| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2010-08-21 | Put up a warning and don't accept movie files if we don't have ffmpeg. | Bharat Mediratta | |
| This fixes ticket #973. | |||
| 2010-08-08 | Handle 404 exceptions specially to reduce spam in the log files. Fixes ↵ | Bharat Mediratta | |
| ticket #1228. | |||
| 2010-08-07 | Add a max_level to _sanitize_for_dump() so that we don't blow the stack. | Bharat Mediratta | |
| 2010-08-01 | default maintenance_mode from false -> 0 for consistency with the value we ↵ | Bharat Mediratta | |
| set in the db | |||
| 2010-08-01 | Make maintenance mode a variable instead of a config. Then create | Bharat Mediratta | |
| links on the Admin > Maintenance page to allow you to turn it on and off. This should be efficient since we cache all vars and look them up on every request anyway. This also allows us to have the Fix task enable maintenance mode while it's running which greatly reduces the chances that somebody will come along and hork the database while we're tinkering with MPTT pointers. Fixes ticket #1259. | |||
| 2010-07-29 | Trap ORM_Validation_Exception specially and report which fields failed ↵ | Bharat Mediratta | |
| validation. | |||
| 2010-07-21 | Catch any exceptions thrown when we try to restore the original | Bharat Mediratta | |
| identity provider after we fail to set up a new one. | |||
| 2010-07-10 | PHPDoc fix. | Bharat Mediratta | |
| 2010-07-10 | Reset the time limit to 30 seconds every time we delete a child. Fixes ↵ | Bharat Mediratta | |
| ticket #1199. | |||
| 2010-06-19 | Rework our exception framework to fit into Kohana's model better. | Bharat Mediratta | |
| Instead of overwriting Kohana_Exception::handle() (which we were doing in MY_Kohana_Exception) we instead use their existing template system. gallery/views/kohana/error.php overrides system/views/kohana/error.php and is the standard error template for all exceptions. Our version of error.php figures out the appropriate view based on context (cli, authenticated admin, guest viewing a 404, guest viewing a system error) and delegates appropriately. Each delegated view has a narrow responsibility. This paves the way for us to add new error views per module. For example, the rest module will define its own template in Rest_Exception and then its exceptions can be rendered the way that it wants (json encoded, in that case). | |||
| 2010-06-19 | single -> double quotes. | Bharat Mediratta | |
| 2010-06-12 | Make login/logout continuation url code consistent. Where necessary, | Bharat Mediratta | |
| we specify the continue_url in the session, but we store it in the login form so that we can propagate it across the session creation that happens at login time. | |||
| 2010-05-14 | Fix-ups for d98b85f7d3142676e6b4f407a18ed81564823f88 | Bharat Mediratta | |
| - Pass the CSS selector of the active image in as an arg to site_menu so that quick operations know what they're operating on. - Change the ids from g-{photo,movie}-id to the generic g-item-id - Initialize ajax handlers for site menu on the photo and movie page - Drop the movie context menu, it's now in the site menu | |||
| 2010-04-10 | Fix a bug introduced when we patched the "disallowed global data" | Bharat Mediratta | |
| security check. Not sure why the patch worked for some and not for others, but this should resolve it either way. Fixes ticket #1123. | |||
| 2010-03-03 | Update the copyright to 2010. It's only 3 months into the year :-) | Bharat Mediratta | |
| 2010-02-28 | First step towards fixing ticket #1038: Allowing for custom page <title> in ↵ | Andy Staudacher | |
| admin pages, just like in non-admin pages. TODO: Set $view->page_title in the many admin controllers we have. I just set it for admin_maintenance.php to show how it's intended to be used. I copied the title from views/admin_maintenance.html.php to the controller. | |||
| 2010-02-27 | Fix for ticket #1036 - Don't echo any sensitive information such as ↵ | Andy Staudacher | |
| passwords, hashes or personally identifiable information. | |||
| 2010-02-24 | Fix for ticket #1034: Fix db cache driver delete() call which was missed in ↵ | Andy Staudacher | |
| a recent refactoring / fix. | |||
| 2010-02-23 | Fix translation cache for installations with 0 translations in the DB. | Andy Staudacher | |
| 2010-02-22 | Merge commit 'upstream/master' | Andy Staudacher | |
| 2010-02-21 | Performance improvement: Load all translations of a locale as one serialized ↵ | Andy Staudacher | |
| array from the Cache. Until now, we loaded hundreds of translation messages row by row, and unserializing one by one at bootstrap time. That amounted to a significant percentage of the complete request time. This approach is more than 10x faster. | |||
| 2010-02-21 | Fix delete() function of DB based Cache driver. It expected a scalar key / ↵ | Andy Staudacher | |
| tag value, but it was always an array of keys / tags. (compare to system/libraries/Cache.php and the File.php driver) | |||
