..
Admin
expose the security setting for SVG thumbnails
2017-11-21 16:22:17 -08:00
Settings
default profile assign
2017-11-24 14:55:39 -08:00
Achievements.php
remove the app $a passed to profile_load, also add profile_load to mod_wiki which should fix issue #431
2016-06-26 22:13:59 -07:00
Acl.php
also filter atokens on acl search
2017-11-13 10:08:51 +01:00
Admin.php
provide a mechanism to mark apps active in the bin
2017-07-21 10:32:21 +02:00
Api.php
more api re-org
2016-11-08 16:55:29 -08:00
Appman.php
provide ability to pin apps to navbar from /apps. this removes the ability to have per custom navbar pinned apps - this can be added later if desired
2017-11-16 11:11:06 +01:00
Apporder.php
fix issues with apporder related to recent pinned apps changes
2017-11-19 22:42:16 +01:00
Apps.php
nav_set_selected() for apps and apporder. restrict apporder to local_channel() and whitespace
2017-10-11 11:58:09 +02:00
Article_edit.php
article feature
2017-11-22 15:39:06 -08:00
Articles.php
article feature
2017-11-22 15:39:06 -08:00
Attach.php
check code rights on cloud files
2017-09-05 21:38:07 -07:00
Authorize.php
oauth2/oidc testing (please do not port - this requires several extra DB tables to work)
2017-05-03 22:37:06 -07:00
Authtest.php
module updates
2016-04-18 20:38:38 -07:00
Block.php
remove unused page_widgets.php include and provide a general function for loading sql from file to use in the cdav migration
2017-06-22 22:43:08 -07:00
Blocks.php
remove the app $a passed to profile_load, also add profile_load to mod_wiki which should fix issue #431
2016-06-26 22:13:59 -07:00
Bookmarks.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Branchtopic.php
module updates
2016-04-18 20:38:38 -07:00
Cal.php
rename channel app events to calendar and add nav_set_selected() to /cal
2017-11-07 11:22:11 +01:00
Card_edit.php
card_edit: fix lockstate and current permissions not handed over to editor
2017-10-01 22:46:35 +02:00
Cards.php
cards - change placeholdertext, separate from button text
2017-08-24 18:34:12 -07:00
Cdav.php
fix issue #921 - default addressbook has no name
2017-11-30 13:40:36 +01:00
Changeaddr.php
allow channel address to be changed
2017-08-04 19:02:41 -07:00
Channel.php
support for netselect query
2017-11-01 02:53:12 -07:00
Chanview.php
typo in chanview, remove output buffering in mod_cloud which is preventing large files from being downloaded. IIRC this was put there to avoid a SAML warning in SabreDAV but I'm not seeing that currently.
2017-06-25 19:17:05 -07:00
Chat.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Chatsvc.php
fix chat member list when one or members are connected via access tokens
2017-01-02 23:35:40 -08:00
Cloud_tiles.php
make most recent cloud_tiles setting for local channels persistent across logins
2017-11-07 19:34:00 -08:00
Cloud.php
allow cloud filenames to include ampersands without messing up auth tokens (zid, owt, and zat, and the constant placeholder 'f=')
2017-11-05 19:47:44 -08:00
Common.php
some basic work on mod common
2017-10-03 11:37:45 +02:00
Connect.php
command line connect utility.
2016-11-01 15:27:34 -07:00
Connections.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Connedit.php
call the follow_accept hook when desired
2017-09-19 13:25:34 -07:00
Contactgroup.php
more backquotes - this should take care of most except for the array import queries
2016-10-09 16:31:04 -07:00
Cover_photo.php
more work related to attach/photo and os_path, display_path and general code cleanup
2017-03-29 13:44:55 +02:00
Dav.php
Reviewed. This is OK.
2017-09-03 00:59:51 -07:00
Defperms.php
.htignore update
2017-11-06 21:55:36 -08:00
Directory.php
allow a site to block (public) the directory separately from other resources.
2017-11-12 21:43:46 -08:00
Dirsearch.php
pubsites: don't list dead sites
2016-11-30 01:16:44 -08:00
Display.php
set $module_format to html to not break updates. it will be set to something else later if appropriate
2017-11-03 10:04:25 +01:00
Dreport.php
allow delivery report for not just the author, but also if you're the owner and it's on your wall.
