summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-02-02Merge commit 'upstream/master'Andy Staudacher
2010-02-02Remove the test-transform:uppercase from the l10n css as it was causing ↵Tim Almdal
problems with other text fields in IE and it violates our case standards. Fixes ticket #912
2010-02-02Change the view to display 'empty' when the variable value is a null ↵Tim Almdal
string(""). Fixes ticket #987.
2010-02-02Display the error message for the in place edit. Also improve the double ↵Tim Almdal
click guard. Fixes ticket #1000.
2010-02-01Corrected copy paste errors in g2_import task. Fixes ticket #949.Tim Almdal
2010-02-01Guard the gallery.in_place_edit::_show method so that if an attempt is made ↵Tim Almdal
to show the inplace edit form multiple times, the form is only shown once. Fixes ticket #999
2010-02-01Update the description to reflect we are only removing "expired" files.Tim Almdal
2010-02-01Correct the internationalization of the status message.Tim Almdal
2010-01-31Force all non-guest users to have an email address since that'sBharat Mediratta
required in model validation. Without this, any save on a user without email will fail which means that you can't log in. Bump user module to version 3.
2010-01-31Update the install version to 2 to match module.info.Bharat Mediratta
2010-01-31return a location method so the page reloads properly if the edit was ↵Tim Almdal
successful.
2010-01-31Fix lots of warnings that pop up when we're in E_STRICT mode. They'reBharat Mediratta
mostly issues around uninitialized variables, calling non-static functions in a static context, calling Session functions directly instead of on its singleton, passing non-variables by reference, and subclasses not using the same interface as the parent class.
2010-01-31Remove obsolete call to _force_block_adder() which has been broken for over ↵Bharat Mediratta
a year.
2010-01-31Remove debug code.Bharat Mediratta
2010-01-31Minir l10n message cleanup. Avoid <br/> in messages since the server ↵Andy Staudacher
normalizes them to <br />, i.e. leading to a mismatch.
2010-01-31Add a comment about error_reporting()Bharat Mediratta
2010-01-31htaccess_works() can't use var/tmp anymore because that's locked down.Bharat Mediratta
So just create var/security_test and delete it when we're done.
2010-01-31Elide data that isn't useful from the REST array.Bharat Mediratta
2010-01-31Second attempt to fix the timezone issue. If the timezone is not setBharat Mediratta
in phpinfo(), then force it to America/Los_Angeles for now.
2010-01-31Update the timezone field to match the setting inBharat Mediratta
system/config/locale.php. This fixes the "date_default_timezone_set() [function.date-default-timezone-set]: Timezone ID '' is invalid" error.
2010-01-30Remove edit permissions across the board.Bharat Mediratta
2010-01-30Use Item_Model::as_restful_array() to simplify tests.Bharat Mediratta
2010-01-30Add Item_Model::as_restful_array() for convenience.Bharat Mediratta
2010-01-30VerifiedBharat Mediratta
2010-01-30Refactory auth::too_many_failed_logins() out ofBharat Mediratta
auth::validate_too_many_failed_logins() to conceptually separate the two.
2010-01-30Protect REST login controller from brute force attacks too.Andy Staudacher
And make the REST auth token less predictable by using a better source for randomness.
2010-01-30Update install.sql -- gallery version jumps from 23 to 25 due to a mistakeBharat Mediratta
in the version 24 upgrade code. Update packager to serialize files so that we can serialize the new .htaccess files Update init_var.php to include the newly serialized .htaccess files. Fixes ticket #587.
2010-01-30Lock down web access to var/uploads, var/tmp and var/logs using .htaccessBharat Mediratta
Fixes ticket #587.
2010-01-30Don't override the password in the database if it's empty in the form.Bharat Mediratta
Fixes ticket #995.
2010-01-30Gallery module version 23, with the failed_logins table.Bharat Mediratta
2010-01-30Prevent brute force login attacks by reducing login attempts to 1 perBharat Mediratta
minute after there have been 5 consecutive failed login attempts. Fix for ticket #589.
2010-01-30Make url::merge() function use the same exact definition as url_Core::merge()Bharat Mediratta
2010-01-30Fix the valid_admin code -- it was considering all non-admins invalid.Bharat Mediratta
Fixes ticket #997 (highest prime under 1000!)
2010-01-30Dump out validation errors so that we have some extra information in the logs.Bharat Mediratta
2010-01-30Fix #992: Digibug pops up a blank page and doesn't allow printingBharat Mediratta
form::hidden() changed in K24 breaking this. Also fixed the spelling of "$order_params"
2010-01-30Remap parent_id and album_cover_item_id to and from RESTful urls.Bharat Mediratta
2010-01-30The user must have some edit permission somewhere to create a tagBharat Mediratta
2010-01-30Make the error page more robust in the case where there's a failureBharat Mediratta
early on in the framework code before we can load Gallery_I18n.php
2010-01-29Use ? or & as appropriate when appending output=html.Bharat Mediratta
2010-01-29Add missing permission checks.Bharat Mediratta
Make the tag relationship an associative array.
2010-01-29Use var_export instead of print_r for better clarity.Bharat Mediratta
2010-01-29Don't forget to flush the relative_url_cache when updating the slug.Bharat Mediratta
2010-01-29Go through all slugs and make them legal values.Bharat Mediratta
Upgrade gallery3 module to version 23
2010-01-29Oops, forgot to bump the version to 2 in install().Bharat Mediratta
2010-01-29Merge branch 'master' of git@github.com:gallery/gallery3Bharat Mediratta
2010-01-29Oops, somebody (me?) forgot to update the gallery module versionBharat Mediratta
number in gallery_installer::install() so the install.sql was out of sync.
2010-01-29Strongly type the argument list to the model::validate method.Tim Almdal
2010-01-29Merge branch 'master' of git@github.com:gallery/gallery3Tim Almdal
Conflicts: modules/gallery/views/in_place_edit.html.php
2010-01-29Replace <?= form::close() ?> with </form>. Also add a call to ↵Tim Almdal
access::csrf_form_field in the form template. Fixes ticket #996.
2010-01-29Work around a weirdness where empty() doesn't work on input values.Bharat Mediratta