summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2016-03-29Increase size of password field in DBFlorian Pritz2-1/+28
The php documentation for password_hash recommends 255. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-03-29Use PHP's password_hash functionFlorian Pritz3-259/+2
This drops a third party library, but bumps our required php version to 5.5 which is currently old stable. Earlier versions are no longer supported by php upstream nor by us. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-02-26Fix MYSQL error in migration 14/15Florian Pritz2-24/+16
Error was: You can't specify target table 'testsuite_prefix_file_storage' for update in FROM clause The new code is ported from the existing postgres migration. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-02-19view/user/profile: Fix typoFlorian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-01-24PHP7: Ignore Notice when getting mimetype0.9.10Florian Pritz1-0/+5
Sometimes php7 throws an internal notice in this function which we convert to an exception. Catching the exception will however not set $mimetype so this error needs to be ignored. This should be removed once php has fixed the bug. References: https://bugs.php.net/bug.php?id=71434 Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-12-14PasswordHash: Fix PHP7 compatability0.9.9Florian Pritz1-1/+1
Using the class name for the constructor is deprecated. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-11-23l/Pygments: Fix exception for filenames ending with a dotFlorian Pritz2-1/+11
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-11-02view/client: Hardcode URLsFlorian Pritz3-7/+4
Clients are only hosted on paste.xinu.at and everywhere else the links will point to missing files so they become useless. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-11-02l/Image/D/imagemagick: Allow output on stderrFlorian Pritz1-1/+1
Imagemagick sometimes output warnings about files that do not conform to standards, but still renders them. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-10-06Update NEWS0.9.8Florian Pritz1-0/+3
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-10-06Fix handling of %10 in paste contentFlorian Pritz1-1/+1
CI tries to remove invisible escape chars, but this breaks handling of code like the following: if (m == 2 && (y%4 == 0 && y%100 != 0)|| y%400 == 0) When pasted via the client all is fine, but when pasted in the webui CI strips '%10' from the string and leaves 'y0 != 0'. The second parameter of remove_invisible_characters indicates whether the string is urlencoded so I believe that setting it to false should be fine. This only disables the code that removes % escapes. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-30Bring a/views/file_plaintext in line with a/v/fileFlorian Pritz8-4/+30
- Add missing files - Fix paths missing FCPATH - Remove left over header/footer Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-28Fix login redirect with multipate URLFlorian Pritz1-1/+1
The - from m-ID was missing in the regex. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-26f/cron: Fix missing field when deleting unowned uploadsFlorian Pritz1-2/+3
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-20Merge branch 'postgres' into devFlorian Pritz16-77/+157
2015-09-20Migration 16: Increase length of ci_session.ip_address for IPv6Florian Pritz2-1/+28
Reported-by: Michael Mueller <michael.mueller@selfnet.de> Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-20postgres: Add missing prefix to index creationFlorian Pritz7-11/+11
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-20postgres: Adapt MySQL query for thumbnail historyFlorian Pritz1-3/+3
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-20postgres: Fix CI's postgres version detectionFlorian Pritz1-1/+2
This broke insert_id() because it expects a 'server' key in the returned array yet no array is returned. This should work just fine for postgres >7.4 now. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-20postgres: Fix multiple queries using MySQL syntaxFlorian Pritz2-11/+11
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-20Implement migration 14 for postgresFlorian Pritz3-49/+101
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-20Fix missing prefix in migration 7Florian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-20l/Image::type_supported: improve performanceFlorian Pritz1-3/+10
service/file::history calls this for every entry which is rather slow. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-20API 2.1: Add thumbnail link to historyFlorian Pritz4-4/+26
Also adjust test cases to check for the new value. API v1 does not change. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-18Update NEWS0.9.7Florian Pritz1-0/+5
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-14API 2.0: Remove private fields from file/historyFlorian Pritz6-1/+620
Since this is a breaking change bump the api version to 2. The private fields are user_id and multipaste_id which where leaked via the multipaste_items field. This commit also adds a test case to both api versions that checks the returned fields. NOTE: Most of this commit is copied from the files of api v1 so when viewing the diff use --find-copies-harder for an easy to read diff. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-14API 1.4: Add more values to file/get_configFlorian Pritz3-2/+15