| 2010-02-21 | Add Menu::add_before() | Bharat Mediratta | |
| 2010-02-18 | Revert "Fix for ticket #1017: Handle the common case of t(html::clean($var)) ↵ | Bharat Mediratta | |
| by casting SafeString instances to string in translate()." This reverts commit 4ca55a90ee2f8e1d8595b0ec53a601d6c65475f6. | |||
| 2010-02-18 | Improve setlocale() call, using some of G2's locale fallback code to match ↵ | Andy Staudacher | |
| the platform's locale names. | |||
| 2010-02-16 | Fix for ticket #1017: Handle the common case of t(html::clean($var)) by ↵ | Andy Staudacher | |
| casting SafeString instances to string in translate(). | |||
| 2010-02-14 | Need to allow access to ::change_provider for CLI, to make packager work. | Andy Staudacher | |
| 2010-02-14 | Minor security tightening of IdentityProvider::change_provider(). | Andy Staudacher | |
| 2010-02-14 | Some HTML validation fixes (don't render empty <ul> lists, empty id ↵ | Andy Staudacher | |
| attributes, use & not &) | |||
| 2010-02-12 | Fix for tickets 1009 and 603: Show a themed error page to guests / ↵ | Andy Staudacher | |
| registered users (not to admins though). And show a login form to guests for 404 (incl. insufficient view permissions) errors. | |||
| 2010-02-08 | Override Input::clean_input_keys() to sanitize malicious values out of | Bharat Mediratta | |
| strings instead of dying. This at least gives us graceful degradation. Fixes ticket #764, patch thanks to djnz. | |||
| 2010-02-07 | Remove the redundant reference to ["force_rtl". | Tim Almdal | |
| 2010-02-07 | Refactor the is_rtl() helper into the Gallery_I18n class. This allows checking | Tim Almdal | |
| for a config value "force_rtl" which will layout the gallery pages in rtl mode without having to change to an language that is no longer understandable to the developer. Adding the line "$config['force_rtl'] = true;" to the config/locales.php file will make it happen. | |||
| 2010-02-07 | Add prefix support for the target of RENAME TABLE. | Bharat Mediratta | |
| 2010-01-31 | Fix lots of warnings that pop up when we're in E_STRICT mode. They're | Bharat Mediratta | |
| mostly issues around uninitialized variables, calling non-static functions in a static context, calling Session functions directly instead of on its singleton, passing non-variables by reference, and subclasses not using the same interface as the parent class. | |||
| 2010-01-30 | Dump out validation errors so that we have some extra information in the logs. | Bharat Mediratta | |
| 2010-01-29 | Stop using obsolete form::close() | Bharat Mediratta | |
| Update the way we include the hidden CSRF field for InPlaceEdit. | |||
| 2010-01-28 | Use identity::set_active_user() instead of auth::login() when we | Bharat Mediratta | |
| change providers otherwise the user_installer code is going to be calling auth::login() which causes all kinds of unexpected weirdness, like it triggers the handler in gallery_event which detects graphics toolkits, and that's only supposed to run on the first admin login. | |||
| 2010-01-27 | Convert back to using ORM::factory(..., $id) instead of calling where(). | Bharat Mediratta | |
| 2010-01-25 | Make only one attempt to restore the old identity provider in case of | Bharat Mediratta | |
| failure. Else, we can get into an infinite recursion. | |||
| 2010-01-23 | Merge branch 'master' of git@github.com:gallery/gallery3 into bharat_dev | Bharat Mediratta | |
| Conflicts: modules/gallery/tests/xss_data.txt | |||
| 2010-01-23 | Add a user_menu method to the Admin_View and then use this method to get the | Tim Almdal | |
| user menu. Since the information displayed is identical in both admin and theme views, it makes sense to combine the generation to it is done in a common location. | |||
| 2010-01-22 | Trap any errors that may occur when trying to install a new identity ↵ | Tim Almdal | |
| provider and then reinstall the current one. | |||
| 2010-01-22 | Refactor the identity provider installation in to a common helper method ↵ | Tim Almdal | |
| (change_provider) with an initialization callback. | |||
| 2010-01-20 | Make move_to protected since we don't want folks calling it on | Bharat Mediratta | |
| Item_Model. If there's a need to make this public, we should override it in Item_Model and throw an exception there. | |||
| 2010-01-20 | Oops, bug in save() -- we weren't returning the saved value! | Bharat Mediratta | |
| 2010-01-20 | Delete MY_ORM::original(). We did not have proper containment to | Bharat Mediratta | |
| generate $original when we needed it, resulting in inconsistent behavior. | |||
| 2010-01-18 | Whitespace. | Bharat Mediratta | |
| 2010-01-18 | Switch from ORM_MPTT::$db_builder to db::build(). | Bharat Mediratta | |
| 2010-01-18 | in move_to(), move the lock to before we do any calculations so that we have ↵ | Bharat Mediratta | |
| the latest data. | |||
 |
index : gallery3.git | |
| A clone of the Gallery3 code for testing and development. | root |
| summaryrefslogtreecommitdiff |