2016-10-03 20:50:13 -07:00
Editblock.php
various input filter fixes
2017-03-29 13:56:31 +02:00
Editlayout.php
various input filter fixes
2017-03-29 13:56:31 +02:00
Editpost.php
more deprecate server_role
2017-05-29 16:25:27 -07:00
Editwebpage.php
hubzilla issue #795
2017-05-27 02:22:36 -07:00
Embedphotos.php
missing includes
2017-04-13 23:20:09 +02:00
Events.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Fbrowser.php
more backquotes - this should take care of most except for the array import queries
2016-10-09 16:31:04 -07:00
Feed.php
provide a broken feed for services which require a broken feed
2017-04-26 14:12:11 +02:00
Fhublocs.php
fix typos
2017-01-31 09:43:58 +01:00
File_upload.php
remove logging line
2017-11-30 19:11:26 -08:00
Filer.php
fix item_list and item_search templates. make item filer use a bootdtrap modal and some css and class fixes
2017-03-17 14:22:10 +01:00
Filerm.php
more db column renames
2016-05-31 21:45:33 -07:00
Filestorage.php
sync packet not generated when deleting a file using the web browser interface
2017-11-24 00:12:19 -08:00
Follow.php
remove obscured @ hack
2016-10-04 19:37:16 -07:00
Getfile.php
use the same variable name consistently
2017-11-29 14:08:30 -08:00
Group.php
hubzilla issue #832
2017-07-19 18:32:16 -07:00
Hcard.php
missing space in nav tpl
2017-06-28 16:45:48 -07:00
Help.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Home.php
mod_home: if using an atoken login on the home page redirect to the channel page of the channel that owns the atoken.
2016-07-15 15:26:36 -07:00
Hostxrd.php
minor theming and whitespace
2017-02-08 19:47:34 -08:00
Hq.php
set profile_uid in mod hq
2017-11-28 12:28:49 +01:00
Impel.php
code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.
2017-03-29 13:32:23 +02:00
Import_items.php
🔒 Add CSRF protection for import and import_items.
2017-03-30 23:17:32 +02:00
Import.php
import: special handling required for channel photo in the xchan record when not seizing 'primary'
2017-10-02 20:27:04 -07:00
Invite.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Item.php
pubstream comments and a few other bugfixes that were discovered along the way
2017-11-26 18:29:24 -08:00
Lang.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Layouts.php
various input filter fixes
2017-03-29 13:56:31 +02:00
Like.php
fix mod like after recent changes
2017-11-27 10:07:45 +01:00
Linkinfo.php
more work on oembed from /display
2017-08-21 15:00:45 -07:00
Lockview.php
many dropdown and class fixes. still a long way to go...
2017-03-12 21:11:28 +01:00
Locs.php
provide /locs link on settings page if there is more than one hubloc for this channnel *that isn't deleted*.
2016-11-05 03:31:50 -07:00
Login.php
sort out some of the authentication mess - with luck this may fix the DAV auth issue which I simply could not duplicate or find a reason for.
2016-07-20 17:55:40 -07:00
Logout.php
create an actual logout module instead of relying on internal variables
2017-10-12 22:10:42 -07:00
Lostpass.php
Unify the various mail sending instance to enotify::send() and z_mail(). Both take the same arguments. z_mail() is text only, enotify::send() provides html and text. Both are pluggable using the enotfy_send hook.
2016-10-01 03:06:01 -07:00
Magic.php
encrypt the owa token
2017-10-26 15:23:04 -07:00
Mail.php
fix issues with diaspora xchans
2017-11-02 08:44:46 +01:00
Manage.php
more fixes
2017-10-08 22:47:43 +02:00
Menu.php
add a few more path macros to portable menu elements (channelurl, pageurl, storeurl and baseurl)
2016-07-31 20:14:25 -07:00
Message.php
call zidify_links() when formatting bbcode for internal consumption
2016-12-19 16:06:49 -08:00
Mitem.php
multi acl: port /webpages and /mitem
2016-08-04 11:23:43 +02:00
Moderate.php
redirect to be moderated items to /moderate and change the conv link to partent mid in /modrate
2017-10-19 11:20:09 +02:00
Mood.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Network.php
update item_normal() to not include ACTIVITY_OBJ_FILE obj_type
2017-11-03 13:49:58 +01:00
New_channel.php
register workflow was getting over-ridden in include/security
2017-10-19 18:48:11 -07:00
Nojs.php
revert the reversal of checkjs logic, but still restrict the behaviour scope to just those urls that require it
2016-04-20 22:10:00 -07:00
Notes.php
module updates
2016-04-18 20:38:38 -07:00
Notifications.php
do not show seen notifys in notifications - show them in mod notifications instead. Update notifications count also on notifications updates
2017-10-22 21:01:58 +02:00
Notify.php
some more work on mod hq
2017-11-18 22:16:06 +01:00
Oembed.php
add rel=noopener to all external target _blank links
2017-06-14 16:56:13 +02:00
Oep.php
article feature
2017-11-22 15:39:06 -08:00
Oexchange.php
minor theming and whitespace
2017-02-08 19:47:34 -08:00
Ofeed.php
merge red/master into dev
2017-08-10 08:09:02 +02:00
Online.php
module updates
2016-04-18 20:38:38 -07:00
Owa.php
encrypt the owa token
2017-10-26 15:23:04 -07:00
Page.php
allow plugin class widgets, fix sql error in page module
2017-10-29 19:52:00 -07:00
Pconfig.php
missing class instance pointer in Pconfig module upgrade
2016-04-19 19:09:35 -07:00
Pdledit.php
pdledit - show original/system layout text for comparison
2017-10-31 18:04:01 -07:00
Permcat.php
move permcat library functions to Zlib
2017-02-07 16:43:00 -08:00
Photo.php
cover photo was unintentionally disabled when block_public in effect
2017-05-08 11:11:50 +02:00
Photos.php
chunked uploads for photos page
2017-12-03 17:22:18 -08:00
Ping.php
some more work on mod hq
2017-11-24 15:01:34 +01:00
Poco.php
module updates
2016-04-18 20:38:38 -07:00
Poke.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Post.php
whitespace
2017-09-25 23:39:48 -07:00
Prate.php
daemon conversion continued...
