Commit Graph
100 Commits
Author SHA1 Message Date
Fredrick BrennanandGitHub a510ebcab9 Remove "Donations" section, add note about php7.2 2018-09-18 14:15:41 +08:00
Fredrick Brennanandczaks 505adffcdc Cyclical threads ♺ 2016-05-06 16:39:20 +02:00
8chanandczaks d788131202 Allow a board called news to exist 2016-05-06 16:26:17 +02:00
Fredrick Brennanandczaks 95b1e103cb Edit static pages commit 2016-05-06 16:03:55 +02:00
8chanandczaks 7911c374e8 Public action logs commit (log.php)
Note: In a previous commit, I began making inc/mod/auth.php more modular with the check_login() function. Including it does NOT check mod login by default anymore like it does on vichan. You have to call check_login(). I've finally included it in inc/functions.php. If you have any custom pages that use inc/mod/auth.php, just including functions.php is enough now.

===================================
Also: backports 351375185e5 (early 404)
2016-05-06 15:44:26 +02:00
8chanandczaks 6dd1420f91 Add event to quote backlinks 2016-05-06 15:15:17 +02:00
8chanandczaks ce3ce4f1b6 Fix *0 secure tripcodes caused by accidentally feeding + signs to crypt() 2016-05-06 15:14:55 +02:00
8chanandczaks 7831da83fc New event: rebuildpost, allows you to bind events to ?/edit 2016-05-06 15:13:27 +02:00
Fredrick Brennanandczaks b476b66007 [BUG] Image reject repost board option now also affects YT embeds 2016-05-06 15:12:08 +02:00
Fredrick Brennanandczaks 65ea7b78c5 Catalog: click to scroll thread 2016-05-06 14:53:17 +02:00
8chanandczaks 7a7574bdca SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2016-05-06 12:43:25 +02:00
8chanandczaks 6da7f4d25a No more country flags in <title> 2016-05-06 12:40:37 +02:00
8chanandczaks ae4eb4d3d9 RSS 2016-05-06 12:40:07 +02:00
8chanandczaks 632d0a76d0 Display placeholder if no file in catalog/theme.php; czaks: fix the code a bit 2016-05-06 12:37:00 +02:00
8chanandczaks ce62673a2c OpenGraph information in thread pages https://en.wikipedia.org/wiki/Facebook_Platform#Open_Graph_protocol 2016-05-06 12:18:31 +02:00
8chanandczaks aa0d3395b1 Show first 256 chars of body in <title> 2016-05-06 12:17:51 +02:00
8chanandczaks b6f3d44080 Go to bottom link 2016-05-06 12:16:01 +02:00
8chanandczaks 129eb154b3 Merge 2016-05-05 13:45:36 +02:00
8chanandczaks 913420e040 Image hover backported from 8chan X 2016-05-05 13:42:54 +02:00
Fredrick Brennanandczaks 2712235f15 Make js/options/favs.js actually usable
I pretty much had to rework this completely to get it into a usable state

