summaryrefslogtreecommitdiff
path: root/modules/search
AgeCommit message (Collapse)Author
2009-10-24Merge branch 'master' into talmdal_devTim Almdal
2009-10-24When doing a search we need to "OR" the view permissions not "AND" them. ↵Tim Almdal
Fixes ticket #805.
2009-10-22Change the name of identity library from Identity to IdentityProvider. ↵Tim Almdal
Create a helper class called identity to simplify call the Identity Provider. Move the contents of MY_Session.php to the new helper class and remove the MY_Session class
2009-10-16Remove all non Identity API methods from Identity.php. Created an ↵Tim Almdal
MY_Session class to provide the user state changes in the session and a login.php helper that has the login form.
2009-10-16Start simplifying the interface by moving the static methods from user.php ↵Tim Almdal
and group.php. Tried creating a identity helper, but the helper identity.php was confused with the library Identity.php. So got around this by making the methods on Identity static and calling the instance within the static methods. Also temporarily moved the user.php and group.php back into the user module.
2009-10-16Apply g-short-form directly to short forms rather than via JS. Comment ↵Chad Kieffer
updates in ui.init.js.
2009-10-16Apply g-short-form directly to short forms rather than via JS. Comment ↵Chad Kieffer
updates in ui.init.js.
2009-10-11Use SQL_CALC_FOUND_ROWS instead of doing the search twice, for better ↵Bharat Mediratta
performance. Fixes ticket #835, thanks Joe7!
2009-10-04Fixed previous over zealous find and replace.Chad Kieffer
2009-10-04Renamed most, if not all css selectors from gName to g-name. Moved a few ↵Chad Kieffer
shared images from wind to lib. Deleted unused images in the admin_wind. This will likely break a few ajax features.
2009-09-30Convert gDialog and gCancel over to g-dialog and g-cancel. Refactor CSS id's ↵Chad Kieffer
and classes in the login/reset password dialog.
2009-09-17Remove the update code introduced with 9d7d79. In addition, captialize ↵Tim Almdal
MyISAM correctly.
2009-09-16Changed the search module installer to explicitly specify MyISAM as the ↵Tim Almdal
database type. Changed the packager to not remove the engine specification if the table is search_records. Fixes Ticket #774
2009-09-08Move specialized (pretty) url generation back into Item_Model so thatBharat Mediratta
we're not relying on overriding url::site() to do tricks around item urls. This means that you won't get item urls by doing url::site("albums/37"), for example, but it also means that we won't get pretty urls where we don't expect them (like in the action of a <form> element). Incidentally, this will help us move over to using the slug format because if you've got a bad character in a url, the edit forms will now work on it since they'll be id based.
2009-08-31Fix XSS vectors in HTML attributes (mostly t() calls)Andy Staudacher
2009-08-31Rename mark_safe() to mark_clean()Andy Staudacher
2009-08-30Merge commit 'upstream/master'Andy Staudacher
Conflicts: modules/gallery/views/l10n_client.html.php modules/organize/views/organize_tree.html.php modules/server_add/helpers/server_add_event.php
2009-08-30Change the processing time for search_task and exif_task to start theBharat Mediratta
1.5 second counter only after we've done any expensive queries. This guarantees at least some time to do work. Fixes ticket #693.
2009-08-30Change all instances of SafeString::of_safe_html() to html::mark_safe() in ↵Andy Staudacher
views.
2009-08-29Update all code to use helper method html::clean(), html::purify(), ... ↵Andy Staudacher
instead of SafeString directly.
2009-08-29Undo url helper changes - url methods no longer return a SafeString.Andy Staudacher
Adding SafeString::of_safe_html() calls where urls are passed as parameters to t() and t2().
2009-08-29Merge commit 'upstream/master'Andy Staudacher
Conflicts: modules/akismet/views/admin_akismet.html.php modules/comment/helpers/comment_rss.php modules/gallery/helpers/gallery_rss.php modules/gallery/libraries/I18n.php modules/gallery/views/permissions_browse.html.php modules/gallery/views/simple_uploader.html.php modules/info/views/info_block.html.php modules/organize/controllers/organize.php modules/organize/views/organize.html.php modules/organize/views/organize_album.html.php themes/default/views/album.html.php themes/default/views/movie.html.php themes/default/views/photo.html.php
2009-08-29Refactor all calls of p::clean() to SafeString::of() and p::purify() to ↵Andy Staudacher
SafeString::purify(). Removing any p::clean() calls for arguments to t() and t2() since their args are wrapped in a SafeString anyway.
2009-08-27Remove 'ENGINE=InnoDB' specification from tables that we create. UseBharat Mediratta
the system's default table specification. Fixes ticket #597.
2009-08-08Update tags module to notify modules when items related to a tag areBharat Mediratta
affected. Practically speaking this means that we'll reindex items when tags are added or removed from them. API change: Remove item_related_updated_batch event. Rationale: While this is an efficient event, it requires module developers to support two event APIs for staying up to date and increases the likelihood that they'll forget one and have data corruption. Force them all through the slower but more reliable pipe, for now. We can always try to improve efficiency by using the batch_start and batch_stop events.
