1024 commits

Author	SHA1	Message	Date
Mario Vavti	0f0fba0e9e	missing includes	2017-04-13 23:20:09 +02:00
zotlabs	a9bda2b12e	sql error photos_albums_list with non-logged-in viewer	2017-04-03 10:55:42 +02:00
zotlabs	5fb7ea8dbd	fix connectDefaultShare generated js function, though it isn't obvious if we still use it.	2017-04-03 10:53:07 +02:00
zotlabs	fbba78411d	app sorting issue	2017-04-03 10:50:43 +02:00
git-marijus	89e3f3210f	Merge pull request #710 from dawnbreak/importcsrf ... 🔒 Add CSRF protection for import and import_items.	2017-03-31 13:40:02 +02:00
zotlabs	a20fd4d463	get rid of some more deprecated uses of $a	2017-03-31 10:31:29 +02:00
zotlabs	bfd506f184	remove obsolete app argument from load_pdl	2017-03-31 10:30:41 +02:00
zotlabs	c20aa6062c	get rid of get_app()	2017-03-31 10:30:17 +02:00
zotlabs	57a8b3f857	provide compatibility with old-style update system	2017-03-31 10:26:44 +02:00
zotlabs	6e5a06421f	get rid of 'davguest' and allow for project specific DB updates (currently db updates are common between all possible projects/subprojects/forks).	2017-03-31 10:26:06 +02:00
zotlabs	5f0004b416	move db_upgrade to zlib	2017-03-31 10:25:27 +02:00
Klaus Weidenbach	81736a0129	🔒 Add CSRF protection for import and import_items.	2017-03-30 23:17:32 +02:00
Klaus	dea4879938	Merge pull request #709 from dawnbreak/docu ... Add some documentation for import functions.	2017-03-30 23:10:53 +02:00
Klaus Weidenbach	2e2f984c45	Add some documentation for import functions.	2017-03-30 23:06:00 +02:00
Mario Vavti	bb639b08f7	do not allow creating two wikis with the same name	2017-03-30 15:07:48 +02:00
zotlabs	181d9a0777	circular logic - we need the mailbox to find the last message so move the code block back where it was, and only set a direct mid if one was specified.	2017-03-30 11:54:21 +02:00
zotlabs	5219c4a09a	when clicking a notification to view a private mail message, actually view that message instead of the most recent.	2017-03-30 11:54:07 +02:00
zotlabs	a8a6d807ff	allow setting the system email name/address/reply	2017-03-29 14:14:40 +02:00
zotlabs	fe5f109af5	more cloud updates - upgrade the DAV structures as well.	2017-03-29 14:14:05 +02:00
zotlabs	f1da003020	some more photo issues	2017-03-29 14:13:10 +02:00
zotlabs	ea5a7180c7	fix photo prvnxt after all the changes yesterday	2017-03-29 14:12:24 +02:00
zotlabs	9d0e2cbd89	more work on the photo album mess	2017-03-29 14:11:56 +02:00
zotlabs	032b6f193d	photos_album_exists() requires an observer to work correctly; provide it.	2017-03-29 14:11:22 +02:00
zotlabs	e49c59959b	use the same host macro for sender address as for reply_to address	2017-03-29 14:09:58 +02:00
zotlabs	b03cd330e5	begin the process of using the relevant attach directory/path for photo albums instead of an album basename which may not be unique. Created an 'ellipsify()' function to shorten long names and keep the beginning and end intact	2017-03-29 14:09:19 +02:00
zotlabs	542fa4a08c	more markdown purification	2017-03-29 14:05:12 +02:00
zotlabs	515f1e76b0	perform attach_upgrade()	2017-03-29 14:04:44 +02:00
zotlabs	d95f7efea7	after all of this, I would be very hesitant to use any multi-user system which uses markdown and which doesn't have a large security budget.	2017-03-29 14:04:04 +02:00
zotlabs	e97dd48b4c	even more fine tuning of the markdown purifier - especially when used with the wiki	2017-03-29 14:03:24 +02:00
zotlabs	d5525a38f1	various input filter fixes	2017-03-29 13:56:31 +02:00
zotlabs	d7aaca6947	more work related to attach/photo and os_path, display_path and general code cleanup	2017-03-29 13:44:55 +02:00
zotlabs	fa629841bd	input filter updates	2017-03-29 13:39:36 +02:00
zotlabs	6ea32a8ba3	class MarkdownSoap to safely store markdown by purifying and preserving (escaped) what may be unsafe code in codeblocks. The stored item needs to be unescaped just prior to calling the markdown-to-html processor	2017-03-29 13:37:36 +02:00
zotlabs	0f7832dc30	code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.	2017-03-29 13:32:23 +02:00
Mario Vavti	107083e3e4	fix widgets for bs4 again	2017-03-29 12:43:27 +02:00
Mario Vavti	d7a9d22a15	namespace error	2017-03-29 12:09:45 +02:00
zotlabs	ecfbb10326	widget file update	2017-03-29 12:07:13 +02:00
zotlabs	6c92a240cc	remove include/widgets.php	2017-03-29 12:04:44 +02:00
zotlabs	0bad26e116	the rest of the standard widgets converted	2017-03-29 12:02:09 +02:00
Mario Vavti	cd57483ed9	namespace error	2017-03-29 11:59:20 +02:00
zotlabs	0908da9529	widgets cont.	2017-03-29 11:57:00 +02:00
zotlabs	6e101e4582	widgets cont.	2017-03-29 11:50:52 +02:00
zotlabs	f60309efa1	more widget migrations	2017-03-29 11:50:03 +02:00
zotlabs	47f4007951	more widgets	2017-03-29 11:49:32 +02:00
zotlabs	74f58818d6	filename issue	2017-03-29 11:49:03 +02:00
zotlabs	17977effe7	more widgets	2017-03-29 11:48:35 +02:00
zotlabs	477ed97c2f	convert more widgets to classes	2017-03-29 11:47:58 +02:00
zotlabs	242ef70a77	use absolute namespace	2017-03-29 11:47:07 +02:00
zotlabs	755b751614	Comanche: allow widgets to be class based and stored appropriately in Zotlabs	2017-03-29 11:45:54 +02:00
Klaus Weidenbach	49e77e0f71	Import Module documentation and @-sign replacement. ... If you copy the identity from your profile page the @-sign is invalid for the import and fails. Replace it for convenience.	2017-03-25 20:30:26 +01:00