private) 4 years ago
Andrew Dolgov f67f0f864b HOOK_ARTICLE_EXPORT_FEED: also pass owner_uid 4 years ago
JustAMacUser fadf4dec96 Include tags for HOOK_ARTICLE_EXPORT_FEED. 4 years ago
Andrew Dolgov a8302fb253 use X-Real-IP headers if possible while authenticating 4 years ago
Andrew Dolgov 215f388992 move timestamp-related stuff to a separate class 4 years ago
Andrew Dolgov 74568df4ff remove a lot of stuff from global context (functions.php), add a few helper classes instead 4 years ago
Andrew Dolgov 03a337a660 add basic safe mode which doesn't load any user plugins 4 years ago
Andrew Dolgov 37f41a5246 forgotpass: use type strict comparison for reset token 4 years ago
Andrew Dolgov 1f79d614c4 fix OTP QR code not displayed because of CSRF token passed as a query
parameter
use type-strict comparison when validating CSRF token on the backend
4 years ago
Andrew Dolgov 9d3c794983 subscribe: allow pre-filling feed URL if passed via query string 4 years ago