These are necessary for clients that want to send lots of fields e.g. in a delete request or upload multiple files in one upload request. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-09-11Make robots.txt available in ./public_htmlFlorian Pritz2-2/+3
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-18Colorbox: Display number of images0.9.6Florian Pritz2-3/+3
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-18claim_id: Support multiple upload batchesFlorian Pritz1-5/+13
If the user has multiple tabs open, but is not logged in this will be called multiple times (unless he logs in after the first upload batch) and earlier uploads would be lost. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-18Fix redirect URI when using multiple tabsFlorian Pritz6-23/+21
If we store only the last called URI in the session we can't support multiple browser tabs that all need to log in again. Fix this by storing the URI in the URL. Also change a trim() to ltrim() so that the URI string we store keeps it's trailing slash. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-10Increase thumbnail cache ttlFlorian Pritz2-1/+3
Also try to clean up when files are deleted since 1 month is a rather long time. Granted, thumbnails are small, but whatever Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-09Move thumbnail placeholder and container width to cssFlorian Pritz3-7/+44
If the thumbnail placeholders are properly positioned via css we can display them early. We can also take some work off lazyload by setting a placeholder color in css thus making rendering for lots of thumbnails faster. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-09Improve performance of thumbnail historyFlorian Pritz2-13/+17
- Use the filedata we already have in c/file->upload_history_thumbnails() rather than fetching it per id in m/mfile->valid_id - Construct the config array for s/f::valid_id only once and not for every validation. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-09Increase performance of thumbnail viewFlorian Pritz1-1/+17
site_url is rather slow and the improvement is noticeable when there are lots of thumbnails (thumbnail history). Also make the code more readable in the process by inserting some linebreaks. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-08Cache/file: Catch unlink exceptionFlorian Pritz1-1/+1
Call delete() which already catches the exception if the file is missing. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-04Improve colorbox navigation and document it0.9.5Florian Pritz3-5/+6
- Make buttons fixed so you don't have to move the mouse - Support h/l for vimperator users - Document mappings so users actually know about them Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-04Add audio and video players to multipastesFlorian Pritz4-1/+28
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-02Add PLS playlist support for multipastesFlorian Pritz2-0/+32
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-02Merge branch 'add-range-selection' into devFlorian Pritz3-2/+11
2015-08-02Fix checkboxes.jsFlorian Pritz3-3/+9
- Incorrect path to .js file - Autoloading and the data-api don't work so load and run it explicitly Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-08-02Support range selection on history pagetaxus133-2/+5
Support range selection on history page by adding jquery.checkboxes
2015-08-02Fix handling of php errorsFlorian Pritz1-0/+5
When the exception handler moved to a dedicated class _exception_handler was no longer defined so CI defined it with it's own code which does not throw an exception but rather just prints the less helpful CI error page. This could be triggered by deleting an upload while the cache_backend is set to "file" and the cache does not hold the filedata for the upload being deleted. In that case PHP throws a warning (unlink on a missing file) which would no longer be caught with try/catch in the cache backend's delete() function. Now the error is catchable again. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-07-18tests: Run from ./public_html0.9.4Florian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-07-18index.php: Include correct fileFlorian Pritz1-1/+1
If $PWD is not the root of the working copy this would try to include $PWD/public_html/index.php. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-07-18Update NEWS0.9.3Florian Pritz1-0/+6
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-07-18Display hash on file info pageFlorian Pritz1-0/+4
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-07-18Fix double path in exception handlerFlorian Pritz1-1/+1
APPPATH is an absolute path already so prepending FCPATH will make an invalid path. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-07-10Make javascript baseUrl honor subdirsFlorian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2015-06-05Keep email reset keys after useFlorian Pritz1-2/+0
The user might click the wrong link or might change their mind and it is really not necessary to clean them up early. Let the cron job take care of that. Signed-off-by: Florian Pritz <bluewind@xinu.at>
generated by cgit v1.2.3-24-g4f1b (git 2.32.0) at 2024-11-03 18:36:16 +0100