Commit graph

311 commits

Author SHA1 Message Date
Klaus Weidenbach
233903c844 Add security logger to RedDAV.
Some smaller clean ups whitepsaces and tabs, use PHP_EOL, Doxygen, etc.
2014-12-14 01:50:56 +01:00
Stefan Parviainen
62dabecf97 Show tags in other channels profile field to make it easier to navigate to the channels 2014-12-07 16:19:22 +01:00
Habeas Codice
b224f8056c new system config reserved_channels
prevents members from creating channels in a reserved list
2014-11-21 15:35:59 -08:00
Habeas Codice
ac27db22c1 Merge remote-tracking branch 'upstream/master'
Conflicts:
	boot.php
	include/dba/dba_driver.php
	include/diaspora.php
	include/follow.php
	include/session.php
	include/zot.php
	mod/photos.php
	mod/ping.php
2014-11-13 13:06:31 -08:00
Habeas Codice
1a5a5c7edb PostgreSQL support initial commit
There were 11 main types of changes:
- UPDATE's and DELETE's sometimes had LIMIT 1 at the end of them. This is not only non-compliant but
it would certainly not do what whoever wrote it thought it would. It is likely this mistake was just
copied from Friendica. All of these instances, the LIMIT 1 was simply removed.
- Bitwise operations (and even some non-zero int checks) erroneously rely on MySQL implicit
integer-boolean conversion in the WHERE clauses. This is non-compliant (and bad programming practice
to boot). Proper explicit boolean conversions were added. New queries should use proper conventions.
- MySQL has a different operator for bitwise XOR than postgres. Rather than add yet another dba_
func, I converted them to "& ~" ("AND NOT") when turning off, and "|" ("OR") when turning on. There
were no true toggles (XOR). New queries should refrain from using XOR when not necessary.
- There are several fields which the schema has marked as NOT NULL, but the inserts don't specify
them. The reason this works is because mysql totally ignores the constraint and adds an empty text
default automatically. Again, non-compliant, obviously. In these cases a default of empty text was
added.
- Several statements rely on a non-standard MySQL feature
(http://dev.mysql.com/doc/refman/5.5/en/group-by-handling.html). These queries can all be rewritten
to be standards compliant. Interestingly enough, the newly rewritten standards compliant queries run
a zillion times faster, even on MySQL.
- A couple of function/operator name translations were needed (RAND/RANDOM, GROUP_CONCAT/STRING_AGG,
UTC_NOW, REGEXP/~, ^/#) -- assist functions added in the dba_
- INTERVALs: postgres requires quotes around the value, mysql requires that there are not quotes
around the value -- assist functions added in the dba_
- NULL_DATE's -- Postgres does not allow the invalid date '0000-00-00 00:00:00' (there is no such
thing as year 0 or month 0 or day 0). We use '0001-01-01 00:00:00' for postgres. Conversions are
handled in Zot/item packets automagically by quoting all dates with dbescdate().
- char(##) specifications in the schema creates fields with blank spaces that aren't trimmed in the
code. MySQL apparently treats char(##) as varchar(##), again, non-compliant. Since postgres works
better with text fields anyway, this ball of bugs was simply side-stepped by using 'text' datatype
for all text fields in the postgres schema. varchar was used in a couple of places where it actually
seemed appropriate (size constraint), but without rigorously vetting that all of the PHP code
actually validates data, new bugs might come out from under the rug.
- postgres doesn't store nul bytes and a few other non-printables in text fields, even when quoted.
bytea fields were used when storing binary data (photo.data, attach.data). A new dbescbin() function
was added to handle this transparently.
- postgres does not support LIMIT #,# syntax. All databases support LIMIT # OFFSET # syntax.
Statements were updated to be standard.

These changes require corresponding changes in the coding standards. Please review those before
adding any code going forward.

