Commit Graph

  • f735785d3c fixed PHP error in is_contact(); Code formatting azett 2023-01-21 13:04:52 +01:00
  • d5d14f87a3
    Merge pull request #190 from Fraenkiman/upstream/issue145 Arvid Zimmermann 2023-01-21 12:31:51 +01:00
  • 9a30cfe4a6 Update plugin.bbcode.php Fraenkiman 2023-01-14 18:45:11 +01:00
  • 47aa4cb37d Insert translation for Home, Logout in Admincenter Fraenkiman 2023-01-14 01:36:37 +01:00
  • bb436ddc3b solves issue #145 Fraenkiman 2023-01-11 21:53:23 +01:00
  • 9d5053326a Update admin.css Fraenkiman 2023-01-11 01:45:25 +01:00
  • 24595d595a
    Merge pull request #185 from Fraenkiman/master Arvid Zimmermann 2023-01-08 13:40:41 +01:00
  • 7644f78d8b added #188 azett 2023-01-08 13:26:52 +01:00
  • f6394eac7a fixes #188 azett 2023-01-08 13:24:41 +01:00
  • 77600b6d1c added #186, #187 azett 2023-01-08 13:14:09 +01:00
  • 7967cd9df9 added #186, #187 azett 2023-01-08 13:12:47 +01:00
  • 0ee4f2e8a7 fixes #87, possible XSS in config panel azett 2023-01-08 13:11:22 +01:00
  • 264217f318 Fixes #186, possible XSS in comments azett 2023-01-08 13:04:12 +01:00
  • 180366f88d
    Merge branch 'flatpressblog:master' into master Fraenkiman 2023-01-01 02:58:50 +01:00
  • 8c79821e9e
    Update CHANGELOG.md Arvid Zimmermann 2022-12-30 12:56:23 +01:00
  • 37597afee8 check for correct admin referer on enable/disable plugin (see #64) azett 2022-12-30 12:52:03 +01:00
  • 516bdc173a check for correct admin referer on delete entry (see #64) azett 2022-12-30 12:46:35 +01:00
  • 8f57ddf03d Update toolbar.tpl Fraenkiman 2022-12-30 04:50:53 +01:00
  • 8ac157cc1b
    Merge branch 'flatpressblog:master' into master Fraenkiman 2022-12-29 22:16:49 +01:00
  • b6a185f90f
    added security researchers Arvid Zimmermann 2022-12-29 21:44:23 +01:00
  • 3b39bc6716 added #183 azett 2022-12-29 21:27:53 +01:00
  • 3a32aad0de fixes #183 azett 2022-12-29 21:21:16 +01:00
  • becd7e569a
    Merge branch 'flatpressblog:master' into master Fraenkiman 2022-12-29 17:06:58 +01:00
  • 88494f5526 check for correct admin referer on deletefile (see #64) azett 2022-12-29 15:01:49 +01:00
  • d8991285c6 added API doc; fixed code formatting azett 2022-12-29 14:20:31 +01:00
  • aa10022f48 removed ancient unused file azett 2022-12-29 13:19:06 +01:00
  • 19c16493a8 Update admin.static.write.tpl Fraenkiman 2022-12-28 18:02:35 +01:00
  • 2656ad68bc PHP functions used as modifier must be registered as modifier explicitly as of Smarty 4.3 - fixed. azett 2022-12-28 13:21:51 +01:00
  • c2ce07be57 more i18n for new comment mail subject azett 2022-12-28 13:12:59 +01:00
  • a1f7e99486
    Merge pull request #181 from Fraenkiman/master Arvid Zimmermann 2022-12-28 13:03:12 +01:00
  • 0928ae8a70 PrettyURLS plugin does not prevent directory browsing Fraenkiman 2022-12-26 02:36:47 +01:00
  • fc9bcf45e8 Subject line of email when new comment is not translated Fraenkiman 2022-12-26 02:17:16 +01:00
  • 34ea684565 added #180 azett 2022-12-25 20:37:05 +01:00
  • 229752b510 fixes #180, possible XSS in entry list azett 2022-12-25 20:32:55 +01:00
  • 91857ec800
    description changed Arvid Zimmermann 2022-12-25 15:05:48 +01:00
  • 5483ebc129
    added #176 #177 #178 #179 Arvid Zimmermann 2022-12-25 15:04:45 +01:00
