summaryrefslogtreecommitdiff
path: root/modules/gallery/libraries
AgeCommit message (Collapse)Author
2010-09-06Fix some broken identity APIs:Bharat Mediratta
- add_user_to_group and remove_user_from_group should take Group_Definition instances to be consistent - add_user_to_group and remove_user_from_group in drivers/IdentityProvider.php should not be static
2010-09-06Whitespace.Bharat Mediratta
2010-09-01Hopefully the third and final patch for #1216. Set the default from and ↵Tim Almdal
reply-to addresses to an empty string. The first time the user model is saved, set the sendmail from and reply-to addresses. Requires an update to gallery version 38.
2010-08-31Patch for ticket #1216. Move the values that were in the sendmail config ↵Tim Almdal
file and store them as gallery module variables. Requires a version number bump to 37.
2010-08-29Put the theme CSS at the end of the module CSS so that the theme hasBharat Mediratta
the final say. Fixes ticket #1315.
2010-08-29Don't concatenate two strings together as an argument for t() or t2();Bharat Mediratta
the l10n_scanner cannot parse it properly and drops those from the localization list. Fixes ticket #1284.
2010-08-21Put up a warning and don't accept movie files if we don't have ffmpeg.Bharat Mediratta
This fixes ticket #973.
2010-08-08Handle 404 exceptions specially to reduce spam in the log files. Fixes ↵Bharat Mediratta
ticket #1228.
2010-08-07Add a max_level to _sanitize_for_dump() so that we don't blow the stack.Bharat Mediratta
2010-08-01default maintenance_mode from false -> 0 for consistency with the value we ↵Bharat Mediratta
set in the db
2010-08-01Make maintenance mode a variable instead of a config. Then createBharat Mediratta
links on the Admin > Maintenance page to allow you to turn it on and off. This should be efficient since we cache all vars and look them up on every request anyway. This also allows us to have the Fix task enable maintenance mode while it's running which greatly reduces the chances that somebody will come along and hork the database while we're tinkering with MPTT pointers. Fixes ticket #1259.
2010-07-29Trap ORM_Validation_Exception specially and report which fields failed ↵Bharat Mediratta
validation.
2010-07-21Catch any exceptions thrown when we try to restore the originalBharat Mediratta
identity provider after we fail to set up a new one.
2010-07-10PHPDoc fix.Bharat Mediratta
2010-07-10Reset the time limit to 30 seconds every time we delete a child. Fixes ↵Bharat Mediratta
ticket #1199.
2010-06-19Rework our exception framework to fit into Kohana's model better.Bharat Mediratta
Instead of overwriting Kohana_Exception::handle() (which we were doing in MY_Kohana_Exception) we instead use their existing template system. gallery/views/kohana/error.php overrides system/views/kohana/error.php and is the standard error template for all exceptions. Our version of error.php figures out the appropriate view based on context (cli, authenticated admin, guest viewing a 404, guest viewing a system error) and delegates appropriately. Each delegated view has a narrow responsibility. This paves the way for us to add new error views per module. For example, the rest module will define its own template in Rest_Exception and then its exceptions can be rendered the way that it wants (json encoded, in that case).
2010-06-19single -> double quotes.Bharat Mediratta
2010-06-12Make login/logout continuation url code consistent. Where necessary,Bharat Mediratta
we specify the continue_url in the session, but we store it in the login form so that we can propagate it across the session creation that happens at login time.
2010-05-14Fix-ups for d98b85f7d3142676e6b4f407a18ed81564823f88Bharat Mediratta
- Pass the CSS selector of the active image in as an arg to site_menu so that quick operations know what they're operating on. - Change the ids from g-{photo,movie}-id to the generic g-item-id - Initialize ajax handlers for site menu on the photo and movie page - Drop the movie context menu, it's now in the site menu
2010-04-10Fix a bug introduced when we patched the "disallowed global data"Bharat Mediratta
security check. Not sure why the patch worked for some and not for others, but this should resolve it either way. Fixes ticket #1123.
2010-03-03Update the copyright to 2010. It's only 3 months into the year :-)Bharat Mediratta
2010-02-28First step towards fixing ticket #1038: Allowing for custom page <title> in ↵Andy Staudacher
admin pages, just like in non-admin pages. TODO: Set $view->page_title in the many admin controllers we have. I just set it for admin_maintenance.php to show how it's intended to be used. I copied the title from views/admin_maintenance.html.php to the controller.