2016-05-19 22:26:37 -07:00
Pretheme.php
module updates
2016-04-18 20:38:38 -07:00
Probe.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Profile_photo.php
Maria's profile photo issue, please push to master.
2017-11-01 02:15:40 -07:00
Profile.php
remove deprecated $a argument from advanced_profile()
2017-11-23 20:35:34 -08:00
Profiles.php
provide a mechanism to mark apps active in the bin
2017-07-21 10:32:21 +02:00
Profperm.php
Create virtual privacy groups for private profile member lists
2017-02-12 15:56:33 -08:00
Pubsites.php
comment out statistics link in mod pubsites until we have something functional again
2017-10-24 18:21:19 +02:00
Pubstream.php
pubstream comments and a few other bugfixes that were discovered along the way
2017-11-26 18:29:24 -08:00
Randprof.php
convert randprof to use chanlink_hash() instead of chanlink_url() and filter sys channels by xchan.xchan_system instead of xchan_addr != sys@%
2017-06-03 10:13:42 +02:00
Rate.php
ratings are gone. They can be enabled, but there is no UI for doing so at this time; and will likely only be available in a 'pro' configuration once the new implementation details have been hashed out. This appears to require a mechanism for rebuttal before it can again be opened to the public. There are also some synchronisation issues to contend with; as ratings are currently only distributed to active directory servers. There is no reliable mechanism for a new directory server to fetch existing ratings.
2016-08-25 17:43:07 -07:00
Ratings.php
ratings are gone. They can be enabled, but there is no UI for doing so at this time; and will likely only be available in a 'pro' configuration once the new implementation details have been hashed out. This appears to require a mechanism for rebuttal before it can again be opened to the public. There are also some synchronisation issues to contend with; as ratings are currently only distributed to active directory servers. There is no reliable mechanism for a new directory server to fetch existing ratings.
2016-08-25 17:43:07 -07:00
Ratingsearch.php
add the hidden flag also
2016-07-27 16:14:46 -07:00
Rbmark.php
module updates
2016-04-18 20:38:38 -07:00
React.php
pubstream comments and a few other bugfixes that were discovered along the way
2017-11-26 18:29:24 -08:00
README.md
readme for the module directory, also provide an undocumented way to reset the timestamp on connection photos to force a refresh without messing with the database directly.
2016-06-14 17:04:29 -07:00
Regdir.php
sql: limit 1 for UPDATE and DELETE is not supported by the SQL standard and postgresql
2016-10-27 02:41:32 +02:00
Register.php
Provide system config option for minimum registration age.
2017-11-24 13:50:29 -05:00
Regmod.php
module updates
2016-04-18 20:38:38 -07:00
Regver.php
module updates
2016-04-18 20:38:38 -07:00
Removeaccount.php
null_date conversion; phase 1
2016-09-25 17:06:13 -07:00
Removeme.php
null_date conversion; phase 1
2016-09-25 17:06:13 -07:00
Rmagic.php
redirect loop with rmagic and owa
2017-10-04 18:51:37 -07:00
Rpost.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Search_ac.php
Bring the saved search feature in line with the spec, and publish the feature spec.
2016-09-28 20:55:15 -07:00
Search.php
more search work
2017-11-03 15:08:56 -07:00
Service_limits.php
module updates
2016-04-18 20:38:38 -07:00
Settings.php
provide a mechanism to mark apps active in the bin
2017-07-21 10:32:21 +02:00
Setup.php
fix typos in comment
2017-10-16 21:33:14 +02:00
Share.php
oopsy
2017-06-21 17:46:28 -07:00
Sharedwithme.php
improve file_activity() a little
2017-07-31 16:59:43 +02:00
Siteinfo.php
turn url requests where argv[0] is something.xyz into module='something' and $_REQUEST['module_format'] = 'xyz'; But leave modules beginning with . (like .well_known) alone (convert the initial . to _ and then strip it). This really only affects Siteinfo_json at this time.