Reference ctrlcctrlv/infinity#424
2016-05-05 13:36:26 +02:00
Fredrick Brennanandczaks 71fde35938 Oops forgot a file 2016-05-05 13:33:14 +02:00
8chanandczaks 7cf3fccda5 Fix menu brokenness if user post deletion disabled 2016-05-05 13:22:36 +02:00
8chanandczaks 6b04b3c671 Fix post deletion 2016-05-05 13:21:09 +02:00
8chanandczaks 5f10badee9 Make no-animated-gif.js trigger on new_post 2016-05-05 13:12:10 +02:00
8chanandczaks 8412299fa5 Fix hide-threads.js interaction in no-animated-gif.js 2016-05-05 13:11:54 +02:00
8chanandczaks f02226449a Fix own post (You) 2016-05-05 13:06:25 +02:00
Fredrick Brennanandczaks cac428b30c Add some missing i18n tags 2016-05-05 13:03:31 +02:00
8chanandczaks 5267098cb8 Make bottom watchlist-toggle work 2016-05-05 13:01:24 +02:00
8chanandczaks fd2e9df30c This script was breaking boards.html 2016-05-05 13:01:00 +02:00
Fredrick Brennanandczaks 8943bb0bb3 Rewrite report system due to flooding 2016-05-05 12:57:52 +02:00
8chanandczaks 95a9b7b72b Completely rewrite fix-report-delete-submit.js, add report/delete to menu 2016-05-05 12:52:17 +02:00
Fredrick Brennanandczaks 1b0f5fd24c Revert "Comment toolbar update and Thread stats addition" 2016-05-05 12:42:41 +02:00
8chanandczaks 4e27112147 Fix filter for users with emoji in thier names 2016-05-05 12:33:23 +02:00
8chanandczaks b469855126 use onready in post-menu.js 2016-05-05 12:30:18 +02:00
8chanandczaks e3dbca5616 Add one click [-]/[+] to post-filter.js 2016-05-05 12:28:52 +02:00
8chanandczaks 5176377045 Fix many features for Internet Explorer 9 and 10
Please don't use "dataset" in scripts anymore, it doesn't work in IE9 or 10. Instead use $.data
2016-05-05 12:15:26 +02:00
8chanandczaks 99ee2e36ba Don't expand webm or YouTube videos on js/expand-all-images.js 2016-05-05 12:06:27 +02:00
8chanandczaks dd27026618 Show stickies at top of catalog 2016-05-05 12:01:16 +02:00
8chanandczaks e8b530a783 Shift-click to hide threads in catalog 2016-05-05 12:00:21 +02:00
8chanandczaks 01207dfcbb Catalog script fix for hiding threads with short IDs 2016-05-05 11:59:59 +02:00
8chanandczaks b056124e49 Catalog: don't show hidden threads 2016-05-05 11:59:16 +02:00
8chanandczaks 4f96263e3b Upgrade jQuery mixitup, preserve settings, no animations 2016-05-05 11:59:00 +02:00
8chanandczaks e2016340e1 Fix expand-too-long error with new <p> markup 2016-05-05 11:56:41 +02:00
8chanandczaks 3eb755ee7e Move login check in inc/mod/auth.php to a function
This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords)
2016-05-05 11:40:52 +02:00
8chan Adminandczaks 93f748e6a8 Security: capitalization of mods username is significant 2016-05-05 11:39:12 +02:00
8chanandczaks c4fc827332 some style fixes
Conflicts:
	templates/8chan/boards-tags.html
2015-04-10 15:37:06 +02:00
8chanandczaks cf91daee7c No need to display pruned in two places...especially if server times out / errors 2015-04-10 15:36:06 +02:00
8chanandczaks 1aa8f6251d Have to load onready 2015-04-10 15:35:25 +02:00
8chanandczaks f2848f2242 Update GeoIP database 2015-04-10 15:03:35 +02:00
8chanandczaks 419d69b4ee ayylmao @marktaiwan 2015-03-31 06:01:23 +02:00
8chanandczaks f26256f55a Make file selector work, add to config
Conflicts:
	inc/instance-config.php
	templates/post_form.html
2015-03-31 05:59:54 +02:00
8chanandczaks 0f1d506586 Change this message again
Conflicts:
	js/ajax.js
2015-03-31 05:48:45 +02:00
8chanandczaks d3cc27ff5c Handle XHR errors better 2015-03-31 05:47:09 +02:00
8chanandczaks 4083c92dbe Stop double posting AJAX bug 2015-03-31 05:46:45 +02:00
8chanandczaks 61371f77ce rebuild2 - multithreaded rebuild script 2015-03-31 05:38:14 +02:00
8chanandczaks 4a22ee9245 Extra files and IDs in API
Conflicts:
	inc/api.php
2015-03-31 05:28:08 +02:00
8chan a550c63f9c SECURITY / XSS : Stop XSS in post subjects displayed in catalog
git blame says czaks forgot an |e in catalog.html, this means that anyone posting a new thread with HTML in the subject field or name field can arbitrarily insert it into the page.

Conflicts:
	templates/themes/catalog/catalog.html
2015-01-23 10:40:08 +00:00
8chanandczaks 6052ed8d3d SECURITY: imagemagick/graphicsmagick was ignoring all errors
So, in a much older patch I had a problem where an incorrect RGB
profile would make image uploads fail. I fixed this by using strpos
against the error message...but didn't check the return value
correctly.

That means that any error from gm/im was ignored. This caused people
to upload too large images and flood /b/ with 1 x 10000 pixel images

My fault, patched now. Sorry about that.

Conflicts:
	inc/image.php
2014-10-12 10:23:03 +02:00
8chanandczaks b2cbb70da3 Khorne in #8chan on irc.rizon.net contributed this thread watcher.
Can't properly attribute the code to him because he doesn't want it
connected to his Github account for some reason.

