Andrew Dolgov
197e80add6
fix several issues related to profile being set to a non-numeric value
6 years ago
Andrew Dolgov
6303e1626c
remove cache/js (no longer used)
6 years ago
Andrew Dolgov
71fc6d45bd
refactor error reporting to AppBase; keep exception_error() for now as a shim
6 years ago
Andrew Dolgov
84affc7b1d
rework dojo singleton modules to better work with phpstorm completion (ugh) - declare() is not needed there anyway
...
remove event.observe from login form (not needed)
load pluginhost via amd
6 years ago
Andrew Dolgov
e905ce7ea9
fix login
6 years ago
Andrew Dolgov
d9c5c93cef
move some more stuff out of common.js
...
rework client-side cookie functions a bit
limit dojo cachebust based on server scripts modification time
remove param_escape()
6 years ago
Andrew Dolgov
f89924f7a1
set use strict on JS modules; remove some mostly useless stuff like get_minified_js()
6 years ago
Andrew Dolgov
874560db54
remove obsolete row selection functions
...
move getUrlParam() to Utils
6 years ago
Andrew Dolgov
2f85b50e36
remove toggleSelectListRow2()
6 years ago
Andrew Dolgov
5aa9c60494
bring back (debloated) version of unexpanded combined mode
6 years ago
Andrew Dolgov
bf1b89d0f1
enable c-up/down hotkeys even out of cdm
6 years ago
Andrew Dolgov
07fd4f8d9d
minor css fixes (mostly for zoom mode)
6 years ago
Andrew Dolgov
50052fb78a
strip_harmful_tags: remove data- attributes
6 years ago
Andrew Dolgov
9563e3bcd6
remove expandable CDM headlines
6 years ago
Andrew Dolgov
fc0a3050eb
use xhrPost is even more places!
6 years ago
Andrew Dolgov
c10a43069e
debug logging system rework:
...
* support various logging levels per-message
* remove hacks like debug_suppress, DAEMON_EXTENDED_DEBUG, etc
* _debug() is kept as a compatibility shim for plugins
6 years ago
Andrew Dolgov
b2f0858060
sanity config: fix typo
6 years ago
Andrew Dolgov
d5256c8228
update sanity_config.php
6 years ago
Andrew Dolgov
5f66f872b6
fix session write handler always assuming that database entry exists and failing silently if it doesn't; remove session cookie-related hacks
6 years ago
Andrew Dolgov
d246fb9fe1
remove session REMOTE_ADDR checks
6 years ago
Andrew Dolgov
f8fc1ac543
login: check for stale session in login handler, instead of authenticate_user()
6 years ago
Andrew Dolgov
f730d7bb0a
another attempt to enforce session ID regeneration on login
6 years ago
Andrew Dolgov
9dadbdbb21
properly save auth_module after logging in
6 years ago
Andrew Dolgov
77aebd7e4a
it was probably not the best idea to use session_regenerate_id() right after session_start(), duh
6 years ago
Andrew Dolgov
5feed36a3c
do not use separate _ssl cookie for secure sessions
6 years ago
Andrew Dolgov
65e98f4086
force regenerate session id on successful login, remove previous blank SID check
6 years ago
Andrew Dolgov
74736fce0f
if empty session is autostarted because of a cookie, immediately destroy it
6 years ago
Andrew Dolgov
7d53c2b501
validate_session: bring back IP session binding (enabled by default) and UA checking
6 years ago
Andrew Dolgov
ec5687a62b
logout user: commit destroyed session
6 years ago
Andrew Dolgov
d2e1e60ecc
1. per-feed option STRIP_IMAGES should now also affect other media tags
...
2. video/audio elements were not replaced with text links properly in
low bandwidth mode
6 years ago
Andrew Dolgov
f3068c6397
send_local_file: touch() sent files to reset their expiration cooldown
6 years ago
Andrew Dolgov
02bb26a93f
rewrite_cached_urls: support video posters
6 years ago
Andrew Dolgov
a1b8651949
Revert "add (hidden) _NGINX_XACCEL_PREFIX which uses nginx X-Accel-Redirect to serve static files faster"
...
This reverts commit c5c3a0a2a8
.
6 years ago
Andrew Dolgov
2aef804f4b
split transparent rewriting of locally cached media URLs to execute after both sanitize() and HOOK_RENDER_ARTICLE to allow plugins work on original source URLs consistently
6 years ago
Andrew Dolgov
c5c3a0a2a8
add (hidden) _NGINX_XACCEL_PREFIX which uses nginx X-Accel-Redirect to serve static files faster
6 years ago
Andrew Dolgov
88adf3da1b
send_local_file: add application/octet-stream hack
...
cached_url: return original requested filename to save as
6 years ago
Andrew Dolgov
c4869cd573
if PHP_VERSION check fails, show current version
6 years ago
Andrew Dolgov
75e765aa00
bump version_static
6 years ago
Andrew Dolgov
848c6ac655
bump required php version to 5.6
6 years ago
Andrew Dolgov
069aea5989
remove FEED_CRYPT_KEY and everything related to it
...
always assume auth_pass_encrypted is false
6 years ago
Andrew Dolgov
a2d1fa5b14
autoloader: check if class name is namespaced before trying to split it
6 years ago
Andrew Dolgov
df47100ad1
remove SWF enclosure audio player
7 years ago
Andrew Dolgov
a9105e2a61
move JShrink Minifier to vendor/
7 years ago
Andrew Dolgov
2aaefbfa54
update autoloader to consider namespaces for third party libraries: placed and loaded from vendor/namespace/classpath.php
...
update readability to a newer implementation based on Readability.js (https://github.com/andreskrey/readability.php )
add vendor/Psr/Log interface required for the above
7 years ago
Andrew Dolgov
d00d515320
feedbrowser: fix incorrect usage of LIMIT in prepared statement
7 years ago
Tobias Bell
af3663edec
Don't bail out if git gc removed refs
7 years ago
Andrew Dolgov
68d9c412ea
fetch_file_contents: allow setting http Accept header
7 years ago
Andrew Dolgov
f0dbfedc81
increase buffersize to 16384 bytes
...
(also some trailing whitespace got clipped)
7 years ago
Alexander Yaburov
74a98a6ff2
increased CURLOPT_BUFFERSIZE from 128 to 256
7 years ago
Andrew Dolgov
b14f6d58b4
implement hard limits on downloaded data size for general fetching and cache plugins: MAX_DOWNLOAD_FILE_SIZE & MAX_CACHE_FILE_SIZE
7 years ago