  • 5d5c7f6d8f fixes #179, preventing path traversal azett 2022-12-25 15:00:06 +01:00
  • 3cc223dec5 fixes #178, possible XSS via uploaded XML & MD files azett 2022-12-25 14:42:08 +01:00
  • d3f3294965 fixes #177, possible XSS in Media Manager plugin azett 2022-12-25 14:32:08 +01:00
  • e53acdeef3 fixed translation azett 2022-12-25 14:23:03 +01:00
  • 5f23b4c2ea fixes #176, possible XSS in setup azett 2022-12-25 14:16:25 +01:00
  • 2e7cac5c03
    added #174 Arvid Zimmermann 2022-12-18 13:28:09 +01:00
  • 9c4e5d6567 Added .htaccess to prevent directory browsing. azett 2022-12-18 13:24:38 +01:00
  • a91ca486c4 Index can't be backed up if cache needs to be built. Added helpful error message. azett 2022-12-18 12:51:02 +01:00
  • 69fef257c5 Leggero: Autofocus for username input in login form azett 2022-12-18 12:22:11 +01:00
  • d8d7e3b166 PHP functions used as modifier must be registered as modifier explicitly as of Smarty 4.3 - fixed. azett 2022-12-18 12:20:43 +01:00
  • 571b061adc PHP functions used as modifier must be registered as modifier explicitly as of Smarty 4.3 - fixed. azett 2022-12-17 20:47:24 +01:00
  • f6ea8304cb
    We have a name for release 1.3 :) Arvid Zimmermann 2022-12-17 20:02:44 +01:00
  • 1a6716971f
    added #172 Arvid Zimmermann 2022-12-17 14:45:42 +01:00
  • 742f8b04f2 added SVG to forbidden file types in order to prevent possible XSS - see https://github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2022-24588/CVE-2022-24588.pdf azett 2022-12-17 14:39:15 +01:00
  • c4cc70e7ea
    added latest changes Arvid Zimmermann 2022-12-17 14:32:55 +01:00
  • 2782e1a087
    added latest changes Arvid Zimmermann 2022-12-17 14:32:17 +01:00
  • 0a7ad2ccb8 fixes #153 - thx laborix! azett 2022-12-17 14:23:23 +01:00
  • 5ad4647e94 Merge branch 'master' of https://github.com/flatpressblog/flatpress azett 2022-12-17 13:09:07 +01:00
  • 7d748fe62a fixes #171 - thx! :) azett 2022-12-17 13:09:00 +01:00
  • dfa8e3013b fixes #170, thx for reporting! azett 2022-12-17 12:38:10 +01:00
  • ba6ce382a5 removed unnecessary line azett 2022-12-17 12:32:33 +01:00
  • 9912982a94
    Merge pull request #169 from fabianosantosnet/master Arvid Zimmermann 2022-12-16 19:43:17 +01:00
  • a3067cf47f update some plugins to portuguese Fabiano Santos 2022-12-13 22:42:33 -03:00
  • cbc421a4fe
    updated Smarty version, removed #132 (-> #158) Arvid Zimmermann 2022-12-13 20:18:27 +01:00
  • fd6818c559 AdminArea plugin: Localized phrase "Login" azett 2022-12-12 21:11:09 +01:00
  • a354636fde
    Merge pull request #167 from fabianosantosnet/master Arvid Zimmermann 2022-12-12 19:49:02 +01:00
  • 9218d118c9 Editor toolbar back to working as intended. Fixes #168, thanks for reporting in this detailled manner! azett 2022-12-11 14:26:58 +01:00
  • 185a27d35d PHP functions used as modifier must be registered as modifier explicitly as of Smarty 4.3 - fixed. azett 2022-12-11 14:04:12 +01:00
  • 1c6b423e48 Updated Smarty to 4.3.0. And the FlatPress-specific Smarty plugins now have their own directory, represented by the new constant FP_SMARTYPLUGINS_DIR. azett 2022-12-11 13:30:29 +01:00
  • fc76d6639e update some plugins to portuguese Fabiano Santos 2022-12-04 21:34:41 -03:00
  • 5697a82aec
    added @fabianosantosnet Arvid Zimmermann 2022-12-04 14:39:40 +01:00
