summaryrefslogtreecommitdiff
path: root/modules/gallery/libraries
AgeCommit message (Collapse)Author
2010-06-19Rework our exception framework to fit into Kohana's model better.Bharat Mediratta
Instead of overwriting Kohana_Exception::handle() (which we were doing in MY_Kohana_Exception) we instead use their existing template system. gallery/views/kohana/error.php overrides system/views/kohana/error.php and is the standard error template for all exceptions. Our version of error.php figures out the appropriate view based on context (cli, authenticated admin, guest viewing a 404, guest viewing a system error) and delegates appropriately. Each delegated view has a narrow responsibility. This paves the way for us to add new error views per module. For example, the rest module will define its own template in Rest_Exception and then its exceptions can be rendered the way that it wants (json encoded, in that case).
2010-06-19single -> double quotes.Bharat Mediratta
2010-06-12Make login/logout continuation url code consistent. Where necessary,Bharat Mediratta
we specify the continue_url in the session, but we store it in the login form so that we can propagate it across the session creation that happens at login time.
2010-05-14Fix-ups for d98b85f7d3142676e6b4f407a18ed81564823f88Bharat Mediratta
- Pass the CSS selector of the active image in as an arg to site_menu so that quick operations know what they're operating on. - Change the ids from g-{photo,movie}-id to the generic g-item-id - Initialize ajax handlers for site menu on the photo and movie page - Drop the movie context menu, it's now in the site menu
2010-04-10Fix a bug introduced when we patched the "disallowed global data"Bharat Mediratta
security check. Not sure why the patch worked for some and not for others, but this should resolve it either way. Fixes ticket #1123.
2010-03-03Update the copyright to 2010. It's only 3 months into the year :-)Bharat Mediratta
2010-02-28First step towards fixing ticket #1038: Allowing for custom page <title> in ↵Andy Staudacher
admin pages, just like in non-admin pages. TODO: Set $view->page_title in the many admin controllers we have. I just set it for admin_maintenance.php to show how it's intended to be used. I copied the title from views/admin_maintenance.html.php to the controller.
2010-02-27Fix for ticket #1036 - Don't echo any sensitive information such as ↵Andy Staudacher
passwords, hashes or personally identifiable information.
2010-02-24Fix for ticket #1034: Fix db cache driver delete() call which was missed in ↵Andy Staudacher
a recent refactoring / fix.
2010-02-23Fix translation cache for installations with 0 translations in the DB.Andy Staudacher
2010-02-22Merge commit 'upstream/master'Andy Staudacher
2010-02-21Performance improvement: Load all translations of a locale as one serialized ↵Andy Staudacher
array from the Cache. Until now, we loaded hundreds of translation messages row by row, and unserializing one by one at bootstrap time. That amounted to a significant percentage of the complete request time. This approach is more than 10x faster.
2010-02-21Fix delete() function of DB based Cache driver. It expected a scalar key / ↵Andy Staudacher
tag value, but it was always an array of keys / tags. (compare to system/libraries/Cache.php and the File.php driver)
2010-02-21Add Menu::add_before()Bharat Mediratta
2010-02-18Revert "Fix for ticket #1017: Handle the common case of t(html::clean($var)) ↵Bharat Mediratta
by casting SafeString instances to string in translate()." This reverts commit 4ca55a90ee2f8e1d8595b0ec53a601d6c65475f6.
2010-02-18Improve setlocale() call, using some of G2's locale fallback code to match ↵Andy Staudacher
the platform's locale names.
2010-02-16Fix for ticket #1017: Handle the common case of t(html::clean($var)) by ↵Andy Staudacher
casting SafeString instances to string in translate().
2010-02-14Need to allow access to ::change_provider for CLI, to make packager work.Andy Staudacher
2010-02-14Minor security tightening of IdentityProvider::change_provider().Andy Staudacher
2010-02-14Some HTML validation fixes (don't render empty <ul> lists, empty id ↵Andy Staudacher
attributes, use &amp; not &)
2010-02-12Fix for tickets 1009 and 603: Show a themed error page to guests / ↵Andy Staudacher
registered users (not to admins though). And show a login form to guests for 404 (incl. insufficient view permissions) errors.
2010-02-08Override Input::clean_input_keys() to sanitize malicious values out ofBharat Mediratta
strings instead of dying. This at least gives us graceful degradation. Fixes ticket #764, patch thanks to djnz.
2010-02-07Remove the redundant reference to ["force_rtl".Tim Almdal
2010-02-07Refactor the is_rtl() helper into the Gallery_I18n class. This allows checkingTim Almdal
for a config value "force_rtl" which will layout the gallery pages in rtl mode without having to change to an language that is no longer understandable to the developer. Adding the line "$config['force_rtl'] = true;" to the config/locales.php file will make it happen.
