09e9f34bb4
add UserHelper::find_user_by_login() and rewrite some user checks to invoke it instead of going through PDO
4 years ago
7af8744c85
authentication: make logins case-insensitive (force lowercase)
4 years ago
e7e73193fe
fix warning in profile edit dialog (2)
4 years ago
2505ae43a9
fix warning in profile edit dialog
4 years ago
9e1459d5db
pref/prefs: fix warning when in non-default profile
4 years ago
d630a92c40
fix 2 warnings in feed editor
4 years ago
345dbb3521
rewrite some more hooks
4 years ago
fc2e0bf67b
log viewer: disable previous page on page 1
4 years ago
3b52cea811
move some old-style handlers to new callback ones
4 years ago
1d5c8ee500
prefs: fix user plugins shown by incorrect criteria
4 years ago
1eb1629d9e
pluginhost: rework run_hooks() to be shorter, add callback variant; implement exception handling for both
4 years ago
d293cbd5a9
fix several warnings related to feed editor
4 years ago
ce2335deaf
pref-users: css fixes
4 years ago
d8de10d78a
error log: fix severity dropdown
4 years ago
73e697a0df
fix some warnings in prefs (filters, users)
4 years ago
73070544ca
error log: make it more readable
4 years ago
5cfc5914f2
log viewer: show total pages
4 years ago
10392ecc28
event log: add pagination
4 years ago
a544123b59
fix clean() for arrays and user plugin list
4 years ago
6e774a58fe
more php8 fixes mostly related to login
4 years ago
403dca154c
initial WIP for php8; bump php version requirement to 7.0
4 years ago
da0ad82c24
Archive cleanup:
...
- remove code to manually archive/unarchive articles
- remove ttrss_archived_feeds/orig_feed_id handling - the whole thing was implemented for
this data to be kept indefinitely; it doesn't make a lot of sense to deal with this stuff
now that it is expired after one month anyway (same reasons as feed browser being removed - privacy)
- remove "originally from"-related stuff because of the above
- also remove unused remaining frontend/backend code related to feed browser (rip)
4 years ago
40f38fc87f
pluginhost: load plugin data automatically (also marks load_data method as private)
4 years ago
33a5ecd2ce
feed editor: show purge interval correctly if FORCE_ARTICLE_PURGE is set
4 years ago
8cc07bc8bd
event log: add severity filtering
4 years ago
6da576dbe4
BLACKLISTED_TAGS: use textarea for editing; normalize value when saving
4 years ago
d2db58de4f
Switch from 'vsprintf' to 'sprintf' in another place.
4 years ago
ef7e679363
Merge branch 'feature/php8' of wn/tt-rss into master
4 years ago
9b7338e807
feed editor: properly show global purging interval as disabled
4 years ago
62da307ef1
Use correct 'sprintf' function and other minor fixes in Pref_Feeds.
4 years ago
a1f8d6941b
Remove duplicate block in 'classes/pref/filters.php'.
...
Also a minor tweak to getting the search filter.
4 years ago
8c4ca7c8ef
Fix some 'isset' checks in 'classes/pref/prefs.php'.
4 years ago
8089fcc762
feed editor: also show default value for purge interval
4 years ago
d48460969d
feed editor: show actual value of default update interval
4 years ago
d1ee30d1ba
prevent horizontal scrolling in filter editor dialog if rules are very long
4 years ago
215f388992
move timestamp-related stuff to a separate class
4 years ago
6811d0bde2
use self:: in some places to invoke static methods from the same class
4 years ago
74568df4ff
remove a lot of stuff from global context (functions.php), add a few helper classes instead
4 years ago
03a337a660
add basic safe mode which doesn't load any user plugins
4 years ago
a4525d31b2
replace FALSE with false so that static analyzer shuts up about it
4 years ago
89d53a7f49
fix typo in previous
4 years ago
1f79d614c4
fix OTP QR code not displayed because of CSRF token passed as a query
...
parameter
use type-strict comparison when validating CSRF token on the backend
4 years ago
33fdde249e
pass CSRF token to opml import and feed icon replace dialogs
4 years ago
4a074111b5
user preferences: forbid < and > characters when changing passwords (were silently stripped on save because of clean())
4 years ago
c3d14e1fa5
- fix multiple vulnerabilities in af_proxy_http
...
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized
- fetch_file_contents: validate all URLs before requesting them
- validate URLs: explicitly whitelist http and https scheme, forbid everything else
- DiskCache/cached_url: only serve whitelisted content types (images, video)
- simplify filename/URL handling code, remove and consolidate some less-used functions
4 years ago
fa653f5a43
prefs: show disabled filters properly on mysql
4 years ago
2996a3942f
prefs: show root of filter tree as enabled so it's not grayed out
4 years ago
d01ad09800
eslint-related fixes; move a few things from global context to App
4 years ago
c8cc845d5b
when removing favicon, reset its auto-refresh timer
4 years ago
1f2a721905
allow overriding built-in templates via templates.local
5 years ago
Andrew Dolgov