Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-02-14 | Create an items REST collection requests that accepts a list of resource ↵ | Tim Almdal | |
urls and returns the items associated with them. | |||
2010-02-14 | Remove the dirty flags from the information returned from the rest request ↵ | Tim Almdal | |
for an item. In addition, add links to the images. | |||
2010-02-14 | Change JavaScript reauthentication check to check via XHR. | Andy Staudacher | |
Benefit: Getting the real deadline this way, not interfering with an ongoing maintenance task. | |||
2010-02-14 | HTML validation fix (<script>) | Andy Staudacher | |
2010-02-14 | Some HTML validation fixes (don't render empty <ul> lists, empty id ↵ | Andy Staudacher | |
attributes, use & not &) | |||
2010-02-14 | For consistency, use straight Kohana_404_Exception instead of the event system. | Andy Staudacher | |
2010-02-12 | Tighten up the text. | Bharat Mediratta | |
2010-02-12 | Fix for tickets 1009 and 603: Show a themed error page to guests / ↵ | Andy Staudacher | |
registered users (not to admins though). And show a login form to guests for 404 (incl. insufficient view permissions) errors. | |||
2010-02-12 | Revert "1) Add a depth parameter to retrieving an item thru the rest api" | Bharat Mediratta | |
This reverts commit 3439671bcfb99c1884285e4b4e53295f044e688f. | |||
2010-02-12 | 1) Add a depth parameter to retrieving an item thru the rest api | Tim Almdal | |
2) Standardize the structure of members so that client programs can consistently parse the return information. 3) Added a summary parameter so that client programs can easily determine if the information returned is summary (item type, item title) or the full meal deal | |||
2010-02-11 | Security: Fix leaking of album / photo names. Reject previous fix for ticket ↵ | Andy Staudacher | |
1009. Side effect: Renaming auth::required_login() to login_page(). | |||
2010-02-11 | Use the admin/users/edit_user_form version of the user editing form | Bharat Mediratta | |
right after initial install so that we're not requiring the user to re-enter the auto-generated password to change their password and email. Fixes ticket #1007 | |||
2010-02-10 | Refactor the code to display the login page if the user does not have view | Tim Almdal | |
permission into the common auth::require_login() method. | |||
2010-02-10 | If the user does not have permission to view the album, photo or movie, redirect | Tim Almdal | |
to a logon page to allow the user to login. Pass the target url as a session variable to allow the user to be redirected where they want to go if the login was successful. Fixes ticket #1009. | |||
2010-02-10 | Use the helper ulr:current instead of manually creating the continue url. | Tim Almdal | |
2010-02-09 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-09 | Formated upgrader for RTL languages. Closes ticket #883 | Chad Kieffer | |
2010-02-09 | Rename item name and slug if necessary to avoid a conflict when we | Bharat Mediratta | |
move photos. Fixes ticket #957. | |||
2010-02-09 | Whitespace. | Bharat Mediratta | |
2010-02-09 | Add unit tests for item::move() in preparation for renaming when there | Bharat Mediratta | |
are conflicts (see ticket #957) | |||
2010-02-08 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-08 | Change admin area timeout from 20 to 90 minutes | Andy Staudacher | |
2010-02-08 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-08 | Override Input::clean_input_keys() to sanitize malicious values out of | Bharat Mediratta | |
strings instead of dying. This at least gives us graceful degradation. Fixes ticket #764, patch thanks to djnz. | |||
2010-02-08 | Suppress errors when checking for readability of /proc/loadavg. Often this ↵ | Andy Staudacher | |
file will be protected by openbasedir, and is_readable will trigger an open basedir warning. | |||
2010-02-08 | Fix for ticket 1008: Redirect to destination after re-auth. | Andy Staudacher | |
2010-02-08 | Fix Arabic language name. Thanks shaibn for reporting the issue. Verified ↵ | Andy Staudacher | |
with CLDR data. | |||
2010-02-07 | Revert "Add the scheduler component to the admin maintenance screen." | Tim Almdal | |
This reverts commit 48cb5021c6bd7e65a13a0ff50a9e76f72da7d3a1. | |||
2010-02-07 | Revert "Refactor the admin maintenance screen so that events are used to | Tim Almdal | |