2010-02-07Add prefix support for the target of RENAME TABLE.Bharat Mediratta
2010-01-31Fix lots of warnings that pop up when we're in E_STRICT mode. They'reBharat Mediratta
mostly issues around uninitialized variables, calling non-static functions in a static context, calling Session functions directly instead of on its singleton, passing non-variables by reference, and subclasses not using the same interface as the parent class.
2010-01-30Dump out validation errors so that we have some extra information in the logs.Bharat Mediratta
2010-01-29Stop using obsolete form::close()Bharat Mediratta
Update the way we include the hidden CSRF field for InPlaceEdit.
2010-01-28Use identity::set_active_user() instead of auth::login() when weBharat Mediratta
change providers otherwise the user_installer code is going to be calling auth::login() which causes all kinds of unexpected weirdness, like it triggers the handler in gallery_event which detects graphics toolkits, and that's only supposed to run on the first admin login.
2010-01-27Convert back to using ORM::factory(..., $id) instead of calling where().Bharat Mediratta
2010-01-25Make only one attempt to restore the old identity provider in case ofBharat Mediratta
failure. Else, we can get into an infinite recursion.
2010-01-23Merge branch 'master' of git@github.com:gallery/gallery3 into bharat_devBharat Mediratta
Conflicts: modules/gallery/tests/xss_data.txt
2010-01-23Add a user_menu method to the Admin_View and then use this method to get theTim Almdal
user menu. Since the information displayed is identical in both admin and theme views, it makes sense to combine the generation to it is done in a common location.
2010-01-22Trap any errors that may occur when trying to install a new identity ↵Tim Almdal
provider and then reinstall the current one.
2010-01-22Refactor the identity provider installation in to a common helper method ↵Tim Almdal
(change_provider) with an initialization callback.
2010-01-20Make move_to protected since we don't want folks calling it onBharat Mediratta
Item_Model. If there's a need to make this public, we should override it in Item_Model and throw an exception there.
2010-01-20Oops, bug in save() -- we weren't returning the saved value!Bharat Mediratta
2010-01-20Delete MY_ORM::original(). We did not have proper containment toBharat Mediratta
generate $original when we needed it, resulting in inconsistent behavior.
2010-01-18Whitespace.Bharat Mediratta
2010-01-18Switch from ORM_MPTT::$db_builder to db::build().Bharat Mediratta
2010-01-18in move_to(), move the lock to before we do any calculations so that we have ↵Bharat Mediratta
the latest data.
2010-01-17Change IdentityProvider::create_user() to take $email as well, since that's ↵Bharat Mediratta
a required parameter for the Gallery driver.
2010-01-17If we call original() and there's no $original yet, then consider thisBharat Mediratta
to be the original. That should be safe because we're already guarding __set, __unset and save.
2010-01-16Get rid of add_rules_from() -- it's no longer necessary now that we're doing ↵Bharat Mediratta
model based validation.
2010-01-16Merge branch 'master' of git@github.com:gallery/gallery3 into bharat_devBharat Mediratta
Conflicts: modules/gallery/models/item.php
2010-01-15Revert "Fix for ticket #978. Don't reset the original property as part of ↵Bharat Mediratta
the save processing, because that will overwrite the original values with all the new values. The problem with the original approach is that when changed event handlers used ->original(), it had already been reset as part of the save processing. Went back and forth on either leaving this alone and forcing callers to save the original prior to calling the save function, but there were a few event handlers that used ->original(). This seemed the easier change. So to reset the original you need to call reload() or clear(). There is now an optional parameter on the reload to only reload the original." This reverts commit daeaca110d16128040c86727c65df225e957f7c6.
2010-01-15Revert "Did the old commit then save trick"Bharat Mediratta
This reverts commit e41ad23a8ea05d28a99d12c01d8f317455b1d361.
2010-01-15Merge branch 'master' of git@github.com:gallery/gallery3 into bharat_devBharat Mediratta
2010-01-15Call parent::save() before releasing the lock to make creating the hole and ↵Bharat Mediratta
filling it an atomic operation.
2010-01-15Move model business logic out of album::create() and intoBharat Mediratta
Item_Model::save(). This makes creating albums similar to editing them and makes it difficult to create an album poorly. I expect to be able to remove a lot of code from the photo and movie helper because it's duplicated here. In order to do this, I refactored ORM_MPTT::add_to_parent() into ORM_MPTT::save() so we now add it to the parent when we do save. This allows us to call save() only once which saves a database call per add. The Albums_Controller logic is roughly the same as before. Haven't updated the tests yet, they're going to fail miserably since many of them depend on album::create() which is now gone.