summaryrefslogtreecommitdiffstats
path: root/application
AgeCommit message (Collapse)AuthorFilesLines
2014-09-28file/cron: Protecting identifiersRafael Bodill1-1/+2
2014-09-19Fixing multipaste delete queriesRafael Bodill2-38/+33
2014-09-19Fix user/register mistaken query handlingRafael Bodill1-1/+1
2014-09-19WIP: Cascading deleteRafael Bodill2-20/+40
2014-09-19where_in for in array queries a proper count usageRafael Bodill2-4/+4
2014-09-19Fix timestamp adjusting for a list of arraysRafael Bodill1-2/+6
2014-09-19Correct unsupported open/close where query statementsRafael Bodill1-3/+1
2014-09-19File controller uses query builder, except 2 queriesRafael Bodill1-32/+36
2014-09-18Integrating query builder in modelsRafael Bodill2-51/+42
2014-09-18User controller queries built dynamicallyRafael Bodill1-74/+72
2014-09-18Query builder in user login and controllerRafael Bodill2-20/+19
2014-09-11Fix black background in thumbnails with transparencyFlorian Pritz1-0/+6
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-08-30Improve migration error messageFlorian Pritz1-2/+2
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-08-29Set title on code render pageFlorian Pritz1-0/+2
This got lost in the multipaste change. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-08-29Document multipastes on the front pageFlorian Pritz1-0/+7
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-08-29Fix code renders for cli clientsFlorian Pritz2-0/+2
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-08-29add multipaste supportFlorian Pritz20-274/+888
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-08-29Add multiple file input boxes on upload formFlorian Pritz1-1/+4
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-08-29Simplify sorting of history tableFlorian Pritz1-3/+4
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-08-29Display better errors for CLI requestsFlorian Pritz3-125/+15
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-07-23Move migration code to CLI callable functionFlorian Pritz5-13/+69
This is necessary to prevent migrations from running multiple times in parallel. A git hook can be used to run this after checkout so impact should be fairly low. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-07-22update gentoo overlay URLFlorian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-07-11Reword invitation text on front pageFlorian Pritz1-1/+2
The new text is friendlier and less presumptuous and actually describes the reason why I introduced the invitation system. Not sure why I didn't write that in the first place. Thanks to <https://lobste.rs/about> for the idea. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-06-06Merge remote-tracking branch 'remotes/upstream/2.2-stable' into workingFlorian Pritz2-1/+11
Signed-off-by: Florian Pritz <bluewind@xinu.at> Conflicts: system/libraries/Session.php user_guide/
2014-04-17migration 12: remove dependencies on users table againFlorian Pritz1-9/+0
When using external authentication databases (ldap, fluxbb, ..) the users table is empty so adding the constraints won't work. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-04-15Use alter table to rename tablesFlorian Pritz1-2/+2
For some strange reason using "rename table" causes an exception in system/database/DB_driver.php:query() because it trys to call num_rows() on a boolean. Using "alter table" works. According to the php manpage mysqli::query() it should return a boolean too, but whatever... Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-04-15migration 12: Remove tablename, fix ordering problemFlorian Pritz1-6/+6
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-04-12Add foreign keys to databaseFlorian Pritz3-2/+31
Changing the referrer value for the root admin from 0 to NULL to make the foreign key check work. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-03-02Clean up default config commentsFlorian Pritz2-21/+34
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-02-27Added a .htaccess file to the application/cache folder for ↵Ender Teszla1-0/+1
security-in-depths reasons (de bene esse).
2014-02-27Deleted useless .htaccess file, added missed index.html files.Ender Teszla2-1/+10
2014-02-23user/create_apikey: Use empty comment if unsetFlorian Pritz1-0/+1
False gets converted to "0" when being stored in the DB which we don't want. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-02-21Implement multiple access levels for api keysFlorian Pritz6-16/+71
This allows to use an api key to write a completly standalone client. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-02-15Work around PHP 5.3 limitationFlorian Pritz1-3/+5
$this in anonymous functions is only supported in PHP >= 5.4 Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-01-24client: add gentoo overlayFlorian Pritz1-0/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-01-21Disable automatic code display for SVG filesFlorian Pritz1-1/+0
People usually want to view them rather than read the code. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2014-01-10let GD itself determine what it can readFlorian Pritz1-14/+5
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-11-09use cache_function() everywhereFlorian Pritz2-21/+16
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-11-09cache file/thumbnail responsesFlorian Pritz1-5/+13
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-11-09implement cache_function to easily cache return values of functionsFlorian Pritz1-0/+18
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-10-31Fix alignment of date column in plain text viewFlorian Pritz1-1/+3
This got broken by 2a6a1c63cb21015009fe4fd13f62cdac64e1fe36 and 05a4d686b578794c180ddfaf4945a9d7443f330e. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-10-22Remove unnecessary TODOFlorian Pritz1-1/+0
It's fine if users can invite an unlimited amount of people. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-10-22Update CSP header; change order to fix svg display in firefoxFlorian Pritz1-1/+1
Apparently firefox doesn't like "style-src * 'unsafe-inline'", but wants "style-src 'unsafe-inline' *" otherwise it doesn't honor 'unsafe-inline'. In chromium both behave the same. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-10-06Fix display error when redering markdownLukas Epple1-2/+4
Initial-patch-by: Lukas Epple <lukas.epple@me.com> Switch from <table> to <div> like we did for pygments. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-09-25Align the brand image correctlyMarkus Cisler1-1/+1
2013-09-25Remove chmod on uploaded filesFlorian Pritz1-2/+0
It interferes with multiuser setups if you use X-Sendfile and it isn't really needed anyway because you can set an upload_path outside the docroot and because the default path is protected by an .htaccess file. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-09-25Remove whitespaces from upload form textareaPierre Schmitz1-4/+4
2013-09-25Change upload form layoutMarkus Cisler1-31/+45
2013-09-25Fix indentation on upload formMarkus Cisler1-13/+13
2013-09-25Make tables responsiveMarkus Cisler4-91/+99