summaryrefslogtreecommitdiff
path: root/modules/gallery
AgeCommit message (Collapse)Author
2010-02-14Create an items REST collection requests that accepts a list of resource ↵Tim Almdal
urls and returns the items associated with them.
2010-02-14Remove the dirty flags from the information returned from the rest request ↵Tim Almdal
for an item. In addition, add links to the images.
2010-02-14Change JavaScript reauthentication check to check via XHR.Andy Staudacher
Benefit: Getting the real deadline this way, not interfering with an ongoing maintenance task.
2010-02-14HTML validation fix (<script>)Andy Staudacher
2010-02-14Some HTML validation fixes (don't render empty <ul> lists, empty id ↵Andy Staudacher
attributes, use &amp; not &)
2010-02-14For consistency, use straight Kohana_404_Exception instead of the event system.Andy Staudacher
2010-02-12Tighten up the text.Bharat Mediratta
2010-02-12Fix for tickets 1009 and 603: Show a themed error page to guests / ↵Andy Staudacher
registered users (not to admins though). And show a login form to guests for 404 (incl. insufficient view permissions) errors.
2010-02-12Revert "1) Add a depth parameter to retrieving an item thru the rest api"Bharat Mediratta
This reverts commit 3439671bcfb99c1884285e4b4e53295f044e688f.
2010-02-121) Add a depth parameter to retrieving an item thru the rest apiTim Almdal
2) Standardize the structure of members so that client programs can consistently parse the return information. 3) Added a summary parameter so that client programs can easily determine if the information returned is summary (item type, item title) or the full meal deal
2010-02-11Security: Fix leaking of album / photo names. Reject previous fix for ticket ↵Andy Staudacher
1009. Side effect: Renaming auth::required_login() to login_page().
2010-02-11Use the admin/users/edit_user_form version of the user editing formBharat Mediratta
right after initial install so that we're not requiring the user to re-enter the auto-generated password to change their password and email. Fixes ticket #1007
2010-02-10Refactor the code to display the login page if the user does not have viewTim Almdal
permission into the common auth::require_login() method.
2010-02-10If the user does not have permission to view the album, photo or movie, redirectTim Almdal
to a logon page to allow the user to login. Pass the target url as a session variable to allow the user to be redirected where they want to go if the login was successful. Fixes ticket #1009.
2010-02-10Use the helper ulr:current instead of manually creating the continue url.Tim Almdal
2010-02-09Merge branch 'master' of github.com:gallery/gallery3Bharat Mediratta
2010-02-09Formated upgrader for RTL languages. Closes ticket #883Chad Kieffer
2010-02-09Rename item name and slug if necessary to avoid a conflict when weBharat Mediratta
move photos. Fixes ticket #957.
2010-02-09Whitespace.Bharat Mediratta
2010-02-09Add unit tests for item::move() in preparation for renaming when thereBharat Mediratta
are conflicts (see ticket #957)
2010-02-08Merge commit 'upstream/master'Andy Staudacher
2010-02-08Change admin area timeout from 20 to 90 minutesAndy Staudacher
2010-02-08Merge branch 'master' of github.com:gallery/gallery3Bharat Mediratta
2010-02-08Override Input::clean_input_keys() to sanitize malicious values out ofBharat Mediratta
strings instead of dying. This at least gives us graceful degradation. Fixes ticket #764, patch thanks to djnz.
2010-02-08Suppress errors when checking for readability of /proc/loadavg. Often this ↵Andy Staudacher
file will be protected by openbasedir, and is_readable will trigger an open basedir warning.
2010-02-08Fix for ticket 1008: Redirect to destination after re-auth.Andy Staudacher
2010-02-08Fix Arabic language name. Thanks shaibn for reporting the issue. Verified ↵Andy Staudacher
with CLDR data.
2010-02-07Revert "Add the scheduler component to the admin maintenance screen."Tim Almdal
This reverts commit 48cb5021c6bd7e65a13a0ff50a9e76f72da7d3a1.