2017-07-13 20:53:05 -07:00
Sitelist.php
module updates
2016-04-18 20:38:38 -07:00
Smilies.php
module updates
2016-04-18 20:38:38 -07:00
Snap.php
since the snap module runs without permissions controls, verify the logged in channel matches the requested cloud path
2016-10-09 21:36:55 -07:00
Sources.php
sort out the rest of the source categories
2016-05-02 01:18:18 -07:00
Sslify.php
there are occasional sites which use different capitalisation of Content-Type; which is rare, but completely legal.
2016-12-15 18:08:23 -08:00
Starred.php
fix "unstar"
2017-10-28 15:24:37 -07:00
Subthread.php
pubstream comments and a few other bugfixes that were discovered along the way
2017-11-26 18:29:24 -08:00
Suggest.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Tagger.php
pubstream comments and a few other bugfixes that were discovered along the way
2017-11-26 18:29:24 -08:00
Tagrm.php
more backticks
2016-10-03 21:48:53 -07:00
Tasks.php
last remaining task in tasklist was not removed from view when 'completed'
2017-08-23 23:59:05 -07:00
Theme_info.php
put theme config into its own namespace
2016-09-01 22:20:08 -07:00
Thing.php
hubzilla issue #868
2017-10-03 17:03:24 -07:00
Toggle_mobile.php
module updates
2016-04-18 20:38:38 -07:00
Toggle_safesearch.php
module updates
2016-04-18 20:38:38 -07:00
Token.php
oauth2/oidc testing (please do not port - this requires several extra DB tables to work)
2017-05-03 22:37:06 -07:00
Uexport.php
channel export - use a selected list of functional data categories to export; this allows one to export single data sets instead of always exporting everything we know about
2017-01-31 15:28:25 -08:00
Update_articles.php
article feature
2017-11-22 15:39:06 -08:00
Update_cards.php
partial support (unfinished) for ajax loading cards with liveupdate; page still functions even though this isn't finished
2017-08-23 21:26:09 -07:00
Update_channel.php
fix with update with /channel?f=&mid=hash issue #461
2016-09-28 11:04:02 +02:00
Update_display.php
use head_add_link() for feed discovery
2017-02-21 18:58:51 -08:00
Update_home.php
module updates
2016-04-18 20:38:38 -07:00
Update_hq.php
missing files
2017-11-24 15:12:40 +01:00
Update_network.php
module updates
2016-04-18 20:38:38 -07:00
Update_pubstream.php
pubstream comments and a few other bugfixes that were discovered along the way
2017-11-26 18:29:24 -08:00
Update_search.php
module updates
2016-04-18 20:38:38 -07:00
View.php
module updates
2016-04-18 20:38:38 -07:00
Viewconnections.php
more places to use chanlink_hash() instead of chanlink_url() for profile_link
2017-02-23 10:36:00 +01:00
Viewsrc.php
The rest of the library and backend changes to support client-side e2ee and deprecate previous uses of item_obscured.
2017-04-26 14:16:07 +02:00
Wall_attach.php
change to bbcode calling parameters: important: will require pulling addons;
2017-11-23 15:21:50 -08:00
Wall_upload.php
deprecate/remove get_channel_by_nick() which is just a less generalised variant of channelx_by_nick()
2016-11-08 18:15:57 -08:00
Webfinger.php
module updates
2016-04-18 20:38:38 -07:00
Webpages.php
feed untranslated appnames to nav_set_selected() and query for the active app directly to get app details
2017-10-09 21:22:57 +02:00
Well_known.php
convert all the _well_known service controllers which are a bit touchy when it comes to the router
2016-04-18 01:35:09 -07:00
Wfinger.php
not sure when but the hcard went missing in webfinger
2017-10-23 21:19:40 -07:00
Wiki.php
unable to change permissions on wiki with space in name
2017-11-08 21:19:03 -08:00
Xchan.php
module updates
2016-04-18 20:38:38 -07:00
Xpoco.php
module updates
2016-04-18 20:38:38 -07:00
Xrd.php
we need this in the plugin, not in core
2017-09-20 19:34:43 -07:00
Xref.php
module updates
2016-04-18 20:38:38 -07:00
Zfinger.php
some preliminary work on Zot VI
2017-09-04 22:35:44 -07:00
Zotfeed.php
authenticate onepoll so we can receive private posts/comments in zotfeed; if local server bypass the network access and invoke zotfeed directly.
2017-05-01 15:14:10 +02:00
Zping.php
module updates
2016-04-18 20:38:38 -07:00