populate the action buttons and other content such as the list of scheduled tasks." Leaving this api out of RC1. This reverts commit 19fee6b5e4ceb8a5f90cafe4ad770856ece108ef. Conflicts: modules/gallery/views/admin_maintenance.html.php | |||
2010-02-07 | Change welcome message dialog to link to the user_profile page instead of ↵ | Andy Staudacher | |
the change user dialog. a) the edit user form doesn't include the password anymore b) the new admin would probably also like to change the email, so directing him to the profile page with options to change the pw / email. Ideally, we'd have a special purpose edit profile page for the install experience, without prompting for the randomly generated password. But that's something for another task. | |||
2010-02-07 | Addendum for ticket 585: Handle case C), redirect the admin to a non-admin ↵ | Andy Staudacher | |
page when the admin area session expires, before the admin has a chance to send an XHR admin request, for which we wouldn't have a good answer. | |||
2010-02-07 | Last partial fix for ticket 585: Compartmentalize the admin area and require ↵ | Andy Staudacher | |
active authentication every 20 minutes to access the admin area. Also renaming auth::validate_too_many_failed_password_changes to validate_too_many_failed_auth_attempts since it's used in this generalized way in 3 places now. | |||
2010-02-07 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-07 | Fix installer code for version 27, and introduce new module variable in ↵ | Andy Staudacher | |
version 28 as a preparation for admin area compartmentalization. | |||
2010-02-07 | Remove the redundant reference to ["force_rtl". | Tim Almdal | |
2010-02-07 | Merge branch 'master' of git@github.com:gallery/gallery3 | Tim Almdal | |
2010-02-07 | Refactor the is_rtl() helper into the Gallery_I18n class. This allows checking | Tim Almdal | |
for a config value "force_rtl" which will layout the gallery pages in rtl mode without having to change to an language that is no longer understandable to the developer. Adding the line "$config['force_rtl'] = true;" to the config/locales.php file will make it happen. | |||
2010-02-07 | Rename user_authenticate_xxx events to user_auth_xxx for brevity. | Bharat Mediratta | |
2010-02-07 | Create the concept of a "failed authentication" as semantically | Bharat Mediratta | |
separate from a successful or failed login. 1) Rename user_login_failed event to user_authenticate_failed 2) Rename failed_logins table to failed_auth (bump Gallery module to v27 to rename the table) 3) auth::too_many_failed_logins -> auth::too_many_failures 4) auth::record_failed_auth_attempts -> auth::record_failed_attempts auth::clear_failed_auth_attempts -> auth::clear_failed_attempts | |||
2010-02-07 | Add prefix support for the target of RENAME TABLE. | Bharat Mediratta | |
2010-02-06 | Fix ticket 930: Use the first frame as video thumbnail if the video is ↵ | Andy Staudacher | |
shorter than 3 seconds. And fall back to the default thumbnail if that operation fails. Thanks to lsowen for providing a patch! | |||
2010-02-06 | Partial fix for ticket 585: Require current password when changing an ↵ | Andy Staudacher | |
account's email address. Still leaving the user/group admin page wide open though. | |||
2010-02-06 | Fix for ticket 1004: Replace all uses of split with explode (none actually ↵ | Andy Staudacher | |
required regular expressions). Thanks to Brian Hartsock for providing a patch! | |||
2010-02-06 | Fix for ticket 892: Avoid double escaping of HTML entities, instead use ↵ | Andy Staudacher | |
Unicode in the source code for the locale names (as we do in other places already). Note: Also fixing the localized name of Ukrainian. For some reason it was garbled before. | |||
2010-02-06 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-03 | Correct missing function name. | Tim Almdal | |
2010-02-02 | Protect password changes against brute force attacks. | Bharat Mediratta | |
2010-02-02 | Require the current password to change your password. | Bharat Mediratta | |
Fixes ticket #585. Separate out the password change form from the regular edit user form. Require the old password to enter a new one. While I'm at it, roll the password strength javascript into a Form_Script element so that we can get rid of the old view (which incidentally fixes a bug where the password strength meter would go away on form errors). | |||
2010-02-02 | Add an upgrade path to prevent the item title field from being empty. | Bharat Mediratta | |
2010-02-02 | Merge branch 'master' of git@github.com:gallery/gallery3 | Bharat Mediratta | |