summaryrefslogtreecommitdiffstats
path: root/application
AgeCommit message (Collapse)AuthorFilesLines
2013-02-03Abort execution if we hit any php error/warning/noticeFlorian Pritz1-1/+2
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-02-03Suppress open_basedir warning for /dev/urandomFlorian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-02-02Add tex highlightingFlorian Pritz1-0/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-31Duser: small comment fixesFlorian Pritz1-3/+3
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-30Remove userid from session upon logoutFlorian Pritz1-0/+1
No necessary, but better safe than sorry. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-30Make authentication driver configureableFlorian Pritz2-2/+6
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-30Modularize authentication systemFlorian Pritz4-37/+164
This allows to easily add LDAP and other support. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-25Refactor querying action tableFlorian Pritz2-21/+18
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-24Use the alert-error class for some error message in views/userFlorian Pritz3-3/+3
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-24m/user/username_exists: fix bug on empty/false argumentFlorian Pritz1-0/+4
username_exists(false) returned true because the condition matches any existing user. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-24Add password reset function/pages/linksFlorian Pritz7-0/+171
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-24Repurpose invitations table to actionsFlorian Pritz4-14/+54
This can be used to track data for all kinds of one-time actions like invitations and password resets. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-23Reverse sort order on upload_historyFlorian Pritz1-1/+3
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-17Support multiple uploads in the same requestFlorian Pritz6-74/+138
This change *should* be backwards compatible. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-09Fix some indentation issuesFlorian Pritz4-8/+8
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2013-01-09Fix copyright informationFlorian Pritz4-2/+16
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-12-16c/user: register() prevent DB error if username is non-asciiFlorian Pritz1-4/+4
The DB col is set to ascii_general_ci so if the username doesn't pass the charset check we shouldn't even bother query the db because that can trigger a collation error (utf-8 vs ascii). Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-11-09file/client: Add information about fb's config fileFlorian Pritz1-5/+3
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-11-09Rework file/client pageFlorian Pritz2-13/+38
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-31Fix "invite" link on upload_formFlorian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-29Add button to wrap long lines in code viewFlorian Pritz1-0/+1
Since wrapping would break the line numbers we hide them. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-26fix missing htmlspecialchars in html_header.phpFlorian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-25Increase width of paste containerFlorian Pritz1-2/+2
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-23Prevent date wrapping on history pageFlorian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-22Don't send a cli client unwanted HTML codeFlorian Pritz4-3/+16
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-22Merge upload_form.js into script.jsFlorian Pritz1-1/+0
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-22ID/info: add missing htmlspecialchars()Florian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-22switch design to bootstrap; minor fixes along the wayFlorian Pritz17-246/+360
Initial-work-by: Oliver Mader <b52@reaktor42.de> Additional-work-by: Markus Cisler <mrkscslr@gmail.com> Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-16Fall back to plain text if lexer is unknown/brokenFlorian Pritz2-15/+46
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-10Accept authentication via post parametersFlorian Pritz1-5/+18
Passing the authentication headers is slightly complicated with fastcgi so we support both and let the users choose. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-09Rename $mode to $lexerFlorian Pritz2-42/+42
Pygments calls it that and mode was an undescriptive name anyway. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-07c/file/download: display an error if highlighting failsFlorian Pritz1-5/+9
Previously we displayed an empty page since stderr usually goes to the error log of the web server. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-07c/file/download: remove useless return statementFlorian Pritz1-2/+0
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-10-07c/file/download: stop working around CI's output classFlorian Pritz1-3/+4
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-09-26c/file/_download: urldecode mode to fix lexers with spacesFlorian Pritz1-1/+1
Pygments has lexers with space in the name and those won't work unless we decode them. Example: "Duel View" Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-09-23error_general: Prevent endless loopFlorian Pritz1-2/+2
If we hit an error in the fancy code it could trigger the same error page being loaded resulting in an endless loop. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-09-11file/cron: always remove stale filesFlorian Pritz2-0/+8
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-09-10Let pygments guess input encodingFlorian Pritz1-1/+1
Assuming utf8 breaks if the input file is latin1. This automaticaly guesses if it's utf8 or latin1. If this isn't enough, we can switch to chardet, but that adds a new dependency. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-09-09m/file: add text/x-tcl to autodetectionFlorian Pritz1-0/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-08-31Fix missing require_session callFlorian Pritz1-0/+1
Trigger: echo test | curl -F "file=@-;filename=stdin" <url> Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-08-28Only create new sessions when the are really neededFlorian Pritz2-3/+39
Most sessions are just people viewing a paste. Those don't need a session until they want to log in so we don't have to pollute the database and waste resources. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-08-28Move most config files back to app/config/Florian Pritz16-2/+21
Apart from database.php, config.php and memcache.php the files shouldn't be different so we can just track them in the repo. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-08-16Add help message when running file controller via CLIFlorian Pritz1-0/+12
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-08-16html_header: fix indentationFlorian Pritz1-19/+19
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-08-16Add Content-Type meta tagFlorian Pritz1-0/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-08-16remove 'class="no"' from highlit htmlFlorian Pritz1-1/+1
No need to repeat that for every line. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-08-16switch to pygmentsFlorian Pritz212-60519/+7
- faster than geshi - easier to modify the css because there is only one - geshi upstream seems pretty dead Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-08-09rename file_mod to mfileFlorian Pritz2-33/+33
Muser already uses this scheme as it is easier to type. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-07-26fix typo in migration "add username index"Florian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2012-07-24Don't call undefined functions on error pageFlorian Pritz1-11/+84
Regression test: URL with disallowed chars: '$url/1234/.exec("asdf")' Signed-off-by: Florian Pritz <bluewind@xinu.at>
generated by cgit v1.2.3-24-g4f1b (git 2.32.0) at 2024-07-12 00:40:01 +0200