Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-02-14 | HTML validation, avoid empty <ul> | Andy Staudacher | |
2010-02-14 | HTML validation fix (<script>) | Andy Staudacher | |
2010-02-14 | Some HTML validation fixes (don't render empty <ul> lists, empty id ↵ | Andy Staudacher | |
attributes, use & not &) | |||
2010-02-14 | For consistency, use straight Kohana_404_Exception instead of the event system. | Andy Staudacher | |
2010-02-12 | Tighten up the text. | Bharat Mediratta | |
2010-02-12 | Fix for tickets 1009 and 603: Show a themed error page to guests / ↵ | Andy Staudacher | |
registered users (not to admins though). And show a login form to guests for 404 (incl. insufficient view permissions) errors. | |||
2010-02-12 | Revert "1) Add a depth parameter to retrieving an item thru the rest api" | Bharat Mediratta | |
This reverts commit 3439671bcfb99c1884285e4b4e53295f044e688f. | |||
2010-02-12 | 1) Add a depth parameter to retrieving an item thru the rest api | Tim Almdal | |
2) Standardize the structure of members so that client programs can consistently parse the return information. 3) Added a summary parameter so that client programs can easily determine if the information returned is summary (item type, item title) or the full meal deal | |||
2010-02-11 | Get rid of unnecessary view file. | Andy Staudacher | |
2010-02-11 | Include user name in logging message for failed password reset. As Bharat ↵ | Andy Staudacher | |
points out, t() ensures that parameters are escaped for XSS. | |||
2010-02-11 | Security: Fix leaking of album / photo names. Reject previous fix for ticket ↵ | Andy Staudacher | |
1009. Side effect: Renaming auth::required_login() to login_page(). | |||
2010-02-11 | Fix for ticket 1010: Don't leak valid user names in "forgot password" form. | Andy Staudacher | |
Includes fixes for user forms as well (edit user / email / password). | |||
2010-02-11 | Use the admin/users/edit_user_form version of the user editing form | Bharat Mediratta | |
right after initial install so that we're not requiring the user to re-enter the auto-generated password to change their password and email. Fixes ticket #1007 | |||
2010-02-10 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-10 | Refactor the code to display the login page if the user does not have view | Tim Almdal | |
permission into the common auth::require_login() method. | |||
2010-02-10 | If the user does not have permission to view the album, photo or movie, redirect | Tim Almdal | |
to a logon page to allow the user to login. Pass the target url as a session variable to allow the user to be redirected where they want to go if the login was successful. Fixes ticket #1009. | |||
2010-02-10 | Use the helper ulr:current instead of manually creating the continue url. | Tim Almdal | |
2010-02-09 | Revise the "review your permission" text to my liking. | Bharat Mediratta | |
2010-02-09 | Move diff::compare to be test::diff | Bharat Mediratta | |
2010-02-09 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-09 | Formated upgrader for RTL languages. Closes ticket #883 | Chad Kieffer | |
2010-02-09 | Rename item name and slug if necessary to avoid a conflict when we | Bharat Mediratta | |
move photos. Fixes ticket #957. | |||
2010-02-09 | Whitespace. | Bharat Mediratta | |
2010-02-09 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-09 | Change access::can to access::required in g2 redirect, to please the ↵ | Andy Staudacher | |
controller auth code audit test. | |||
2010-02-09 | Import hashed passwords from G2 (which will only work if they're ↵ | Andy Staudacher | |
PasswordHash passwords, not if they're G2 style md5 / salted md5). | |||
2010-02-09 | Better handling of G2's multi level sort order in g2_import | Andy Staudacher | |
2010-02-09 | Add unit tests for item::move() in preparation for renaming when there | Bharat Mediratta | |
are conflicts (see ticket #957) | |||
2010-02-09 | Refresh installer code | Andy Staudacher | |
2010-02-09 | Fix password reset confirmation | Andy Staudacher | |
2010-02-09 | More g2_import model validation fixes, and make import less noisy (don't ↵ | Andy Staudacher | |
copy each comment text to the import log). | |||
2010-02-09 | Fix g2_import bugs related to item and user model validation. | Andy Staudacher | |
2010-02-08 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-08 | Change admin area timeout from 20 to 90 minutes | Andy Staudacher | |
2010-02-08 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-08 | Override Input::clean_input_keys() to sanitize malicious values out of | Bharat Mediratta | |
strings instead of dying. This at least gives us graceful degradation. Fixes ticket #764, patch thanks to djnz. | |||
2010-02-08 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-08 | Suppress errors when checking for readability of /proc/loadavg. Often this ↵ | Andy Staudacher | |
file will be protected by openbasedir, and is_readable will trigger an open basedir warning. | |||
2010-02-08 | Fix the missing object problem in ie7. Fixes ticket: 1003. There is still ↵ | Tim Almdal | |
issues with selectables and draggables working together in IEx | |||
2010-02-08 | Correct tree branch alignment in IE | Tim Almdal | |
2010-02-08 | Fix for ticket 1008: Redirect to destination after re-auth. | Andy Staudacher | |
2010-02-08 | Fix Arabic language name. Thanks shaibn for reporting the issue. Verified ↵ | Andy Staudacher | |
with CLDR data. | |||
2010-02-07 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-07 | Improve likelihood that image block shows up for small photo collections by ↵ | Andy Staudacher | |
retrying the random query a few times. | |||
2010-02-07 | Merge branch 'master' of git@github.com:gallery/gallery3 | Tim Almdal | |
2010-02-07 | Revert "Add the scheduler component to the admin maintenance screen." | Tim Almdal | |
This reverts commit 48cb5021c6bd7e65a13a0ff50a9e76f72da7d3a1. | |||
2010-02-07 | Import G2 permissions in the import process. Ignores user and item specific ↵ | Andy Staudacher | |
permissions. | |||
2010-02-07 | Revert "Refactor the admin maintenance screen so that events are used to | Tim Almdal | |
populate the action buttons and other content such as the list of scheduled tasks." Leaving this api out of RC1. This reverts commit 19fee6b5e4ceb8a5f90cafe4ad770856ece108ef. Conflicts: modules/gallery/views/admin_maintenance.html.php | |||
2010-02-07 | Change welcome message dialog to link to the user_profile page instead of ↵ | Andy Staudacher | |
the change user dialog. a) the edit user form doesn't include the password anymore b) the new admin would probably also like to change the email, so directing him to the profile page with options to change the pw / email. Ideally, we'd have a special purpose edit profile page for the install experience, without prompting for the randomly generated password. But that's something for another task. | |||
2010-02-07 | Addendum for ticket 585: Handle case C), redirect the admin to a non-admin ↵ | Andy Staudacher | |
page when the admin area session expires, before the admin has a chance to send an XHR admin request, for which we wouldn't have a good answer. |