  • 8c7a6c87a2
    Merge pull request #166 from fabianosantosnet/master Arvid Zimmermann 2022-12-04 14:35:31 +01:00
  • 6324f2bf17 update portuguese language Fabiano Santos 2022-11-27 13:02:30 -03:00
  • cfd67fd306
    typos Arvid Zimmermann 2022-11-19 14:37:22 +01:00
  • bee5635ec6 Fixed PHP warning - thx laborix! azett 2022-11-13 13:16:45 +01:00
  • 9d918dd107
    added link to Smarty upgrade guide Arvid Zimmermann 2022-11-02 21:24:48 +01:00
  • b0b5af3d97
    Update CHANGELOG.md Arvid Zimmermann 2022-11-01 20:34:13 +01:00
  • d4ff88fe58 updated jQuery (3.6 to 3.6.1) and jQueryUI (1.13.1 to 1.13.2) azett 2022-11-01 13:58:13 +01:00
  • 432b352c26 fixed Italian language pack by Giacomo Margarito - grazie mille! :) azett 2022-11-01 13:39:20 +01:00
  • fbb525a382 added #83 azett 2022-10-12 19:50:39 +02:00
  • 5ad886b894 fixes #83: Class-named constructors in Akisment plugin; also: PHP warnings fixed azett 2022-10-11 21:11:30 +02:00
  • bdf9e780e1 fixed more PHP warnings - thx laborix! azett 2022-10-11 20:10:20 +02:00
  • ac571a5f69 fixed PHP warning on [url=][/url] azett 2022-10-11 15:39:05 +02:00
  • 1acedaf149 fixed branch name to "master" azett 2022-10-11 14:36:23 +02:00
  • 42d72855a6 fixed endless loop in entry overview; fixed some PHP warnings; images dir is created if not existant on gallery creation azett 2022-10-11 14:16:49 +02:00
  • 80abe0a55d fixed endless loop in entry overview; fixed PHP warning azett 2022-10-11 13:43:19 +02:00
  • 227b4d30d8
    typo Arvid Zimmermann 2022-10-09 21:13:30 +02:00
  • c4ddc545b9
    requirements: more detailled Arvid Zimmermann 2022-10-09 21:12:37 +02:00
  • abd2fa934b
    Added PHP version info Arvid Zimmermann 2022-10-09 20:40:24 +02:00
  • e19b78ac13 fixed PHP warnings azett 2022-10-09 15:56:41 +02:00
  • 1b9022c5f6 fixed some errors occuring in Apache error log - thx laborix azett 2022-10-09 15:09:55 +02:00
  • 36b3e50006 fixed Smarty code: Replaced strftime() with strftime_replacement(); original Smarty file kept azett 2022-10-09 14:18:34 +02:00
  • 74f75ae40d added replacement function for strftime(), fixes #92 - thx @bohwaz! azett 2022-10-08 14:58:11 +02:00
  • 430b3304a5 Smarty: update to 4.2.1 azett 2022-10-08 13:51:33 +02:00
  • c30d52b284 Merge branch 'master' of https://github.com/flatpressblog/flatpress into issue94_smartyupdate azett 2022-10-08 13:43:33 +02:00
  • d88262ad9a
    removed redundant social media links Arvid Zimmermann 2022-10-06 19:57:34 +02:00
  • ff0f320e28 changelog for #148 azett 2022-10-02 15:06:39 +02:00
  • 4d9b7a9b41 added German translation - thx @Fraenkiman! Closes #148 azett 2022-10-02 15:04:40 +02:00
  • 23dcf5d1e7 reworked Dutch translation by G0erwt - hartelijk dank! azett 2022-10-02 13:28:51 +02:00
  • 266b217161 Fixes #156 - thx @Fraenkiman azett 2022-10-02 12:49:24 +02:00
  • b45b7b25ae changelog for 34fb2f3 azett 2022-10-01 14:15:37 +02:00
  • 34fb2f3e6b HttpOnly flag for session cookie to prevent possible XSS - thx @melbinkm! azett 2022-10-01 14:07:54 +02:00
  • 9df201725f Changelog for 92c0b2a azett 2022-10-01 13:45:12 +02:00
  • 92c0b2a517 Bufix: Checking uploaded files' extensions looked for the tmp file name, not the actual file name. Fixes #152 as well - thanks @s4n-h4xor! azett 2022-10-01 13:33:34 +02:00