Still on my TODO list:
- remove quotes from non-reserved identifiers and make reserved identifiers use dba func for quoting
- Rewrite search queries for better results (both MySQL and Postgres)
2014-11-13 12:21:58 -08:00
friendica
4b9ec6645b cleanup 2014-11-11 20:44:43 -08:00
friendica
b5af667985 slow progress on sys publishing, making sure all the data we need is in the places we need it but validate it anyway 2014-11-11 19:29:30 -08:00
friendica
570577a990 a couple of places where we need to look for a sys channel euid. 2014-11-11 18:05:50 -08:00
friendica
06e5d0798c and urlencode that. 2014-11-11 16:09:45 -08:00
friendica
09b09dedbc Most directory searches are POST. get_query_args() only handles GET so that had to be fixed or page 2 of directory search results wouldn't match the search. 2014-11-11 16:06:16 -08:00
friendica
e80c20d258 Don't recognise hashtags starting with #, e.g. ### 2014-10-15 17:55:20 -07:00
marijus
289f57f79e template for searchbox and some more work on saved searches 2014-10-08 12:36:26 +02:00
friendica
72ec78d027 trying to call mod/magic on rss resources - which have no hub 2014-09-22 23:49:12 -07:00
friendica
e8854bb19d better way to deal with effective_uid 2014-09-22 22:03:19 -07:00
friendica
e4e9098f39 prevent red#matrix smilie replacements from tripping over each other. 2014-09-08 21:36:33 -07:00
friendica
8cbeeb09da extra_query_args() restricted to $_GET only. $_REQUEST was adding cookies and this is undesired and potentially a security issue. 2014-09-06 03:11:07 -07:00
friendica
28b75b028d ajax work 2014-09-06 00:37:15 -07:00
friendica
01a5ac92a8 improved logging if you're using php54 or later 2014-09-04 23:13:46 -07:00
friendica
a63de472cf various rss fixes 2014-08-31 20:51:05 -07:00
Thomas Willingham
450434a690 Revert - see comments. 2014-08-26 20:13:27 +01:00
Thomas Willingham
cc2bef67dd HTML doesn't work without ACCOUNT_ROLE_ALLOWCODE, so don't offer it
as an option.
2014-08-26 19:09:00 +01:00
friendica
831714f0f0 profile edit - missing visibility and drop link on non-default profiles, re-arrange order of replacing red#matrix smilie so it works correctly, accept a post with body content of '0' which was interpreted by x() as nothing (was treated as integer). 2014-08-21 16:46:24 -07:00
friendica
b3d450626e provide an overt indication that a post/comment was edited. 2014-08-18 22:44:03 -07:00
friendica
de97073e13 don't subdue archived connections in viewconnections 2014-07-16 22:32:18 -07:00
friendica
98e85917bb subdue archived connections in group editor and don't show at all in contact_block() 2014-07-16 22:21:29 -07:00
friendica
17bd39fcd4 rename friendica_smarty 2014-07-13 23:00:03 -07:00
jeroenpraat
29aece3472 added A NAME/ID to whitelist in HTMLpurifier. That means we can now make vintage indexes in web pages. 2014-07-11 22:28:26 +00:00
friendica
8a84718163 for non-post items (e.g. photos, events, whatever) add mention tags explicitly to the output rendering since they may not be present in the post body. 2014-06-30 22:46:17 -07:00
friendica
33cf83175d use consistent capitalisation in the item actions menu 2014-05-29 21:34:08 -07:00
friendica
345f784f67 fix search to use in app 2014-05-22 21:24:41 -07:00
friendica
2fe8bae7a5 show hidden connections in contact block if and only if the observer is the profile owner 2014-05-08 17:08:34 -07:00
friendica
c36489a753 Unfortunate omission 2014-04-26 19:33:39 -07:00
friendica
9026ea649a better mapping of visible connections 2014-04-14 17:29:19 -07:00
friendica
dc1a529b63 remove extra tag logging 2014-04-12 23:57:19 -07:00
friendica
4fda10db2f don't match quote remnants 2014-04-12 17:04:54 -07:00
friendica
d7aaff459f let normal hashtags be quoted strings also 2014-04-12 16:58:19 -07:00
friendica
03753f463e convert /network saved search to bootstrap buttons 2014-04-07 16:25:35 -07:00
friendica
28b7eedc45 check_webbie (webbie validator) returning bad webbies 2014-04-06 19:59:00 -07:00
friendica
93f90040a1 community tags don't show up in the tagged posts because we removed the displayed list of hashtags at the bottom (which are usually redundant since hashtags are usually present in the message text). This brings them back, but only for tags which aren't currently present in the message body (e.g. community tags) 2014-03-31 17:03:07 -07:00
friendica
653d7df86d issue #378, failure to correctly link tags where one tag contains a substring of the other (depends on the order they are discovered). 2014-03-30 20:53:59 -07:00
friendica
ecb2e52a74 little fixes of hopefully nil significance 2014-03-16 20:34:21 -07:00
friendica
3cb179aff1 contact_block() not being shown to unauthenticated visitors - even if perms allow. Also separate the permissions logic for this function so that we can have a mini-profile widget and a separate contact_block widget instead of always lumping them together. We probably also should move contact_block() outside of include/text.php as it doesn't really belong there. Just not sure where it belongs - perhaps contact_widgets wouold be a good place. 2014-03-13 17:13:36 -07:00
friendica
7baeb45183 some anomolies found when viewing connections in various cases. 2014-03-02 19:40:59 -08:00
friendica
6ac81c9360 fix zrl bookmarks which broke with this checkin: c9192991c9
It was documented that:
  Issues: Currently the order of HTML parameters in the text is somewhat rigid and inflexible.
but as that was in a different function it was easy to overlook.
2014-02-18 19:47:13 -08:00
friendica
d6ab975b18 operation snakebite continued. openid now works for local accounts using the rmagic module and after storing your openid in pconfig. This is just an interesting but trivial (in the bigger scheme of things) side effect of snakebite. The snake hasn't even waken up yet. 2014-02-17 19:48:05 -08:00
friendica
ebd52368bb strip hard-wired zids from posted links as they will have the wrong identity when somebody tries to view the link 2014-02-16 14:13:26 -08:00
marijus
a606fc0ba3 add a sanitized style tag to bbcode 2014-02-05 14:34:25 +01:00
friendica
8a11c29413 make links in comments bookmark-able 2014-02-04 19:39:56 -08:00
friendica
9ce3dac479 some tagging fixes - including old bugs which were never reported 2014-02-03 19:54:32 -08:00
friendica
876f5d4de0 transmit, receive, and parse bookmarks 2014-02-03 19:38:15 -08:00