1adb9bb6b6
profiles: use client dialog; move related methods to pref-prefs
4 years ago
e9c3118ddd
don't show E_USER_DEPRECATED on the frontpage
4 years ago
22fc6871e8
remove backend helper and move its only function to rpc for the time being
4 years ago
8e79f1717d
prefs: unify naming
4 years ago
5704deb460
counters: unify naming
4 years ago
257efb43c6
article: unify naming
4 years ago
020f062a76
feeds: unify naming
4 years ago
6b006a18e7
subscribe to feed: use client dialog
4 years ago
82adb01307
render enclosures on the client
4 years ago
eec5871f5f
fail better if requested article URL is blank
4 years ago
ad7842c98a
RIP tag cloud: last of the vanilla popup dialog system
4 years ago
848bc57f29
disable themes in safe mode; rework safe mode warning/login prompt
4 years ago
6c8ccd2acc
front page log checker: filter out idiotic GD warning
4 years ago
3b52cea811
move some old-style handlers to new callback ones
4 years ago
b6e1a5c91a
fix several warnings reported by phpstan
4 years ago
6e774a58fe
more php8 fixes mostly related to login
4 years ago
403dca154c
initial WIP for php8; bump php version requirement to 7.0
4 years ago
da0ad82c24
Archive cleanup:
...
- remove code to manually archive/unarchive articles
- remove ttrss_archived_feeds/orig_feed_id handling - the whole thing was implemented for
this data to be kept indefinitely; it doesn't make a lot of sense to deal with this stuff
now that it is expired after one month anyway (same reasons as feed browser being removed - privacy)
- remove "originally from"-related stuff because of the above
- also remove unused remaining frontend/backend code related to feed browser (rip)
4 years ago
3b17c45887
exclude E_USER_NOTICE from recent events icon
4 years ago
215f388992
move timestamp-related stuff to a separate class
4 years ago
05744bb474
fix updater never scheduling feeds for update if they never been updated before while having default update interval set
4 years ago
6811d0bde2
use self:: in some places to invoke static methods from the same class
4 years ago
74568df4ff
remove a lot of stuff from global context (functions.php), add a few helper classes instead
4 years ago
05ef9aac2f
update URL pointing to version.json
4 years ago
afa0023c51
don't try to update manually disabled feeds even if they haven't been updated before or are marked for a manual update
4 years ago
7e50c6c4b5
- enable CSRF support earlier
...
- remove rpc/sanityCheck from CSRF-excluded calls
4 years ago
c3d14e1fa5
- fix multiple vulnerabilities in af_proxy_http
...
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized
- fetch_file_contents: validate all URLs before requesting them
- validate URLs: explicitly whitelist http and https scheme, forbid everything else
- DiskCache/cached_url: only serve whitelisted content types (images, video)
- simplify filename/URL handling code, remove and consolidate some less-used functions
4 years ago
fdb1fc7608
get_version: fix commit/timestamp lost on subsequent invocations because of misbehaving caching
5 years ago
f30287be65
versioning changes
...
- remove VERSION_STATIC - https://community.tt-rss.org/t/versioning-changes-for-trunk/2974
- report git commit/timestamp properly by invoking git instead of trying to parse .git/HEAD etc
- remove git-related global constants used when checking for updates
5 years ago
3e4701116d
af_readability: add missing file
5 years ago
4edfb526e1
change version.json endpoint URL
5 years ago
3bd3324e5a
update: add option to send digests
6 years ago
0b74db5ad7
remove feedbrowser (other feeds)
6 years ago
38e01270d8
archived feeds: expire old entries (schema bump)
6 years ago
0517b88cce
rpc, catchupfeed: return counters immediately so that frontend can figure out next unread feed correctly
6 years ago
5c481fb249
rpc/checkforupdates: restrict to administrative access level
6 years ago
957c44d177
rework git update checking to be initiated by frontend, outside of runtime info output
6 years ago
b66deb3240
rpc/getAllCounters: return seq
6 years ago
d53cdaf815
requestCounters: remove cooldown
6 years ago
19e24b4fe2
force cast profile id to integer when assigning to session variable
6 years ago
c217de557f
rpc: addfeed: gets login and pass only if need_auth is checked.
...
Because of browser form auto-completion, the hidden field login and
password can be automatically filled when adding a feed. It would
enable feed authentication even if the user doesn't click on need_auth
button.
7 years ago
92175a8371
setpref: remove nl2br()
7 years ago
e6532439d6
force strip_tags() on all user input unless explicitly allowed
7 years ago
731ecac530
completeLabels: use prepare() not query()
7 years ago
b5bf9a0ff3
remove long forgotten stuff related to feed debugging actionbar
7 years ago
7039370368
pref-prefs: PDO
7 years ago
fbe7cb0a48
rpc: switch to PDO
7 years ago
5b6ea1ef91
remove pubsubhubbub: dead
8 years ago
e6c886bf66
wrap rssfuncs into rssutils class
8 years ago
65af3b2cbb
move counter stuff to a separate class
8 years ago
Andrew Dolgov