Andrew Dolgov
|
6359259dbb
|
simplify internal authentication code and bump default algo to SSHA-512
|
3 years ago |
|
Andrew Dolgov
|
efd196839a
|
stop caching schema version entirely, fix some session_start() related warnings
|
3 years ago |
|
Andrew Dolgov
|
8d2e3c2528
|
drop errors.php and simplify error handling
|
3 years ago |
|
Andrew Dolgov
|
2ae0b7059f
|
cleanup some defined-stuff
|
3 years ago |
|
Andrew Dolgov
|
29ada58b4a
|
move db-prefs shortcut functions to functions.php
|
3 years ago |
|
Andrew Dolgov
|
12bcf826e4
|
don't include config.php everywhere
|
3 years ago |
|
Andrew Dolgov
|
42173386b3
|
dirname(__FILE__) -> __DIR__
|
3 years ago |
|
Andrew Dolgov
|
be4e7b1340
|
fix several issues reported by phpstan
|
3 years ago |
|
Andrew Dolgov
|
9d7ba773ec
|
move session-related functions to their own namespace
|
3 years ago |
|
Andrew Dolgov
|
9f55454f63
|
remove the rest of db.php; rename some leftover methods in feeds
|
3 years ago |
|
Andrew Dolgov
|
6af83e3881
|
drop ENABLE_GZIP_OUTPUT; system prefs: load php info only if needed
|
3 years ago |
|
Andrew Dolgov
|
aba028a375
|
api: fix some php8 warnings (3)
|
3 years ago |
|
Andrew Dolgov
|
74568df4ff
|
remove a lot of stuff from global context (functions.php), add a few helper classes instead
|
4 years ago |
|
Andrew Dolgov
|
68b0380118
|
add placeholder authentication via app passwords if service is passed
forbid logins via regular passwords for services
remove AUTH_DISABLE_OTP
|
5 years ago |
|
Andrew Dolgov
|
8064ca3f8c
|
API endpoint: disable session cookies
|
6 years ago |
|
Andrew Dolgov
|
ea79a0e033
|
remove some redundant php closing tags
|
7 years ago |
|
Andrew Dolgov
|
4afcf63563
|
api host: add session validation
|
8 years ago |
|
Andrew Dolgov
|
5d97019d5d
|
api: load user plugins properly
|
8 years ago |
|
Raphaël Rochet
|
cd839c9812
|
Enable translation of strings returned by API
|
9 years ago |
|
Rasmus Lerdorf
|
6f7798b643
|
Fixing bugs found by static analysis
|
11 years ago |
|
Andrew Dolgov
|
4a70edea1a
|
api: remove db_connect stuff
|
11 years ago |
|
Andrew Dolgov
|
404e2e3603
|
more work on singleton-based DB
|
11 years ago |
|
Andrew Dolgov
|
ba68b6815a
|
db updates, remove init_connection()
|
11 years ago |
|
Andrew Dolgov
|
9ce7a5546c
|
implement some tweaks to session handling; properly remove session cookie if invalid/login failed
|
11 years ago |
|
Andrew Dolgov
|
0bb5833beb
|
api: add getFeedTree
|
11 years ago |
|
Andrew Dolgov
|
3f0094189c
|
api: lower maximum lifetime of api sessions
|
11 years ago |
|
Andrew Dolgov
|
5160620c8a
|
only autostart session if login cookie exists
|
11 years ago |
|
Andrew Dolgov
|
acfbab375d
|
mute warnings caused by session_start() to deal with potential ps_files_cleanup_dir stuff
|
11 years ago |
|
Andrew Dolgov
|
88e8fb3a71
|
modify include path order (closes #514)
|
12 years ago |
|
Andrew Dolgov
|
839b065860
|
api: remove unneeded stuff, add special header for android httpurlconnection which seems to be retarded
|
12 years ago |
|
Andrew Dolgov
|
964f153371
|
api: use tt-rss session storage
|
12 years ago |
|
Andrew Dolgov
|
02cd6de128
|
api: add workaround to disable OTP
|
12 years ago |
|
Andrew Dolgov
|
6eaf319320
|
api: disable deprecated HTTP parameter support by default
|
12 years ago |
|
Andrew Dolgov
|
f1d65e5089
|
remove api-specific _autoload
|
12 years ago |
|
Andrew Dolgov
|
6a79e8afeb
|
only enable ob_gzhandler if it exists
|
12 years ago |
|
Andrew Dolgov
|
de8260cb10
|
move API to classes/
|
13 years ago |
|
Andrew Dolgov
|
4a0500fbc8
|
fix API includes
|
13 years ago |
|
Andrew Dolgov
|
46d60592ad
|
api: implement setting article note through updateArticle
|
13 years ago |
|
Andrew Dolgov
|
75b901d929
|
api/getCategories: return virtual categories and Uncategorized
|
13 years ago |
|
Andrew Dolgov
|
e9ed9ec844
|
api/getCategories: add TODO
|
13 years ago |
|
Andrew Dolgov
|
582f41e2c1
|
implement getApiLevel
|
13 years ago |
|
Andrew Dolgov
|
4044a5fa52
|
remove pointless escaping of the password (refs #392)
|
13 years ago |
|
Andrew Dolgov
|
8ad4bac0fd
|
api: always chdir() to base directory (refs #375)
|
13 years ago |
|
Andrew Dolgov
|
823da71a10
|
api/getArticle: validate id list
|
13 years ago |
|
Andrew Dolgov
|
52ebaf93e9
|
api/updateArticle: validate article_ids parameter (refs #375)
|
13 years ago |
|
Andrew Dolgov
|
97e5dbb2e7
|
api: add getHeadlines since_id
|
13 years ago |
|
Andrew Dolgov
|
9a98fd9bc7
|
api: set content-type
|
13 years ago |
|
Andrew Dolgov
|
90e71380ba
|
api: support passing input parameters using JSON in HTTP POST data
|
13 years ago |
|
Andrew Dolgov
|
a0e580b0ca
|
api/getHeadlines: add include_attachments parameter
|
13 years ago |
|
Andrew Dolgov
|
9fc34a36f1
|
api: remove obsolete getArticles/getNewArticles previously added for tt-rss reader
|
13 years ago |