2010-02-27Fix for ticket #1036 - Don't echo any sensitive information such as ↵Andy Staudacher
passwords, hashes or personally identifiable information.
2010-02-24Fix for ticket #1034: Fix db cache driver delete() call which was missed in ↵Andy Staudacher
a recent refactoring / fix.
2010-02-23Fix translation cache for installations with 0 translations in the DB.Andy Staudacher
2010-02-22Merge commit 'upstream/master'Andy Staudacher
2010-02-21Performance improvement: Load all translations of a locale as one serialized ↵Andy Staudacher
array from the Cache. Until now, we loaded hundreds of translation messages row by row, and unserializing one by one at bootstrap time. That amounted to a significant percentage of the complete request time. This approach is more than 10x faster.
2010-02-21Fix delete() function of DB based Cache driver. It expected a scalar key / ↵Andy Staudacher
tag value, but it was always an array of keys / tags. (compare to system/libraries/Cache.php and the File.php driver)
2010-02-21Add Menu::add_before()Bharat Mediratta
2010-02-18Revert "Fix for ticket #1017: Handle the common case of t(html::clean($var)) ↵Bharat Mediratta
by casting SafeString instances to string in translate()." This reverts commit 4ca55a90ee2f8e1d8595b0ec53a601d6c65475f6.
2010-02-18Improve setlocale() call, using some of G2's locale fallback code to match ↵Andy Staudacher
the platform's locale names.
2010-02-16Fix for ticket #1017: Handle the common case of t(html::clean($var)) by ↵Andy Staudacher
casting SafeString instances to string in translate().
2010-02-14Need to allow access to ::change_provider for CLI, to make packager work.Andy Staudacher
2010-02-14Minor security tightening of IdentityProvider::change_provider().Andy Staudacher
2010-02-14Some HTML validation fixes (don't render empty <ul> lists, empty id ↵Andy Staudacher
attributes, use &amp; not &)
2010-02-12Fix for tickets 1009 and 603: Show a themed error page to guests / ↵Andy Staudacher
registered users (not to admins though). And show a login form to guests for 404 (incl. insufficient view permissions) errors.
2010-02-08Override Input::clean_input_keys() to sanitize malicious values out ofBharat Mediratta
strings instead of dying. This at least gives us graceful degradation. Fixes ticket #764, patch thanks to djnz.
2010-02-07Remove the redundant reference to ["force_rtl".Tim Almdal
2010-02-07Refactor the is_rtl() helper into the Gallery_I18n class. This allows checkingTim Almdal
for a config value "force_rtl" which will layout the gallery pages in rtl mode without having to change to an language that is no longer understandable to the developer. Adding the line "$config['force_rtl'] = true;" to the config/locales.php file will make it happen.
2010-02-07Add prefix support for the target of RENAME TABLE.Bharat Mediratta
2010-01-31Fix lots of warnings that pop up when we're in E_STRICT mode. They'reBharat Mediratta
mostly issues around uninitialized variables, calling non-static functions in a static context, calling Session functions directly instead of on its singleton, passing non-variables by reference, and subclasses not using the same interface as the parent class.
2010-01-30Dump out validation errors so that we have some extra information in the logs.Bharat Mediratta
2010-01-29Stop using obsolete form::close()Bharat Mediratta
Update the way we include the hidden CSRF field for InPlaceEdit.
2010-01-28Use identity::set_active_user() instead of auth::login() when weBharat Mediratta
change providers otherwise the user_installer code is going to be calling auth::login() which causes all kinds of unexpected weirdness, like it triggers the handler in gallery_event which detects graphics toolkits, and that's only supposed to run on the first admin login.
2010-01-27Convert back to using ORM::factory(..., $id) instead of calling where().Bharat Mediratta
2010-01-25Make only one attempt to restore the old identity provider in case ofBharat Mediratta
failure. Else, we can get into an infinite recursion.
2010-01-23Merge branch 'master' of git@github.com:gallery/gallery3 into bharat_devBharat Mediratta
Conflicts: modules/gallery/tests/xss_data.txt
2010-01-23Add a user_menu method to the Admin_View and then use this method to get theTim Almdal
user menu. Since the information displayed is identical in both admin and theme views, it makes sense to combine the generation to it is done in a common location.
2010-01-22Trap any errors that may occur when trying to install a new identity ↵Tim Almdal
provider and then reinstall the current one.
2010-01-22Refactor the identity provider installation in to a common helper method ↵Tim Almdal
(change_provider) with an initialization callback.