Conflicts:
	inc/instance-config.php
2014-10-11 20:41:40 +02:00
8chanandczaks f3e2131f06 Actually fix new_post event inline.js 2014-10-11 20:39:25 +02:00
8chanandczaks 1506bcc834 Make inline work on new_post event 2014-10-11 20:38:02 +02:00
8chanandczaks 803c76a800 .x.x less confusing...will change to less_ip eventually 2014-10-11 20:37:58 +02:00
8chanandczaks 9768bb6726 fuck 2014-10-07 04:41:41 +02:00
8chanandczaks 582c77a935 Fix name and order 2014-10-07 04:41:41 +02:00
8chanandczaks b7e9007ad4 This makes the options appear at the bottom for some reason 2014-10-07 04:41:41 +02:00
8chanandczaks 894faf989c User can disable backlinks if they want to, off by default 2014-10-07 04:41:41 +02:00
8chanandczaks 1f28316fca Make inline.js work in mod panel
Conflicts:
	inc/instance-config.php
2014-10-07 04:41:05 +02:00
8chanandczaks c4dc3f4d47 Fix spoiler image not working 2014-10-07 04:33:57 +02:00
8chanandczaks f294af104b Reset to global locale before openBoard 2014-10-07 04:32:10 +02:00
8chanandczaks 93b30d6829 class around poster IDs 2014-10-07 00:19:15 +02:00
8chanandczaks 6cfb1eb656 Merge bui-boardlist-css, close ctrlcctrlv/8chan#104 2014-10-05 17:48:07 +02:00
8chanandczaks 8bfd5e1bcd this>el 2014-10-05 17:48:07 +02:00
8chanandczaks f8178dcbe4 Color IDs on new posts received via AJAX 2014-10-05 17:48:07 +02:00
8chanandczaks 035f8437ab Call on ready, dont pollute window namespace with vars 2014-10-05 17:48:07 +02:00
8chanandczaks c3ba4cc7ef Remove prototype pollution, call on ready 2014-10-05 17:48:07 +02:00
8chanandczaks cb7b7d070c threadscroll was in template for no reason 2014-09-27 11:37:50 +02:00
8chanandczaks 6fd3b64c67 Disallow multiple Shrink all images appearing
fixes vichan-devel#91
2014-09-27 10:55:14 +02:00
8chanandczaks 56f3d89774 Fix multi image from quick reply
Conflicts:
	js/multi-image.js
2014-09-27 10:52:24 +02:00
8chanandczaks e81d016ffa Attempt to fix scroll to anchor issue 2014-09-25 06:56:24 +02:00
8chanandczaks 5d8d20fcc5 Add timer to auto reload js
Conflicts:
	js/auto-reload.js
2014-09-25 06:30:55 +02:00
Fredrick Brennan 7288f1dec7 Fix last commit 2014-09-20 16:49:32 +00:00
Fredrick Brennan 23c73ca839 Allow the user to decide whether or not he wants to display his country 2014-09-20 16:35:28 +00:00
Fredrick Brennan 1ce9fb8174 Allow users to choose their favorite boards for sites w/too many to put in bar 2014-09-20 16:35:19 +00:00
Fredrick Brennan 9070b061ee Bug fix: users were banned from /0/ if they had a ban anywhere else
Conflicts:
	inc/bans.php
2014-09-20 15:39:47 +00:00
8chan 66e026b361 ?/bans: fix pagination - can now see all bans on all boards if > $config[mod][banlist_page]
Conflicts:
	inc/bans.php
2014-09-13 16:43:46 +00:00
Fredrick Brennan 39cecea579 Merge pull request #77 from juanchan/smallfixes
optionally show mod name in templates/banned.html
2014-09-01 10:33:47 -04:00
8chan e28f233e3d Close #51: Prevent players from cheating the dice roller by using markup 2014-08-10 15:38:02 +00:00
8chan 1ea3da1db6 Merge Barrucadu/diceroll into master 2014-08-10 15:35:11 +00:00
copypasteandczaks 4dba56386d update eo locale 2014-08-08 21:44:56 +02:00
8chan 48f99deaa5 Fix post linking bug in ?/recent 2014-07-21 16:55:36 +00:00
Fredrick Brennan 18f158e2d5 Forgot some |e 2014-07-19 18:47:34 +00:00
8chan ef7556194c Fix 55ch cancer; can now see next page of posts, ?/recent uses templating system 2014-07-19 18:42:52 +00:00
8chanandczaks f2809d4793 Fix issue #45 2014-07-06 01:14:59 +02:00
8chan 9df6ca8ddd Fix issue #45 2014-06-24 19:41:00 +00:00
8chanandczaks 8d8563a20d Fix scroll to issues with post-hover.js, clean up highlightReply
Conflicts:
	templates/post_reply.html
	templates/post_thread.html
2014-06-21 20:34:09 +02:00
8chan 91570ef083 Fix issue #57 2014-06-12 18:01:29 +00:00
8chan a9765f6c4a Fix issue #61 2014-06-12 17:48:53 +00:00
8chan e856917b00 Add scripts to catalog page 2014-06-12 17:27:18 +00:00
8chan 1d6f46d9bb Fix scroll to issues with post-hover.js, clean up highlightReply 2014-06-12 15:36:40 +00:00
Fredrick Brennan 4f070d16e5 Congrats, you broke the mod page on non-secured servers @jdh8 2014-06-10 23:09:39 +00:00