This repository has been archived on 2024-08-19. You can view files and clone it. You cannot open issues or pull requests or push a commit.

zotlabs 0f7832dc30 code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.

2017-03-29 13:32:23 +02:00

..

dba

use array_shift - it's cleaner

2016-12-15 16:41:01 -08:00

Import

move diaspora account import to the diaspora plugin

2017-01-31 16:01:47 -08:00

photo

do not choke if photo_factory() returns null

2017-01-15 13:23:28 +01:00

account.php

remove more backquotes

2016-10-09 16:13:49 -07:00

acl_selectors.php

testing and bug fixes virtual profile groups

2017-02-12 17:40:18 -08:00

activities.php

more urlencoding of message-ids which are used in links

2017-01-18 19:36:06 -08:00

api_auth.php

issue #460

2016-07-25 13:27:17 -07:00

api_zot.php

channel export - use a selected list of functional data categories to export; this allows one to export single data sets instead of always exporting everything we know about

2017-01-31 15:28:25 -08:00

api.php

more api work

2016-11-08 17:47:56 -08:00

attach.php

fix find_folder_hash_by_path() which was not safe against multiple attach structures with the same filename but in different directories

2017-02-20 23:03:48 -08:00

auth.php

fix immediate issue with multiple login forms until I can figure out an elegant way to "popup" the modal login form already on the page. We still may need this fix for the actual login module which should always be callable and present a login form even if the nav is completely borked.

2017-02-08 11:24:21 -08:00

bbcode.php

consolidate hubloc storage

2017-01-30 15:01:22 -08:00

bookmarks.php

consolidate hubloc storage

2017-01-30 15:01:22 -08:00

channel.php

code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.

2017-03-29 13:32:23 +02:00

cli_startup.php

consolidate all the sys_boot functionality that is common between the web server and the cli daemon manager. Get rid of yet another global variable ($default_timezone) whilst doing so.

2016-05-26 16:33:01 -07:00

config.php

minor changes to config api and markdown_to_bb

2016-12-05 14:50:34 -08:00

connections.php

move some functions to more appropriate places

2017-02-23 14:52:36 -08:00

contact_widgets.php

separate the 'expert' feature into 'advanced_theming' and 'advanced_dirsearch'. Hide both features unless techlevel > 3.

2016-09-01 19:01:02 -07:00

conversation.php

add icon, name and thumb to profile tabs. remove login app - we have login in the panel now.

2017-03-21 13:38:44 +01:00

crypto.php

trim both key and iv on other ciphers

2016-12-01 18:14:20 -08:00

datetime.php

[TASK] Update Doxyfile and fix Doxygen errors.

2016-10-13 11:27:23 +02:00

dir_fns.php

db update required for Zot2

2016-11-22 14:15:33 -08:00

environment.php

remove include/probe.php which has never completed development and has never been used

2017-03-05 20:45:21 -08:00

event.php

remove logging

2017-02-27 22:48:52 -08:00

features.php

bringer - all basic functionality is implemented

2017-02-08 17:21:32 -08:00

feedutils.php

minor feed issue

2017-03-04 11:56:59 -08:00

follow.php

more work on permcats and consolidating calls that try to discover connect permissions, also create lowlevel store functions for abook and profile - since these currently may have issues with sql strict mode.

2017-02-09 17:29:24 -08:00

group.php

Create virtual privacy groups for private profile member lists

2017-02-12 15:56:33 -08:00

help.php

⬆️ 🔨 Upgrade PHP Markdown library.

2017-02-27 23:40:29 +01:00

html2bbcode.php

add another hook

2016-09-29 22:28:23 -07:00

html2plain.php

html2plain warnings

2016-12-15 13:45:27 -08:00

hubloc.php

consolidate hubloc storage

2017-01-30 15:01:22 -08:00

import.php

code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.