2009-08-02Change the API for getting to the original state of an ORM.Bharat Mediratta
Old API: $obj->original("field_name") New API: $obj->original()->field_name This allows us to revert the varous xxx_updated events back to passing an original ORM as well as the the updated one. This makes for a cleaner event API. Old API: comment_updated($comment) { $comment->original("field_name") } Old API: comment_updated($old, $new) { $old->field_name }
2009-07-30Remove debugging print statement in search.phpTim Almdal
Signed-off-by: Tim Almdal <tnalmdal@shaw.ca>
2009-07-28Change search callbacks to use the event system, so move them out ofBharat Mediratta
xxx_search helpers and into xxx_event helpers.
2009-07-23Use BOOLEAN instead of integer to describe the permissions :Romain LE DISEZ
- DENY = false - ALLOW = true - UNKNOW = null (for intent only) - INHERIT = null (for cache) Upgrade is not included for now. (cherry picked from commit 719c59e0402464a0e2b14915f6d10218ff5d4729)
2009-07-19Remove success logging. Only log on errors, otherwise the log is huge.Bharat Mediratta
2009-07-16Non-trivial changes to the event handling code:Bharat Mediratta
1) The item_updated event no longer takes the old and new items. Instead we overload ORM to track the original data and make that available via the item. This will allow us to move event publishing down into the API methods which in turn will give us more stability since we won't require each controller to remember to do it. 2) ORM class now tracks the original values. It doesn't track the original relationships (no need for that, yet) 3) Added new events: item_deleted group_deleted user_deleted
2009-07-13Add quotes around all values that contain spaces in them, and add aBharat Mediratta
test to make sure that we continue to do so. This makes sure that we don't have problems with 5.3 which treats the literal "on" as a boolean.
2009-07-10Fix a bug where the task message was not being setTim Almdal
2009-07-09Revert "Revert "Add task logging to the "Update Search Index" task""Tim Almdal
This reverts commit 5118afc959650469874733a1060fbe22364d8c28.
2009-07-09Revert "Add task logging to the "Update Search Index" task"Tim Almdal
This reverts commit 6ac5238b83d58824eb9327406a2ee50b7e603214.
2009-07-08Add task logging to the "Update Search Index" taskTim Almdal
2009-07-07Revert "Forgot this when i was cleaning up for ticket #519"Tim Almdal
This reverts commit 31969a1d8211187e415eac51d155b4efded365f3.
2009-07-07Forgot this when i was cleaning up for ticket #519Tim Almdal
2009-07-04Fix for ticket #477. Use nl2br method when rendering comment::text andTim Almdal
item::description. In addition add p::clean or p::purify to places that xss cleaning had missed (i.e. rss feeds)
2009-07-03Split the clean method into two clean and purify. clean is a light weightTim Almdal
approach using html::specialchars and purify uses HTMLPurifier to intelligently cleanse the output fields. Use purifier for text and title fields where it is likely that a user would enter html to format their data.
2009-06-24SQL is case insensitiveRomain LE DISEZ
Signed-off-by: Bharat Mediratta <bharat@menalto.com>
2009-06-24Improve compatibility with other RDBMSRomain LE DISEZ
Signed-off-by: Bharat Mediratta <bharat@menalto.com>
2009-06-23Refactor the install/upgrade code to be more flexible.Bharat Mediratta
Add xxx_installer::upgrade($version) method so that upgrade stanzas are separate from install stanzas. In the old code, to do an upgrade meant that you had to re-evolve everything from the initial install because we'd step through each version's changes. But what we really want is for the initial install to start off in the perfect initial state, and the upgrades to do the work behind the scenes. So now the install() function gets things set up properly the first time, and the upgrade() function does any work to catch you up to the latest code. See gallery_installer.php for a good example.
2009-06-02Fix for ticket #320Tim Almdal
2009-05-31Run p::clean() on any variables that contain data entered by users.Bharat Mediratta
2009-05-27Update all references to the core application to now point to theBharat Mediratta
gallery module. This type of mass update is prone to some small bugs.
2009-05-26clean up whitespace errors introduced in last commitBharat Mediratta
2009-05-26Restructure the module lifecycle.Bharat Mediratta
Install: <module>_installer::install() is called, any necessary tables are created. Activate: <module>_installer::activate() is called. Module controllers are routable, helpers are accessible, etc. The module is in use. Deactivate: <module>_installer::deactivate() is called. Module code is not accessible or routable. Module is *not* in use, but its tables are still around. Uninstall: <module>_installer::uninstall() is called. Module is completely removed from the database. Admin > Modules will install and activate modules, but will only deactivate (will NOT uninstall modules).
2009-05-20Avoid complex inserts in available_tasks() to make admin/maintenanceBharat Mediratta
run faster. This fixes ticket #235. Incidentally, refactor exif and search to use the same patterns overall so that if you understand one, you understand the other and they generally use the same strings for localization.
2009-05-13Gee it's May already. Update copyright to 2009.Bharat Mediratta