2010-02-07Revert "Refactor the admin maintenance screen so that events are used toTim Almdal
populate the action buttons and other content such as the list of scheduled tasks." Leaving this api out of RC1. This reverts commit 19fee6b5e4ceb8a5f90cafe4ad770856ece108ef. Conflicts: modules/gallery/views/admin_maintenance.html.php
2010-02-07Change welcome message dialog to link to the user_profile page instead of ↵Andy Staudacher
the change user dialog. a) the edit user form doesn't include the password anymore b) the new admin would probably also like to change the email, so directing him to the profile page with options to change the pw / email. Ideally, we'd have a special purpose edit profile page for the install experience, without prompting for the randomly generated password. But that's something for another task.
2010-02-07Addendum for ticket 585: Handle case C), redirect the admin to a non-admin ↵Andy Staudacher
page when the admin area session expires, before the admin has a chance to send an XHR admin request, for which we wouldn't have a good answer.
2010-02-07Last partial fix for ticket 585: Compartmentalize the admin area and require ↵Andy Staudacher
active authentication every 20 minutes to access the admin area. Also renaming auth::validate_too_many_failed_password_changes to validate_too_many_failed_auth_attempts since it's used in this generalized way in 3 places now.
2010-02-07Merge commit 'upstream/master'Andy Staudacher
2010-02-07Fix installer code for version 27, and introduce new module variable in ↵Andy Staudacher
version 28 as a preparation for admin area compartmentalization.
2010-02-07Remove the redundant reference to ["force_rtl".Tim Almdal
2010-02-07Merge branch 'master' of git@github.com:gallery/gallery3Tim Almdal
2010-02-07Refactor the is_rtl() helper into the Gallery_I18n class. This allows checkingTim Almdal
for a config value "force_rtl" which will layout the gallery pages in rtl mode without having to change to an language that is no longer understandable to the developer. Adding the line "$config['force_rtl'] = true;" to the config/locales.php file will make it happen.
2010-02-07Rename user_authenticate_xxx events to user_auth_xxx for brevity.Bharat Mediratta
2010-02-07Create the concept of a "failed authentication" as semanticallyBharat Mediratta
separate from a successful or failed login. 1) Rename user_login_failed event to user_authenticate_failed 2) Rename failed_logins table to failed_auth (bump Gallery module to v27 to rename the table) 3) auth::too_many_failed_logins -> auth::too_many_failures 4) auth::record_failed_auth_attempts -> auth::record_failed_attempts auth::clear_failed_auth_attempts -> auth::clear_failed_attempts
2010-02-07Add prefix support for the target of RENAME TABLE.Bharat Mediratta
2010-02-06Fix ticket 930: Use the first frame as video thumbnail if the video is ↵Andy Staudacher
shorter than 3 seconds. And fall back to the default thumbnail if that operation fails. Thanks to lsowen for providing a patch!
2010-02-06Partial fix for ticket 585: Require current password when changing an ↵Andy Staudacher
account's email address. Still leaving the user/group admin page wide open though.
2010-02-06Fix for ticket 1004: Replace all uses of split with explode (none actually ↵Andy Staudacher
required regular expressions). Thanks to Brian Hartsock for providing a patch!
2010-02-06Fix for ticket 892: Avoid double escaping of HTML entities, instead use ↵Andy Staudacher
Unicode in the source code for the locale names (as we do in other places already). Note: Also fixing the localized name of Ukrainian. For some reason it was garbled before.
2010-02-06Merge commit 'upstream/master'Andy Staudacher
2010-02-03Correct missing function name.Tim Almdal
2010-02-02Protect password changes against brute force attacks.Bharat Mediratta
2010-02-02Require the current password to change your password.Bharat Mediratta
Fixes ticket #585. Separate out the password change form from the regular edit user form. Require the old password to enter a new one. While I'm at it, roll the password strength javascript into a Form_Script element so that we can get rid of the old view (which incidentally fixes a bug where the password strength meter would go away on form errors).
2010-02-02Add an upgrade path to prevent the item title field from being empty.Bharat Mediratta
2010-02-02Merge branch 'master' of git@github.com:gallery/gallery3Bharat Mediratta