2017-03-29 13:32:23 +02:00

items.php

allow post_activity_item to be passed an empty ACL without resetting to channel default

2017-03-06 21:01:17 -08:00

js_strings.php

replace [+] and [-] with chevron icons

2016-06-27 16:50:06 -07:00

language.php

add some more stuff to admin/account_edit (service class, language, and techlevel if appropriate). Fix en-au and en-gb so they are listed as languages, and move language selector stuff to include/language.php instead of include/text.php; new file Zotlabs/Lib/Techlevels.php so we only need to write the selection array once.

2016-10-03 17:16:24 -07:00

markdown.php

⬆️ 🔨 Upgrade Markdownify library.

2017-03-05 01:14:15 +01:00

menu.php

call zidify_links() when formatting bbcode for internal consumption

2016-12-19 16:06:49 -08:00

message.php

tag and mention handling in private mail (which required refactoring the bbcode cleanup stuff in mod_item)

2016-12-13 20:01:38 -08:00

nav.php

move profile tabs to app-tray

2017-03-20 17:24:48 +01:00

network.php

cleaner integration between the headers and session options of z_fetch_url()

2017-02-28 16:32:24 -08:00

oauth.php

sort out some of the authentication mess - with luck this may fix the DAV auth issue which I simply could not duplicate or find a reason for.

2016-07-20 17:55:40 -07:00

oembed.php

consolidate hubloc storage

2017-01-30 15:01:22 -08:00

page_widgets.php

deprecate the item_id table - replace with iconfig. A possibly useful function in the iconfig class would be a search which takes a service id and type and uid, matches against an item and returns the iid. That could save a bit of code duplication.

2016-06-13 19:58:24 -07:00

perm_upgrade.php

more perms work (a lot more)

2016-07-18 21:37:34 -07:00

permissions.php

document that include/permissions is being deprecated but may still be needed.

2016-08-31 20:29:32 -07:00

photos.php

testing and bug fixes virtual profile groups

2017-02-12 17:40:18 -08:00

plugin.php

set minversion and maxversion for themes in view/theme/themename/php/theme.php instead of separate file.

2017-02-27 10:13:08 +01:00

poller.php

daemon conversion continued...

2016-05-19 22:26:37 -07:00

queue_fn.php

queue optimisations for sites that have lingered in the queue for more than a couple of days.

2017-01-29 17:16:06 -08:00

security.php

Create virtual privacy groups for private profile member lists

2017-02-12 15:56:33 -08:00

selectors.php

more backquotes - this should take care of most except for the array import queries

2016-10-09 16:31:04 -07:00

sharedwithme.php

the rest of the schema updates - WARNING: some third party plugins may fail; e.g. embedphotos and chess. $item['object'] is now $item['obj'] and $photo['type'] is $photo['mimetype'], $photo['scale'] is $photo['imgscale'] and $photo['data'] is now $photo['content']. There are a number of other changes, but these are the ones noted to cause issues with third-party plugins. The project plugins have been updated. Please note any new issues as this effort touched a lot of code in a lot of files.

2016-06-01 21:48:54 -07:00

socgraph.php

even more backslashes

2016-10-03 22:01:14 -07:00

statistics_fns.php

more backquotes - this should take care of most except for the array import queries

2016-10-09 16:31:04 -07:00

system_unavailable.php

Use http_status() instead of homegrowing it. Adapt http_status to handle replies with data.

2015-11-20 18:56:41 -08:00

taxonomy.php

fix #594

2016-11-20 14:15:13 +01:00

text.php

code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.

2017-03-29 13:32:23 +02:00

xchan.php

provide lowlevel xchan storage function to ensure that all non-null rows are initialised

2017-01-28 15:01:19 -08:00

zid.php

consolidate hubloc storage

2017-01-30 15:01:22 -08:00

zot.php

We've passed the deadline for allowing unsigned zot finger tokens. It is now a protocol requirement.

2017-02-24 13:53:49 -08:00